Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/AgasgsgRMARsZv6ZL1FMUAMH49o.roa
File: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (raw, json)
Hash identifier: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=
Subject key identifier: 02:06:AC:82:C8:11:30:04:6C:66:FE:99:2F:51:4C:50:03:07:E3:DA
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 019423D716835AD4A9490A3199EC8D7C72AE
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/AgasgsgRMARsZv6ZL1FMUAMH49o.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.225.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:16:83:5a:d4:a9:49:0a:31:99:ec:8d:7c:72:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0206ac82c81130046c66fe992f514c500307e3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:33:44:08:58:05:c3:bf:0d:34:fc:a3:5a:
e5:1a:e5:4e:7a:8d:56:1f:93:70:f7:7c:bc:0f:e6:
a8:19:0f:55:d4:e9:29:55:9b:bd:bb:b2:6a:30:3b:
22:85:ac:ee:81:b0:c3:1f:47:75:72:56:8c:89:66:
9e:d1:d3:df:54:3e:c1:d8:9b:19:9b:32:f4:55:0a:
a7:22:79:67:78:02:92:50:ea:b8:45:87:f4:f4:38:
2c:d6:84:f7:48:83:88:d5:60:67:1a:1b:1b:fd:c2:
14:60:23:74:dc:49:74:b5:5b:c9:69:8c:be:61:d8:
2a:c0:58:91:15:66:40:92:91:b4:f8:df:da:c3:96:
95:3d:e0:6c:92:07:8d:91:e6:9b:35:03:d1:b9:d7:
c0:a5:91:8d:77:d2:27:92:51:29:95:55:02:55:e1:
41:75:26:df:32:b6:a3:da:f3:0d:72:e2:6c:27:a5:
a6:b1:b9:0f:eb:08:44:f7:cc:62:b4:86:e5:06:a4:
dd:15:7e:e6:8b:8b:db:66:2c:28:34:f7:91:45:4d:
2e:d0:e1:a3:96:2f:af:ef:a7:7e:45:7f:aa:55:13:
c8:37:6e:a8:e5:9a:4b:a4:d2:0b:77:2f:a0:a0:22:
94:d3:57:fc:8b:e2:3e:e8:24:c6:09:2f:94:40:78:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:06:AC:82:C8:11:30:04:6C:66:FE:99:2F:51:4C:50:03:07:E3:DA
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/AgasgsgRMARsZv6ZL1FMUAMH49o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.252.0/22
Signature Algorithm: sha256WithRSAEncryption
85:34:b7:be:64:b0:0a:ac:44:ef:44:8d:a6:0c:f5:ec:3d:3c:
32:9e:26:80:da:18:e9:14:ca:24:0f:21:78:87:db:40:cb:30:
b6:06:20:03:85:e6:81:bc:05:76:dc:53:c9:3d:7e:07:8b:cc:
dc:1c:39:c0:a3:78:56:59:29:4d:74:90:ef:9b:a0:ff:fe:00:
1b:bb:b6:26:e8:ee:17:16:90:ce:87:95:4c:69:a8:3d:4f:7d:
45:99:e6:77:bc:2c:f8:28:7e:90:c2:20:6a:b5:54:d5:b5:cc:
49:67:30:bc:b9:c2:71:96:11:83:c1:a4:b7:94:1b:3c:72:17:
2e:c7:96:9d:a6:b0:66:57:bf:7d:23:f2:2c:6a:1f:04:7f:28:
46:99:de:15:e1:db:e3:6d:f5:44:ae:ab:50:33:7f:05:88:db:
e3:18:73:5e:16:42:c7:2c:7b:2f:c4:24:c1:37:c8:71:04:37:
a7:ba:e1:f7:20:75:41:77:ad:7c:d1:18:16:79:9a:21:ca:fe:
da:ec:56:74:e7:58:ac:3a:e3:cc:19:05:49:e6:e8:3f:f2:88:
04:50:76:c2:d3:33:16:a0:0c:5b:d1:af:a6:f8:c9:c7:b5:dc:
87:08:f5:b2:28:b9:69:b5:aa:58:a1:83:21:25:7f:d5:4d:ab:
bd:cd:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:08 2025 by rpki-client