Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/4LK6RGBLui-aEbPRtqPLVkSUW60.roa
File: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (raw, json)
Hash identifier: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=
Subject key identifier: E0:B2:BA:44:60:4B:BA:2F:9A:11:B3:D1:B6:A3:CB:56:44:94:5B:AD
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 01942747F39208FD84D11072B5DA52DCAC40
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/4LK6RGBLui-aEbPRtqPLVkSUW60.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61327
IP address blocks: 185.164.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f3:92:08:fd:84:d1:10:72:b5:da:52:dc:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0b2ba44604bba2f9a11b3d1b6a3cb5644945bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:51:1d:5d:f5:44:8b:1d:83:26:bb:96:45:
3d:e2:07:49:20:6a:29:c9:96:17:78:23:a4:e4:4b:
70:fb:97:68:17:2a:cb:fe:f6:fe:10:f9:10:c3:48:
0e:61:b3:34:3f:13:80:82:f7:c6:73:3f:a2:e9:45:
ef:46:18:d1:a1:d6:4f:30:60:7b:d6:cc:51:4b:af:
b5:48:f1:0d:cb:45:78:07:83:d7:4e:94:da:8d:0f:
4a:ff:d6:24:ab:4d:df:dc:23:ea:18:cd:f8:8e:2b:
3f:cd:92:25:1a:fb:98:ea:03:41:dc:13:ae:ea:78:
e2:60:ce:c7:94:6c:11:b4:da:34:75:27:f9:85:88:
f8:39:44:de:20:79:26:7f:18:c2:7d:9e:53:e8:19:
0c:11:4b:6a:56:c8:86:45:95:75:07:23:49:05:7e:
9c:93:6b:76:81:c7:72:3b:55:3c:e5:ee:0a:16:dc:
98:cd:53:2a:be:60:a8:c8:be:35:b6:8c:62:dc:75:
ae:46:81:7e:e6:c0:a1:ed:4c:3a:a4:61:99:c0:75:
40:fa:71:68:ab:0c:ae:af:11:a0:9b:1a:4a:8b:6e:
b1:b0:f9:85:90:99:3f:68:8e:de:db:aa:76:52:ba:
1e:a1:1b:df:cd:da:9c:7f:6d:3e:28:cf:fc:8c:9f:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B2:BA:44:60:4B:BA:2F:9A:11:B3:D1:B6:A3:CB:56:44:94:5B:AD
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/4LK6RGBLui-aEbPRtqPLVkSUW60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.63.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1c:2e:6b:d9:e2:0c:58:7f:8b:26:85:01:75:17:08:0e:7f:
af:81:8a:00:38:6d:15:71:41:b2:b0:66:1e:19:1f:d9:96:ad:
35:fd:d9:73:13:3b:34:b9:91:df:00:27:06:87:a1:82:17:20:
cc:13:ed:c2:09:a1:dd:bb:00:39:66:02:14:aa:28:90:c5:54:
ec:33:4c:75:a1:b3:96:6c:df:2b:14:7c:47:3d:1f:2c:95:f0:
9d:d5:02:aa:4a:a2:54:06:44:c7:24:03:02:51:5a:99:f1:30:
c1:3b:ea:b1:9c:7d:d9:52:9f:25:87:e0:93:8f:bc:59:2a:6f:
cc:dc:84:c6:cf:5f:bf:0e:bf:03:7b:91:a3:3c:53:d5:6e:26:
79:89:4e:f8:22:bd:d7:ec:0e:8b:63:ef:89:2b:b4:3f:5a:b1:
cf:47:fd:f6:86:80:eb:42:7d:65:64:7c:13:49:c1:87:fb:c7:
4f:cd:2f:ae:5d:8d:37:a1:63:da:62:20:4e:1e:ae:25:53:43:
1f:67:ca:98:ee:dc:2d:06:da:e0:33:49:45:57:82:dc:bb:4d:
29:28:bc:dd:93:c8:d6:c4:fc:a9:27:5d:38:4a:6b:c9:0b:eb:
13:40:55:ba:e4:b4:65:a6:cb:c6:f7:d7:15:54:4e:a0:27:fe:
b7:6a:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:05:00 2025 by rpki-client