Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/p1itVAUNMpcg9efrkUlXwcxkTHc.roa
File: p1itVAUNMpcg9efrkUlXwcxkTHc.roa (raw, json)
Hash identifier: lZrPbq0O52HxoU/DZm26/qI3xpj/wD998L13o21F+bc=
Subject key identifier: A7:58:AD:54:05:0D:32:97:20:F5:E7:EB:91:49:57:C1:CC:64:4C:77
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 01942369D504665334D05C11AEA9AA0DDEAA
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/p1itVAUNMpcg9efrkUlXwcxkTHc.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60064
IP address blocks: 185.102.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d5:04:66:53:34:d0:5c:11:ae:a9:aa:0d:de:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a758ad54050d329720f5e7eb914957c1cc644c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:38:ed:fa:e1:a8:3c:82:05:a5:36:67:2e:
ae:23:67:8c:64:75:9c:5f:1a:49:4a:98:3c:e0:0e:
84:f4:41:01:01:e2:ab:cc:b6:f1:da:3a:88:79:0b:
00:a8:3f:a6:82:67:b6:40:d0:47:11:c3:a6:6d:f9:
47:64:ed:83:15:29:31:4c:81:6d:49:ca:8d:15:86:
fd:55:8d:64:43:c2:e5:07:0e:f8:0c:37:6c:3b:4b:
4a:bd:ad:f4:2e:ed:cc:3e:61:b0:65:16:49:f4:9f:
12:c1:05:59:7d:3e:17:ea:b5:b5:5c:61:d9:cd:0a:
c3:84:28:4a:7f:17:7e:b9:df:0b:87:20:53:6c:0e:
04:f6:e4:fa:52:65:fa:2a:ca:ad:3d:93:a7:0d:ff:
c9:7e:f0:5a:21:65:5c:77:d3:8a:6a:42:12:2d:45:
09:58:d3:b9:ea:64:6d:1a:ab:cd:b8:c0:5d:1d:94:
81:ac:4a:fe:2c:76:1e:b3:30:39:06:5e:6e:a9:3c:
18:dd:6b:2a:28:6a:fb:08:2e:73:3a:80:f2:5c:cf:
73:79:e6:71:26:a3:f8:ad:d5:c7:b0:d5:4b:81:91:
67:09:5a:62:0e:3c:3a:73:c3:00:1d:76:46:90:e2:
d5:ef:b8:b3:94:e8:c6:0c:ea:d1:73:0b:90:fe:4c:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:58:AD:54:05:0D:32:97:20:F5:E7:EB:91:49:57:C1:CC:64:4C:77
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/p1itVAUNMpcg9efrkUlXwcxkTHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1a:4c:b4:e1:a4:9b:40:33:56:52:32:23:52:2d:83:b5:15:
21:a7:f8:d6:69:f8:58:86:00:76:d2:28:a5:da:f7:1f:a5:a9:
d1:2e:9b:e3:b4:a8:df:95:59:0b:17:14:14:2f:9c:86:c5:71:
6f:b1:45:21:a2:4c:02:d1:7a:a4:cd:07:c0:fd:ae:16:db:1d:
19:be:b4:69:cf:72:e4:03:4c:f4:bb:be:32:85:ab:93:dd:2a:
6f:df:81:6c:f5:6b:0b:c1:68:e9:2f:0b:29:72:08:fc:1f:7d:
3f:b5:ca:ef:9e:5a:40:42:93:52:73:02:99:b4:6e:f4:0b:50:
e3:40:64:06:d4:3b:7f:ea:a2:1c:42:53:ae:6f:95:d0:50:24:
0e:e1:4c:57:fb:46:c6:16:7e:e1:47:67:8b:de:09:33:0e:d2:
49:05:7d:c2:21:63:e6:ff:f0:8f:93:d5:83:26:08:94:8a:9e:
66:f1:e5:42:24:15:4d:22:f0:64:31:43:dc:77:5a:d6:9a:c0:
b3:36:60:e9:21:a9:6d:1a:f5:23:d4:15:60:13:ee:d6:e2:8b:
8b:b9:a2:2e:55:4f:da:0e:d6:fa:5b:dc:8a:81:0b:97:99:dd:
ec:ea:e2:47:75:57:13:8e:99:ce:f6:63:be:14:e2:15:6f:3a:
b9:3e:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:39:22 2025 by rpki-client