Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/ZQdu-0ohEKk8MviuNqfff4RnxmE.roa
File: ZQdu-0ohEKk8MviuNqfff4RnxmE.roa (raw, json)
Hash identifier: m3qLNfSLRu+ISkIkvkGMueSzDFe+udyzaFpehbgnYyA=
Subject key identifier: 65:07:6E:FB:4A:21:10:A9:3C:32:F8:AE:36:A7:DF:7F:84:67:C6:61
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 01857082993D64BE4E67335DBFB664D69F93
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/ZQdu-0ohEKk8MviuNqfff4RnxmE.roa
Signing time: Mon 02 Jan 2023 03:24:45 +0000
ROA not before: Mon 02 Jan 2023 03:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25400
IP address blocks: 185.81.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:99:3d:64:be:4e:67:33:5d:bf:b6:64:d6:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Jan 2 03:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65076efb4a2110a93c32f8ae36a7df7f8467c661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cd:52:84:af:3f:15:b2:33:10:50:a4:b7:06:
3f:1f:6c:39:1d:39:87:5c:66:20:c0:34:4b:a2:47:
60:3a:f7:6f:05:fd:89:d3:16:76:97:bb:be:44:9c:
ca:d2:9a:a8:b2:68:2d:71:72:5c:00:bc:7f:8f:4f:
c3:da:15:ce:41:42:d8:d2:73:76:66:7d:e8:68:19:
b5:5e:54:be:0c:b6:49:cf:ce:b3:ca:8c:e5:08:5f:
30:10:81:aa:d6:4e:42:db:81:ae:33:c1:06:c3:7b:
32:9d:b6:5f:0f:9a:e2:9d:37:6a:4d:1c:b1:45:12:
e8:1c:cc:3e:54:5f:07:4e:d6:a3:1d:94:c0:4b:b0:
4f:c5:60:4e:95:5f:8f:ba:73:89:eb:1c:c1:46:42:
fc:6b:7c:0f:65:04:8f:94:e3:ac:e4:33:f5:64:36:
bb:52:f0:fb:e8:6c:90:3b:8f:9b:ac:b7:34:f9:c1:
d4:c2:96:3b:4d:92:42:29:ff:6a:be:81:d0:24:77:
e9:3b:eb:90:6c:fb:8f:93:43:4c:dd:36:51:31:be:
3d:f2:d2:9e:fb:b8:50:3d:c5:98:7d:83:a6:ad:51:
b5:b0:61:05:ef:eb:be:71:af:de:fc:91:96:35:42:
a9:22:06:fc:a6:64:61:8e:bc:21:55:0c:d8:07:4f:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:6E:FB:4A:21:10:A9:3C:32:F8:AE:36:A7:DF:7F:84:67:C6:61
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/ZQdu-0ohEKk8MviuNqfff4RnxmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:1f:a5:76:e4:6a:ce:e3:25:84:28:22:80:6c:d5:d4:73:9a:
6e:5b:ef:e2:ee:77:40:9b:ae:cc:dd:a2:75:ef:e2:07:19:e2:
a4:91:38:f2:6a:b7:ec:cb:c4:03:ef:32:58:b3:02:9e:b3:c0:
90:e6:c4:cd:65:66:e6:b5:74:4e:57:f2:01:0d:d6:41:2a:07:
e5:fa:e3:8b:1b:be:3a:6b:7f:79:14:b8:c5:23:eb:65:23:ca:
00:c5:14:d5:da:44:31:4d:25:49:59:0f:40:4f:71:fe:31:0a:
ff:11:26:73:74:10:ec:42:d5:eb:e7:09:55:33:a9:e1:97:98:
ad:95:4b:b4:0a:5e:de:43:27:b2:88:16:71:89:1a:3a:47:b0:
a7:57:7c:f4:5a:14:c2:4d:df:38:de:24:f6:fb:ec:c4:98:8f:
65:c6:bc:5c:d4:06:a9:97:6a:cb:00:cc:e9:92:9e:e0:97:67:
bd:62:a3:2b:f0:e3:d0:0b:25:19:d7:9f:28:80:31:30:1f:30:
5e:e3:9e:82:d2:5e:f3:99:04:67:e0:44:13:43:03:0e:5b:d8:
b7:0e:71:f9:71:37:8a:57:ff:62:48:c6:eb:16:79:8a:ee:4f:
60:83:9d:a4:a3:0c:b6:b1:92:52:b8:33:45:ca:97:9f:ad:3b:
09:b4:b0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:03 2025 by rpki-client