Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/abe205-bf81-4945-9d42-0bcddf3e5e57/1/_jZCVVgasfgDmVSxBUewg10yIL4.roa
File: _jZCVVgasfgDmVSxBUewg10yIL4.roa (raw, json)
Hash identifier: QID7gl7hpsDMzOKncQR6UVpQ572oMao+oqhEXNh1aXM=
Subject key identifier: FE:36:42:55:58:1A:B1:F8:03:99:54:B1:05:47:B0:83:5D:32:20:BE
Certificate issuer: /CN=2b13f3e4a3c75cfbc059c9d95c59ddf8e41cea86
Certificate serial: 0183CD47C5CA1603F049B624AD7E3367C1A3
Authority key identifier: 2B:13:F3:E4:A3:C7:5C:FB:C0:59:C9:D9:5C:59:DD:F8:E4:1C:EA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxPz5KPHXPvAWcnZXFnd-OQc6oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/abe205-bf81-4945-9d42-0bcddf3e5e57/1/_jZCVVgasfgDmVSxBUewg10yIL4.roa
Signing time: Wed 12 Oct 2022 17:39:36 +0000
ROA not before: Wed 12 Oct 2022 17:39:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 85.8.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:47:c5:ca:16:03:f0:49:b6:24:ad:7e:33:67:c1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b13f3e4a3c75cfbc059c9d95c59ddf8e41cea86
Validity
Not Before: Oct 12 17:39:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe364255581ab1f8039954b10547b0835d3220be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:e0:57:da:69:9e:06:12:e5:e4:ae:8b:d9:
34:3f:78:a5:08:91:f2:9a:cc:45:a8:d3:97:9f:ac:
2e:8a:bf:43:78:8f:d2:a3:5c:87:70:51:46:5b:33:
8d:c4:10:23:aa:54:82:32:47:39:70:5c:bb:ad:69:
a8:9c:47:da:ec:bc:90:16:60:a3:2b:74:56:30:46:
53:42:6e:24:96:99:58:12:aa:ce:b7:6b:ae:a2:81:
bb:7a:ba:b2:a2:7d:12:c8:15:75:db:cd:5c:a3:fb:
39:9f:9f:af:e4:5c:5f:7e:42:47:77:36:74:3c:e8:
46:b5:8e:38:cf:84:ca:ad:0e:6c:eb:b5:6e:17:43:
fc:1e:a1:a1:7e:f4:20:bd:61:bf:62:2c:d3:a1:c1:
bb:d6:d5:56:c1:94:79:6f:3f:6e:64:c6:cd:ae:99:
d2:3d:0c:7a:d1:ca:ad:09:d4:33:ff:25:9a:fa:90:
ba:78:e7:2a:42:fc:ab:7c:64:97:92:dd:a8:2f:8a:
88:1c:7f:79:72:6a:57:b4:17:97:a8:79:8f:eb:48:
12:7e:11:71:70:f8:9b:2e:6c:5f:0b:fe:14:bf:a6:
92:a7:61:27:05:00:66:c9:f5:a5:d7:c9:e2:63:8b:
5b:80:34:08:a0:93:5e:32:7c:ff:a9:af:c8:2e:6c:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:36:42:55:58:1A:B1:F8:03:99:54:B1:05:47:B0:83:5D:32:20:BE
X509v3 Authority Key Identifier:
keyid:2B:13:F3:E4:A3:C7:5C:FB:C0:59:C9:D9:5C:59:DD:F8:E4:1C:EA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxPz5KPHXPvAWcnZXFnd-OQc6oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/abe205-bf81-4945-9d42-0bcddf3e5e57/1/_jZCVVgasfgDmVSxBUewg10yIL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/abe205-bf81-4945-9d42-0bcddf3e5e57/1/KxPz5KPHXPvAWcnZXFnd-OQc6oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.156.0/22
Signature Algorithm: sha256WithRSAEncryption
39:40:34:2f:8d:88:cd:b5:22:aa:3a:02:47:47:ae:4b:f9:46:
2d:87:ed:07:17:86:66:4a:8c:62:f8:4c:ae:f8:27:00:7c:97:
fa:15:4b:27:de:a7:87:54:42:a2:98:54:21:8c:75:68:b9:ea:
c2:12:12:4b:8e:32:f1:71:29:16:40:53:22:70:d7:da:f7:b7:
c9:fa:06:fd:46:81:c2:2e:e6:9a:1c:ee:5b:2f:54:af:89:95:
d2:17:b5:73:e8:3d:09:7c:89:d7:b5:dd:4c:26:7b:ab:3a:e8:
13:8a:ce:08:ca:aa:c6:15:db:00:dc:c2:fa:3e:d5:cc:62:ef:
65:f6:f0:41:6c:03:f7:f6:c5:7c:ec:d3:6e:c8:f6:97:0d:71:
ff:0f:e8:9b:71:89:66:87:08:a1:b9:77:d6:16:3c:9a:5c:9c:
c1:bc:2d:13:27:3b:6c:02:06:9e:eb:da:d5:ee:82:25:e2:4e:
89:88:ad:2d:3f:9f:e2:2e:2c:b6:91:a5:7d:b2:54:81:3d:32:
ba:88:db:ac:a0:8d:e3:a5:68:64:97:71:ec:a8:21:d2:f4:6d:
e4:79:75:40:af:14:b7:a1:b2:4f:80:32:da:87:de:49:1a:43:
ee:52:06:85:48:2d:29:21:8a:51:f1:3f:c2:2b:f7:34:76:8d:
a0:e3:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:32 2025 by rpki-client