Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/osyzbtU7GZmaeY_CNmdQy5Vz8jw.roa
File: osyzbtU7GZmaeY_CNmdQy5Vz8jw.roa (raw, json)
Hash identifier: /Wf83f8E6EuxQUr3auZsag/VGfFdi1UD8Jonkresr4U=
Subject key identifier: A2:CC:B3:6E:D5:3B:19:99:9A:79:8F:C2:36:67:50:CB:95:73:F2:3C
Certificate issuer: /CN=0217c666cda23e920d14b90ae9363713350aac1e
Certificate serial: 019428277B62A002E48EDEF4C86C7497A401
Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/osyzbtU7GZmaeY_CNmdQy5Vz8jw.roa
Signing time: Thu 02 Jan 2025 17:54:23 +0000
ROA not before: Thu 02 Jan 2025 17:54:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44833
IP address blocks: 185.66.236.0/22 maxlen: 24
2a03:22a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:7b:62:a0:02:e4:8e:de:f4:c8:6c:74:97:a4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e
Validity
Not Before: Jan 2 17:54:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2ccb36ed53b19999a798fc2366750cb9573f23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:d0:a8:0a:bb:d5:37:6b:ff:74:c9:3f:4d:
4f:2b:e1:c0:14:e4:ea:d2:8f:63:ba:1c:1b:62:15:
2f:cb:d5:e2:36:89:7f:8a:f7:53:1c:d4:66:5f:c6:
71:bc:4d:c7:c0:d5:2c:57:22:5e:2b:9c:46:7e:0a:
33:73:7d:1f:6c:66:10:1a:00:56:14:93:cf:3b:e9:
b6:28:d6:cb:b8:c4:94:04:be:a1:a7:ab:96:20:61:
88:e1:43:3e:7f:41:ed:8b:df:f4:91:18:04:3a:14:
94:39:da:17:17:45:46:aa:9c:0f:c9:d4:ce:62:f8:
1d:95:bf:6b:5e:c7:9b:1f:db:36:3e:07:8c:75:d0:
23:53:ef:90:1b:d7:ac:48:44:20:20:04:95:c3:8b:
78:ab:20:60:e5:d6:d6:20:15:1e:58:82:7d:e9:26:
14:f8:b2:26:f7:42:be:5d:4f:9b:9f:02:95:d0:2c:
0e:fb:d0:ff:21:33:37:2d:ce:f7:72:be:31:d7:02:
5d:0d:db:be:d6:d9:40:8d:a4:5b:33:e4:89:5e:fd:
8e:dc:85:70:ff:0c:16:cc:81:bf:fb:26:b7:a3:1a:
c0:db:c3:2e:47:b5:15:8b:38:b9:9d:60:db:41:aa:
7c:ab:cd:da:0a:17:4e:dc:2c:2a:37:3d:02:1e:9c:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:B3:6E:D5:3B:19:99:9A:79:8F:C2:36:67:50:CB:95:73:F2:3C
X509v3 Authority Key Identifier:
keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/osyzbtU7GZmaeY_CNmdQy5Vz8jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.236.0/22
IPv6:
2a03:22a0::/32
Signature Algorithm: sha256WithRSAEncryption
16:48:81:2e:69:0c:bf:c3:0d:ca:84:78:84:9e:90:8d:74:f4:
f0:19:6d:28:f9:5e:87:3d:43:be:18:cc:5b:88:0e:d8:ec:93:
33:b3:fa:c3:ff:48:60:29:4f:52:e7:9b:02:91:b7:79:23:84:
e3:74:78:48:3e:27:6c:44:c0:e8:b2:88:ff:5e:48:49:d0:95:
8f:ef:eb:b1:a5:55:dc:75:22:d8:b7:f8:fd:a0:9a:00:48:26:
b6:7a:be:6d:86:25:f3:7f:08:86:e3:18:e5:89:be:57:20:16:
88:b4:2d:58:25:a1:e8:cd:87:c7:ed:8a:5b:3f:26:85:49:25:
54:24:46:15:2f:29:a0:cf:e3:4c:01:37:97:8c:c1:32:8e:c0:
5e:e3:99:f3:f4:dc:57:f9:9c:a2:14:1d:bf:84:5a:eb:ed:63:
1b:89:28:f7:d6:75:7d:a2:6a:6b:77:6e:0e:b9:5f:11:6a:2d:
11:2f:13:f6:71:fe:cc:80:4a:ba:fc:31:62:10:ae:75:b6:eb:
c4:fd:a7:01:43:ef:42:72:2a:74:13:58:0a:4c:ed:a4:ea:81:
bf:f6:be:43:ba:59:97:d6:32:17:81:82:3e:a3:4c:a3:5e:eb:
99:68:88:0f:0e:90:82:25:43:bc:e4:4e:cf:a6:69:17:6c:ff:
43:4a:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:05 2025 by rpki-client