Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa
File: J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa (raw, json)
Hash identifier: 44Y8BMgB+sH5b8+axfLWpVcHTARgYoCnMt7xMsge5P8=
Subject key identifier: 27:46:2D:BF:08:D2:76:8E:D5:50:38:E1:B9:33:77:74:61:CC:ED:B6
Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial: 019420680025E314C2772C4EB28B8829BFE5
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47841
IP address blocks: 185.65.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:00:25:e3:14:c2:77:2c:4e:b2:8b:88:29:bf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27462dbf08d2768ed55038e1b933777461ccedb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:51:fe:d0:de:f0:69:d5:d2:db:a3:c4:b4:
69:47:43:82:87:90:fb:46:74:91:6d:a0:36:f7:35:
88:38:7c:22:e9:4f:00:ca:c8:62:0b:b5:a3:fb:b6:
4e:45:b3:11:4c:0e:91:61:77:a3:73:6e:61:3a:8f:
ed:75:cb:f5:d7:23:0f:c3:94:3e:f1:bf:32:4e:63:
04:18:03:c4:08:8b:97:fd:c8:43:45:0f:bd:74:77:
1d:9e:18:19:4d:07:bd:09:df:2f:9a:9c:66:47:1b:
59:5c:a4:a8:d7:af:6e:c8:3e:51:3b:87:88:e3:d3:
b4:43:2a:7d:bc:40:d7:f5:fa:01:ed:28:63:04:fc:
0d:b7:86:92:a1:0e:9d:6d:d7:35:32:42:ce:e4:40:
66:44:90:e5:8f:0b:0e:cb:dd:91:a2:6a:bd:ff:c2:
3a:e2:a9:be:af:c2:15:a8:f9:3d:45:a0:11:a7:d9:
be:b5:2b:77:2e:92:e8:30:c0:e2:b5:1c:97:4b:9c:
b4:ea:3a:b9:a1:1e:ee:94:e7:f9:92:dd:7b:dd:14:
2d:c0:a6:44:4f:22:5b:58:33:0f:be:87:cd:34:a9:
b7:3d:45:5b:ad:df:bb:32:71:e3:0e:e8:79:89:d5:
11:9b:26:d0:a7:cb:f1:a2:65:fc:ba:ec:f7:f1:67:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:2D:BF:08:D2:76:8E:D5:50:38:E1:B9:33:77:74:61:CC:ED:B6
X509v3 Authority Key Identifier:
keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.112.0/22
Signature Algorithm: sha256WithRSAEncryption
58:27:43:ea:4a:16:fc:a1:c8:96:26:34:ed:02:f2:28:1f:92:
ac:e2:c2:bc:2d:40:17:9f:86:f3:30:84:38:2e:48:6b:32:5c:
64:9e:a9:0f:83:bf:e3:ab:79:2f:85:ed:b9:56:d6:5e:ac:e1:
61:13:ff:08:2d:31:09:c2:9f:98:80:fe:be:8c:22:27:c7:15:
0c:57:19:bb:7c:18:56:8c:1b:7f:93:fb:82:c2:7c:af:10:73:
f3:6d:95:f1:a8:5b:08:d2:64:94:a4:dd:bc:b8:8b:0e:34:d7:
ca:63:42:7f:b0:a3:2a:01:c5:ce:84:51:da:11:03:33:87:3d:
ad:3d:2b:86:da:40:18:ba:ee:98:90:a3:5f:85:15:de:39:c8:
b5:2e:c8:d1:93:9f:e1:c8:d1:a8:ef:bc:ba:fb:c3:c7:97:bd:
66:bd:14:f5:62:8f:54:98:9e:c8:32:11:36:58:03:27:1e:2d:
f7:4d:8c:3f:22:a5:63:80:f7:bf:0c:f0:22:03:2c:90:c6:42:
43:b5:b5:c0:4d:80:0b:f4:8a:26:54:95:d7:e7:aa:35:4d:e4:
4d:30:41:de:48:8c:46:52:e0:65:45:13:1a:91:7e:1a:fa:d0:
3a:9b:30:ce:52:25:e7:03:8f:ff:69:d5:49:99:6e:6a:43:82:
7b:85:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:07 2025 by rpki-client