Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/16kyAur3Bk2y4hkR-6Ku47DpjL4.roa
File: 16kyAur3Bk2y4hkR-6Ku47DpjL4.roa (raw, json)
Hash identifier: ERCYUXiH6CKxEM3TCbiMDpwR/gfqx9HdPExYc+Svfwg=
Subject key identifier: D7:A9:32:02:EA:F7:06:4D:B2:E2:19:11:FB:A2:AE:E3:B0:E9:8C:BE
Certificate issuer: /CN=41b502a16de3458db7e830591f2841fd9483c69a
Certificate serial: 01856DB88F36A1ACA143FCE1D0953D2123DF
Authority key identifier: 41:B5:02:A1:6D:E3:45:8D:B7:E8:30:59:1F:28:41:FD:94:83:C6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbUCoW3jRY236DBZHyhB_ZSDxpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/16kyAur3Bk2y4hkR-6Ku47DpjL4.roa
Signing time: Sun 01 Jan 2023 14:24:49 +0000
ROA not before: Sun 01 Jan 2023 14:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60233
IP address blocks: 185.47.252.0/22 maxlen: 24
2a04:5f80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:8f:36:a1:ac:a1:43:fc:e1:d0:95:3d:21:23:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b502a16de3458db7e830591f2841fd9483c69a
Validity
Not Before: Jan 1 14:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7a93202eaf7064db2e21911fba2aee3b0e98cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:1c:50:ae:74:a5:02:9a:33:42:e6:a9:69:
8e:a4:ff:e2:4a:d0:ab:d9:8b:49:5e:01:35:b2:38:
b4:12:13:ce:17:4c:bc:9b:26:a9:cd:8e:56:23:6d:
83:b6:dd:59:a2:f6:39:64:3e:a2:4c:7d:f0:22:33:
10:da:b1:75:90:06:a9:cf:09:20:88:a1:4c:92:1a:
9a:86:9d:40:82:f6:a8:f1:0c:27:b1:2d:a1:34:36:
80:08:45:7f:19:5e:84:2a:c8:0a:f9:37:a2:5a:3a:
6b:ef:2f:5f:18:d8:17:87:7c:70:68:53:87:a4:cb:
e2:52:7e:0c:f9:9d:a2:e4:98:26:3d:91:14:7b:34:
6d:2f:86:87:5a:b1:56:89:34:82:16:7f:f0:a4:79:
e0:fd:ee:d5:e2:d4:5d:fc:fb:a1:00:e5:22:89:08:
ee:c0:78:dd:90:b8:a8:1d:13:04:09:62:b8:77:45:
07:29:92:3a:a6:34:6d:33:ef:b0:0c:92:54:ec:ea:
b8:38:07:ec:4d:c7:61:6d:7a:d0:fe:47:71:6c:73:
8e:d8:ce:55:4d:25:61:ba:d6:5b:8e:61:25:69:d0:
f4:7b:36:33:ac:37:38:d4:75:95:0e:9e:ae:1f:72:
04:2a:18:9a:25:06:ca:47:ec:0f:c4:52:19:9f:39:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A9:32:02:EA:F7:06:4D:B2:E2:19:11:FB:A2:AE:E3:B0:E9:8C:BE
X509v3 Authority Key Identifier:
keyid:41:B5:02:A1:6D:E3:45:8D:B7:E8:30:59:1F:28:41:FD:94:83:C6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbUCoW3jRY236DBZHyhB_ZSDxpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/16kyAur3Bk2y4hkR-6Ku47DpjL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/QbUCoW3jRY236DBZHyhB_ZSDxpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.252.0/22
IPv6:
2a04:5f80::/29
Signature Algorithm: sha256WithRSAEncryption
b3:82:11:d8:63:45:a3:c2:5f:b9:d8:f3:5b:b0:0b:67:f9:75:
8b:60:9f:71:46:16:5e:70:67:d8:77:e0:06:40:3c:7c:00:49:
66:2b:22:2a:21:03:eb:84:4c:53:09:11:cb:1b:2e:66:6f:ad:
d9:8b:62:1c:97:de:26:e9:da:f0:78:13:78:17:1f:dd:fa:22:
c1:64:e5:dc:74:bf:0a:1b:e7:97:31:57:fe:40:26:19:e0:d9:
17:54:ee:71:5c:05:13:b2:37:8b:0e:51:e2:24:d9:ae:06:3a:
20:4a:43:f8:cc:4b:d8:44:07:a6:e7:5f:2a:26:77:8e:2b:a7:
33:01:1c:53:01:12:2a:8b:73:b5:f9:a1:69:25:25:8c:6b:b0:
7a:ad:34:36:b5:95:28:04:71:e9:6d:52:7c:f3:46:23:0e:c8:
ed:b8:21:9d:bb:30:51:db:3d:4f:47:99:ac:18:c2:8c:1d:f6:
54:1c:47:4b:81:19:e3:8f:cd:3c:4d:44:08:86:d0:38:fb:b8:
a8:ce:17:4f:16:ac:28:66:02:e6:85:6c:f5:b2:2e:18:4f:70:
d2:97:91:fa:eb:d5:9a:40:17:6e:35:f4:b3:2c:01:01:f1:cf:
90:23:57:f5:7c:b2:b9:43:14:71:f6:d2:88:49:e7:22:f7:61:
9f:88:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:04 2025 by rpki-client