Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/agpfIzMH4Xp6DihM1ocjIcz1sAE.roa
File: agpfIzMH4Xp6DihM1ocjIcz1sAE.roa (raw, json)
Hash identifier: bZWY0+Wnaub75TqMLscGHpR1//+odcKr6qFclgBDckw=
Subject key identifier: 6A:0A:5F:23:33:07:E1:7A:7A:0E:28:4C:D6:87:23:21:CC:F5:B0:01
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B238FA0B44782FB540E4CE9A5288CA
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/agpfIzMH4Xp6DihM1ocjIcz1sAE.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62159
IP address blocks: 185.32.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:38:fa:0b:44:78:2f:b5:40:e4:ce:9a:52:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a0a5f233307e17a7a0e284cd6872321ccf5b001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:a4:a1:20:1d:15:7b:6b:ea:ad:d4:8a:b7:
54:3e:b7:c0:e5:f1:97:f9:48:cb:5d:65:a8:5d:60:
78:18:a5:e9:c9:dc:c3:07:4e:71:cc:47:28:3b:0f:
ef:af:3b:04:6a:60:8c:b6:69:9a:10:34:45:8e:d2:
69:34:2e:cd:aa:5c:25:b3:78:77:5d:f3:84:f5:60:
fe:84:5e:6c:47:75:56:01:f4:cc:98:67:fd:87:17:
03:32:ec:a4:73:4a:99:92:a1:12:c0:92:11:0f:12:
eb:5a:d2:cb:2e:e0:62:7a:d7:42:1f:fc:6a:51:a0:
34:d4:89:73:da:3e:a8:c4:2f:41:08:4c:d5:df:d9:
64:1c:09:5a:69:2b:ba:26:03:c0:bf:65:83:79:cc:
3c:1d:d3:66:d9:16:2b:3f:7d:22:49:1e:2f:6e:96:
19:01:13:88:c4:ea:fd:6a:a5:33:d9:c9:80:7d:75:
c5:56:30:9a:37:4d:0d:88:79:5a:25:a0:a4:30:ca:
f8:aa:79:19:84:38:20:6f:b2:99:e1:f0:b0:94:20:
1a:47:e0:aa:60:33:3e:a2:7c:43:ca:db:d8:69:46:
d1:36:b3:55:90:9b:d5:7b:d9:85:45:ac:b5:82:d5:
b8:0c:85:8a:33:c0:be:a3:f6:6a:43:e3:1c:33:87:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:5F:23:33:07:E1:7A:7A:0E:28:4C:D6:87:23:21:CC:F5:B0:01
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/agpfIzMH4Xp6DihM1ocjIcz1sAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.181.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b6:02:f4:fb:e6:fb:e4:b7:21:76:63:b4:eb:62:eb:32:55:
f5:53:51:2e:07:b0:21:f3:98:1c:90:05:b5:ad:e3:20:4c:16:
cc:ae:63:c2:3b:44:ee:d6:eb:f6:18:d6:18:af:30:a8:d0:b0:
5c:aa:70:0d:aa:3e:2f:83:9e:86:9e:4e:1c:41:ba:ad:d3:99:
26:c5:b7:9f:86:fc:81:5f:bd:c9:6e:23:c1:e0:35:c2:9f:92:
04:b3:dd:68:dc:37:b4:c9:7d:14:87:a4:6a:5c:2e:f6:e4:12:
94:1f:7b:57:a8:6f:7c:26:d7:dc:c8:bd:99:bc:0a:f1:7b:de:
d6:31:d7:9c:51:e3:41:63:31:f1:34:f4:34:1a:63:67:6b:bd:
60:69:48:6f:08:b9:01:c5:fd:44:8d:5f:0d:37:2d:ac:f9:d8:
e2:83:07:34:97:48:1a:65:a2:8e:ec:34:6a:18:59:e3:7d:d8:
16:73:48:8b:2f:18:a1:50:5f:05:e5:ce:89:ed:9f:bf:77:cb:
93:ff:24:e7:a2:6b:7a:71:74:2c:9b:ac:84:6d:b8:5e:87:fe:
dc:82:51:9c:e6:7c:b8:cf:77:43:68:0f:09:f4:f7:c1:6e:96:
60:16:24:90:77:19:6b:e8:30:fa:e0:90:81:31:01:77:54:43:
b4:8c:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:09:02 2025 by rpki-client