Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/gLn6sYEOn9pRWAXsMvSDkoXwul4.roa
File: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (raw, json)
Hash identifier: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=
Subject key identifier: 80:B9:FA:B1:81:0E:9F:DA:51:58:05:EC:32:F4:83:92:85:F0:BA:5E
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019425FC6326F904FB4B42CCF4ED2645044E
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/gLn6sYEOn9pRWAXsMvSDkoXwul4.roa
Signing time: Thu 02 Jan 2025 07:48:04 +0000
ROA not before: Thu 02 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205517
IP address blocks: 185.194.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:63:26:f9:04:fb:4b:42:cc:f4:ed:26:45:04:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jan 2 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80b9fab1810e9fda515805ec32f4839285f0ba5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:84:8e:b1:4f:dd:e4:95:51:2c:21:9a:6a:
a8:5f:0e:02:88:f7:0b:c7:48:db:83:64:1f:99:09:
c1:5b:7b:5a:04:6c:9e:5a:a3:a5:f6:f1:54:af:3e:
c8:cc:b5:2b:19:10:05:78:07:04:d3:c5:46:aa:06:
7b:c3:84:97:44:f7:9a:ae:bf:5b:78:76:d4:51:af:
b8:2a:d3:cc:0e:47:ec:1b:70:8e:10:d3:67:85:78:
f8:4b:9b:57:d0:af:31:e2:d2:1e:da:37:30:e7:a2:
68:21:58:8d:18:b7:6b:95:3e:45:3f:c1:ca:2c:76:
22:c2:f0:f5:77:39:b7:c4:7b:76:75:27:82:41:c5:
09:4e:cd:9c:30:15:79:52:61:c3:5f:50:a1:9f:15:
8f:eb:fd:22:83:c4:64:07:cd:9f:ec:f8:5b:08:82:
4c:8f:ab:f6:90:fa:8e:14:16:bf:28:83:fc:bc:4f:
48:10:b9:fc:c6:fe:d7:18:1d:3a:bf:29:10:76:58:
27:81:02:c5:bc:ad:75:94:f6:d5:ea:c1:4c:c9:b9:
4b:fb:38:96:64:8d:84:f8:a3:4e:43:28:01:75:2c:
4d:1b:8f:41:0e:e5:26:be:fe:d3:6c:c1:87:72:9b:
8b:8c:03:08:67:b5:1e:56:39:9e:23:bf:7a:84:58:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:FA:B1:81:0E:9F:DA:51:58:05:EC:32:F4:83:92:85:F0:BA:5E
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/gLn6sYEOn9pRWAXsMvSDkoXwul4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.115.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1b:40:ec:e7:5b:b9:91:59:30:b5:ed:43:66:e1:d8:4a:1c:
7b:4e:5b:75:10:99:da:b1:2f:8b:bf:71:4c:f7:b2:ca:5e:d0:
d3:0f:4b:23:70:e9:59:45:db:dc:5a:85:bf:5a:eb:a9:dd:c3:
a0:84:35:00:5f:f7:53:79:f4:9d:ab:36:c2:7e:4f:0c:e5:06:
50:1d:22:35:05:c8:21:46:be:5a:d9:f2:b3:20:43:67:a7:64:
e3:4a:fd:d9:37:4f:d4:c5:18:c5:23:0c:2d:fa:e7:b3:4f:7a:
a3:57:dc:aa:09:c3:d3:d6:1e:34:d4:e1:d6:1f:c2:4b:74:3d:
1d:ff:a1:fc:05:b1:ec:80:67:7b:30:e6:33:05:9a:18:0b:ff:
69:fb:f9:e6:d1:0c:1c:e1:7d:cd:5e:53:85:66:64:4c:f8:41:
e6:e8:bc:14:aa:6d:e5:e8:f0:57:16:40:54:18:d2:44:2f:66:
ac:b8:c0:69:88:5b:13:3f:ec:23:6d:78:15:ff:a8:cc:cf:82:
2b:5c:6c:58:02:da:3c:1d:4f:60:39:88:82:69:be:e0:08:95:
19:5f:56:14:cd:5e:8e:a7:f9:cc:7c:dd:d0:3e:8e:f6:12:61:
27:e6:a9:4c:84:0d:70:46:c0:24:65:aa:c2:f6:1b:75:d1:30:
8d:26:a0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:25:47 2025 by rpki-client