Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/j_q2-nUmd9u9GtASqUgxATWOvTM.roa
File: j_q2-nUmd9u9GtASqUgxATWOvTM.roa (raw, json)
Hash identifier: u7+z3yMav42+jtVVr++zAOQJ/7BYMWK5NbXz7iRmoLg=
Subject key identifier: 8F:FA:B6:FA:75:26:77:DB:BD:1A:D0:12:A9:48:31:01:35:8E:BD:33
Certificate issuer: /CN=41b502a16de3458db7e830591f2841fd9483c69a
Certificate serial: 01856DB88FD30A6F1694E70693966DD522DE
Authority key identifier: 41:B5:02:A1:6D:E3:45:8D:B7:E8:30:59:1F:28:41:FD:94:83:C6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbUCoW3jRY236DBZHyhB_ZSDxpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/j_q2-nUmd9u9GtASqUgxATWOvTM.roa
Signing time: Sun 01 Jan 2023 14:24:50 +0000
ROA not before: Sun 01 Jan 2023 14:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202665
IP address blocks: 185.60.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:8f:d3:0a:6f:16:94:e7:06:93:96:6d:d5:22:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b502a16de3458db7e830591f2841fd9483c69a
Validity
Not Before: Jan 1 14:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ffab6fa752677dbbd1ad012a9483101358ebd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:ac:ea:76:43:9d:b3:8e:2f:64:e6:c3:f6:
9f:f0:da:a5:04:f3:2a:af:62:33:91:5c:74:cd:89:
e2:73:7d:a0:88:2c:4f:12:fc:25:df:37:ec:3c:7a:
20:c8:3c:49:78:52:a2:ec:64:b2:1c:95:60:e0:a7:
35:1b:0a:70:78:6a:f8:9b:52:6a:a7:1f:51:cc:fe:
21:2b:46:b3:24:d3:ca:df:cb:4b:ee:ce:45:a2:1a:
95:a9:db:56:e6:df:c4:b5:79:4c:4d:a7:e5:ce:76:
47:aa:f1:6f:d0:1a:a4:a8:fa:50:6d:b7:fb:0c:71:
bf:58:f5:a0:25:cf:e0:8f:3e:b5:05:3a:de:e9:f9:
11:03:40:95:0f:66:e9:b5:64:e2:7c:7a:94:bb:27:
72:46:42:43:98:10:80:e5:62:23:50:de:72:fe:ca:
19:c3:01:b2:82:62:45:b5:f3:11:f7:1a:01:6a:a8:
93:52:68:fd:b9:fe:af:37:17:e5:85:9c:ca:27:0c:
ac:7d:cb:d9:03:9c:14:89:01:95:da:d5:e7:a0:63:
0f:ec:26:9b:0b:93:5d:26:32:27:50:71:6d:ee:42:
18:18:82:62:7b:0d:9b:93:10:a8:e9:83:3b:2a:a2:
4c:2a:df:75:f9:e3:93:74:e0:3d:08:4c:83:87:d0:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:B6:FA:75:26:77:DB:BD:1A:D0:12:A9:48:31:01:35:8E:BD:33
X509v3 Authority Key Identifier:
keyid:41:B5:02:A1:6D:E3:45:8D:B7:E8:30:59:1F:28:41:FD:94:83:C6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbUCoW3jRY236DBZHyhB_ZSDxpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/j_q2-nUmd9u9GtASqUgxATWOvTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/QbUCoW3jRY236DBZHyhB_ZSDxpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.200.0/24
Signature Algorithm: sha256WithRSAEncryption
23:75:f2:ea:18:08:05:e7:b1:23:c8:b1:c3:e4:89:b2:85:1e:
92:fa:ff:15:55:d5:82:d5:5a:d2:34:c0:d8:f1:7a:a8:c7:22:
6a:3c:20:04:ad:6a:9d:11:f2:f1:85:b6:d7:1c:8c:84:ad:67:
1a:2f:0f:1f:39:e0:e4:3c:84:26:57:a7:0e:38:4b:08:4d:fb:
91:0f:fd:c0:c6:2a:96:db:eb:96:01:a3:de:cb:05:b8:94:54:
73:48:68:39:18:9c:03:f5:b0:27:f7:cb:1f:b0:5b:63:e7:3e:
85:a0:b2:c1:23:20:bb:69:a3:48:a0:a9:62:c0:e0:ea:81:22:
1a:9f:ac:10:12:60:fd:70:5c:38:3a:19:51:dc:f1:bc:de:4a:
10:04:ee:22:0d:34:93:83:cd:17:21:04:af:af:df:48:e2:47:
81:db:cb:6f:06:87:04:ce:c4:87:ca:9f:57:c5:af:bf:d3:93:
c1:35:ed:86:6c:c5:03:55:bf:88:4a:be:d8:ce:d9:90:11:98:
12:e0:ad:6c:86:aa:11:f0:6a:9d:c5:4c:d7:f8:55:1b:e3:8c:
f7:7b:f8:06:8f:bb:2f:7c:5a:6a:b2:b8:59:a4:48:6e:8b:b1:
54:1e:ea:55:12:1d:eb:12:6f:a4:c4:36:6d:7a:44:4c:d0:df:
a1:0c:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:51 2025 by rpki-client