Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/fWydkBUulvWcGyEGGLy3X75Cd1k.roa
File: fWydkBUulvWcGyEGGLy3X75Cd1k.roa (raw, json)
Hash identifier: g+JrjaBawJ9knUGsGtRxkmFT+73KH+NbrVknaTvGjc4=
Subject key identifier: 7D:6C:9D:90:15:2E:96:F5:9C:1B:21:06:18:BC:B7:5F:BE:42:77:59
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 01F2A48C
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/fWydkBUulvWcGyEGGLy3X75Cd1k.roa
Signing time: Sat 01 Jan 2022 15:59:40 +0000
ROA not before: Sat 01 Jan 2022 15:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 85.198.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32679052 (0x1f2a48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 15:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d6c9d90152e96f59c1b210618bcb75fbe427759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:b2:16:6e:5d:51:8d:40:8e:ba:82:22:b4:
2e:d2:7c:3e:51:95:f9:9c:aa:fd:d0:27:7f:2d:31:
a3:bc:25:b3:b6:84:d4:f9:af:2a:c0:47:8f:fd:cd:
c5:cd:23:f4:4d:dd:d8:cc:94:47:e5:a2:5a:04:1f:
be:3e:03:b3:aa:82:62:20:c0:5a:fb:a3:3a:1d:e8:
2e:63:89:29:be:0f:2d:8d:c4:6a:88:03:24:1f:c3:
56:76:07:92:d2:6d:1d:13:77:0e:0a:6f:42:01:23:
34:8d:4c:4e:04:14:ee:0e:5c:31:26:2e:16:31:53:
bf:e5:1f:0f:12:d6:91:c2:80:c2:0c:a4:f3:22:5c:
6c:0d:a6:2c:f8:65:bb:ae:df:93:ca:b8:d3:23:10:
85:1d:ef:0d:07:f8:05:5b:54:ce:c5:99:e9:f4:8e:
cd:06:d1:0f:ec:02:04:36:7e:cd:7f:7b:db:3e:e8:
0c:47:41:46:2e:0b:9a:8d:ff:6d:7e:6b:03:ad:9d:
be:d8:f4:3f:ac:7c:4d:1e:b6:55:79:4f:bf:ed:89:
d4:ab:25:a5:cd:64:51:65:e7:af:48:b4:b5:35:d5:
38:58:a5:d7:d3:a5:bc:0d:db:fb:71:4f:9e:00:4e:
8c:5e:04:10:ca:6d:a3:38:0d:d4:bb:95:cd:c0:ba:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:9D:90:15:2E:96:F5:9C:1B:21:06:18:BC:B7:5F:BE:42:77:59
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/fWydkBUulvWcGyEGGLy3X75Cd1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:93:8f:57:af:12:66:cf:4f:16:a3:ab:06:4a:ed:33:4e:8d:
85:7b:b9:49:4b:0d:73:14:41:84:02:78:ae:70:25:aa:6f:c1:
2f:87:34:9f:5e:a5:7a:37:15:55:9a:d4:f2:bb:10:7a:bc:9d:
44:25:3b:ec:bd:23:cb:37:44:56:be:77:3f:ec:e7:78:50:29:
83:9f:ad:e6:5e:f9:4a:d7:1b:f2:c3:e7:9e:05:49:2c:6c:de:
28:4f:cc:01:5c:5a:a8:9a:18:61:29:5a:aa:95:e5:dc:7d:b9:
72:14:31:b8:a5:15:26:fa:93:09:dd:f2:6c:3a:35:56:95:53:
b1:2d:ff:93:a1:37:c0:6d:2f:1a:65:90:ba:44:29:59:58:6f:
2a:0d:af:92:1e:fc:fb:98:ab:3f:21:6a:18:5f:15:87:18:82:
93:fc:8a:b3:29:ed:ef:f7:36:b8:20:91:4f:aa:87:67:9f:c0:
ef:c9:e6:8a:61:81:bd:a2:6d:37:98:e3:58:7e:b0:5d:06:48:
d1:31:6b:7a:f6:a1:72:41:c4:68:c9:99:6b:f4:de:98:ae:bb:
22:0e:02:2a:ab:19:c1:1c:93:41:37:6a:d5:30:37:f5:92:9f:
47:e6:4e:6a:83:52:e2:2f:3d:c4:e4:28:da:7c:29:87:6c:dc:
61:50:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:54 2025 by rpki-client