Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/trRwMwj1TozbbVDdJBYsUBjss8A.roa
File: trRwMwj1TozbbVDdJBYsUBjss8A.roa (raw, json)
Hash identifier: R2jnNGJ/7Zo+ytylzMHKu/XH3p37UtlobvuFEWQLQHM=
Subject key identifier: B6:B4:70:33:08:F5:4E:8C:DB:6D:50:DD:24:16:2C:50:18:EC:B3:C0
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01941FFA0B57A538D50408509CE72F3D22A6
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/trRwMwj1TozbbVDdJBYsUBjss8A.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 185.195.60.0/24 maxlen: 24
185.240.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0b:57:a5:38:d5:04:08:50:9c:e7:2f:3d:22:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6b4703308f54e8cdb6d50dd24162c5018ecb3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:2e:f2:34:24:2a:f2:2a:ef:1a:04:83:a3:
5f:2b:96:d4:ad:5f:75:0c:98:cc:10:f2:1c:7d:13:
7c:bd:48:35:2f:bb:41:dd:b7:71:f2:9b:1c:87:f9:
61:9b:fd:d3:4a:ac:79:8a:4e:34:ad:3f:5d:9d:6e:
1c:19:9c:6e:f4:2b:38:28:86:24:28:bb:21:26:53:
88:0f:67:b0:70:8a:81:32:dd:0b:ac:44:02:5c:50:
86:5d:59:56:b4:6d:83:04:60:e2:e0:8f:db:7e:37:
4b:c1:72:ee:39:38:f4:09:9e:be:a2:95:ac:16:47:
76:8b:5b:7c:ae:e7:22:a9:8b:ed:a0:cb:2d:06:df:
69:8a:84:87:db:19:a9:61:5d:e7:1f:ed:91:89:49:
5a:d0:42:42:d7:ba:c3:c7:9a:6a:80:6c:02:c5:59:
6e:b3:5e:29:12:45:6f:9f:c2:0f:d1:86:82:2c:16:
13:8c:6b:9b:8b:8c:75:2a:97:2c:f9:61:5c:0a:52:
37:0e:41:a4:28:e6:21:6d:d9:f6:3d:d0:f9:b2:82:
88:79:3f:00:d1:ca:f3:f4:69:64:db:64:8d:bc:1d:
8a:3b:06:8f:f3:55:58:48:c5:30:1a:be:7d:5f:52:
fa:5d:8f:42:3a:33:29:63:4b:20:2a:54:0a:7b:e1:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B4:70:33:08:F5:4E:8C:DB:6D:50:DD:24:16:2C:50:18:EC:B3:C0
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/trRwMwj1TozbbVDdJBYsUBjss8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.60.0/24
185.240.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5f:c6:70:5e:84:2b:8c:11:7d:35:67:62:86:68:3c:32:f7:
db:4c:e2:cc:93:cc:14:5d:1a:ca:1c:9b:2e:56:95:61:7b:44:
4a:f0:df:64:dc:56:57:40:f1:af:1d:1e:31:f5:19:cf:19:30:
40:b2:52:8f:3d:9c:15:32:b1:8f:b3:77:58:6e:d3:d1:09:b1:
75:f2:86:e1:77:12:7b:d7:5d:48:45:60:77:be:1a:c4:e2:0e:
46:35:eb:b6:99:a1:c7:bb:11:ac:90:d2:aa:10:e4:c5:10:9d:
12:aa:23:19:f3:56:3f:72:c2:59:d4:6e:cd:fb:ed:3c:a3:6c:
13:44:b4:e1:ef:57:ce:f7:f7:e0:67:b7:12:02:8e:84:54:ff:
b9:57:e8:e5:68:54:0b:47:41:c7:45:9c:a2:4d:39:f0:81:cc:
0f:77:30:23:9a:fb:ce:02:2b:a3:f7:74:78:1b:b9:8e:3f:45:
5e:a2:9b:f8:d5:f5:dd:84:40:c4:6d:d8:73:a8:a1:05:8e:20:
34:80:ed:20:dd:f8:e3:ba:45:8b:69:65:dc:38:c7:b5:d9:10:
71:11:74:27:c2:10:7a:e2:0e:93:63:be:72:41:e6:1f:3f:b4:
e0:24:d3:b0:b3:db:62:3d:e8:97:43:d1:1b:73:aa:77:64:9a:
76:aa:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:28 2025 by rpki-client