Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/qCYjkmI66ynK09Jr_fpIs4bVtR4.roa
File: qCYjkmI66ynK09Jr_fpIs4bVtR4.roa (raw, json)
Hash identifier: OyBzG8zOUf9/53WYQUGcBH6297rn9FSQZOIRCSEdIU4=
Subject key identifier: A8:26:23:92:62:3A:EB:29:CA:D3:D2:6B:FD:FA:48:B3:86:D5:B5:1E
Certificate issuer: /CN=41b502a16de3458db7e830591f2841fd9483c69a
Certificate serial: 09AD36C4
Authority key identifier: 41:B5:02:A1:6D:E3:45:8D:B7:E8:30:59:1F:28:41:FD:94:83:C6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbUCoW3jRY236DBZHyhB_ZSDxpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/qCYjkmI66ynK09Jr_fpIs4bVtR4.roa
Signing time: Sat 01 Jan 2022 12:54:35 +0000
ROA not before: Sat 01 Jan 2022 12:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202665
IP address blocks: 185.60.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162346692 (0x9ad36c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b502a16de3458db7e830591f2841fd9483c69a
Validity
Not Before: Jan 1 12:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8262392623aeb29cad3d26bfdfa48b386d5b51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:9b:90:74:9f:52:87:2f:71:d9:62:40:f3:
3b:ab:f9:99:f1:94:b3:d7:77:2f:c0:2b:a0:98:33:
55:7b:4c:5b:fc:38:e1:b8:a0:97:ee:1e:01:1d:bf:
1e:b7:01:c3:ef:2a:e7:7f:52:da:77:fc:8b:2e:f7:
de:58:de:4b:ab:13:d4:d6:28:90:f0:0a:87:5b:c6:
a2:85:b8:33:64:51:06:ed:89:b8:54:18:4a:c9:86:
ae:c7:1f:ed:4d:d6:86:75:c0:a0:59:34:d0:77:6c:
5b:72:e3:f4:b5:73:82:1f:af:ee:15:8f:3d:bc:d7:
f8:49:f1:d1:ed:25:0d:61:de:78:86:bd:a3:b9:4f:
b6:fe:c8:9a:8c:a7:25:2a:0d:b7:38:f3:40:ce:4d:
59:cd:2e:59:0f:0d:86:95:e8:3a:4c:15:82:41:f5:
de:4e:7c:1c:ce:a2:b6:39:56:c3:84:f0:66:9d:00:
62:e8:de:8d:a3:17:b6:a2:5c:b5:13:c3:23:97:a7:
66:c3:86:ea:2c:15:ff:6e:68:fb:a2:20:88:88:33:
b4:b0:68:2b:2e:c5:2d:a7:79:c7:11:ef:e5:d1:f4:
a4:9b:f6:00:71:6d:12:98:b3:e1:dd:1f:97:a5:46:
b4:64:13:7d:a2:e3:6a:e7:0b:fe:d2:f7:19:1b:08:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:23:92:62:3A:EB:29:CA:D3:D2:6B:FD:FA:48:B3:86:D5:B5:1E
X509v3 Authority Key Identifier:
keyid:41:B5:02:A1:6D:E3:45:8D:B7:E8:30:59:1F:28:41:FD:94:83:C6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbUCoW3jRY236DBZHyhB_ZSDxpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/qCYjkmI66ynK09Jr_fpIs4bVtR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dea22b-0587-4a2c-a7f5-a6f0f8637cc0/1/QbUCoW3jRY236DBZHyhB_ZSDxpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.200.0/24
Signature Algorithm: sha256WithRSAEncryption
09:94:9b:12:6e:d4:a2:d7:1b:1d:a3:6a:18:d4:c1:2b:bb:f5:
c2:cd:e5:ce:dc:6f:1a:4f:0b:fa:8a:85:05:df:22:ca:6d:3a:
c6:78:68:c5:00:e1:29:81:91:a4:62:5e:f7:7f:74:9c:f3:44:
1f:d8:c8:fc:59:51:3e:57:45:2b:e6:f2:c1:62:0a:bb:b1:c8:
3f:bf:e4:68:24:44:31:f5:22:e9:dd:5e:52:9b:e2:58:e6:b5:
2c:43:26:04:5f:7f:66:40:64:93:5e:fb:f0:eb:71:85:55:fb:
43:7b:4f:2a:df:e8:15:62:a3:2f:f5:34:fb:50:3b:2e:bf:a9:
d0:08:e8:c6:cd:69:f0:6d:75:af:eb:21:30:e1:03:9c:a6:f9:
89:1c:c3:6c:72:ca:58:e4:d9:d8:52:07:34:c4:52:bc:ba:34:
10:30:34:55:97:4f:f7:6a:5c:23:e1:7d:f6:15:4b:71:cd:9c:
60:74:c7:e2:2c:fb:ee:ba:43:d8:f8:be:67:cb:3c:68:da:04:
40:42:ce:60:f3:13:7e:2f:a5:e9:73:8a:3f:a6:29:83:6c:5f:
5e:e3:a5:39:7c:a0:eb:ca:3e:e0:4b:b1:38:13:5d:4c:e1:ac:
80:4a:69:e3:91:8d:87:c6:b2:4d:73:02:e5:d4:a6:79:09:d3:
fd:ae:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:49 2025 by rpki-client