Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/63TdjH6W107on2R0OsWADBs0on8.roa
File: 63TdjH6W107on2R0OsWADBs0on8.roa (raw, json)
Hash identifier: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=
Subject key identifier: EB:74:DD:8C:7E:96:D7:4E:E8:9F:64:74:3A:C5:80:0C:1B:34:A2:7F
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 01942067CC5A12CB7ADFEC3284C6B8AA4896
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/63TdjH6W107on2R0OsWADBs0on8.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202984
IP address blocks: 185.231.244.0/24 maxlen: 24
185.231.245.0/24 maxlen: 24
185.231.246.0/23 maxlen: 23
194.147.114.0/24 maxlen: 24
2a0c:9300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cc:5a:12:cb:7a:df:ec:32:84:c6:b8:aa:48:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb74dd8c7e96d74ee89f64743ac5800c1b34a27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:4a:a4:e4:24:47:cb:65:d4:ca:06:2d:7a:
04:3b:03:86:62:be:17:c3:30:b0:3a:2a:63:fc:6e:
95:32:f0:39:6f:da:3e:c3:7f:fb:c5:58:f1:53:d1:
2c:47:28:5d:21:12:cd:ea:e4:34:19:45:73:06:3a:
77:bc:0a:fd:d7:dd:cb:a0:50:af:b0:f1:39:d4:0b:
9b:93:a4:cc:9d:81:4f:98:4b:97:7d:84:c2:c6:e0:
2b:74:15:11:aa:f4:cb:2c:6f:61:d8:cf:08:55:8a:
ff:61:2d:6c:39:2e:ef:aa:e7:4f:9d:50:90:41:95:
ed:37:59:84:f6:84:ca:6e:e1:4d:20:59:f3:40:52:
dc:fd:a0:93:c7:b4:8f:d8:04:92:52:a7:0b:53:11:
6e:77:3d:9f:b8:89:84:5c:e0:bc:23:12:41:40:b9:
c8:51:ff:69:fa:12:06:81:10:a8:d5:c5:4f:f3:ba:
91:5d:cb:29:45:1a:1f:ed:fb:90:81:6e:5f:f2:99:
a6:2b:4c:e7:55:e3:a3:49:ff:73:f6:29:e8:f3:59:
c6:e6:4b:57:da:66:89:a3:d3:c1:eb:9a:e5:04:99:
2c:7f:15:eb:19:a2:e8:b3:49:aa:3a:9e:b0:97:d5:
be:cb:43:31:e5:8d:d3:13:bf:ca:12:8b:26:0a:4f:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:DD:8C:7E:96:D7:4E:E8:9F:64:74:3A:C5:80:0C:1B:34:A2:7F
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/63TdjH6W107on2R0OsWADBs0on8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/24
IPv6:
2a0c:9300::/29
Signature Algorithm: sha256WithRSAEncryption
66:97:62:48:7b:89:a3:6c:8d:26:70:b9:89:37:81:01:f2:6f:
91:52:a6:4b:12:a2:64:37:9f:ad:db:6e:0c:0f:1a:dc:79:92:
b5:ef:7c:63:e2:b9:b1:0b:86:7f:e6:1f:b1:88:6c:96:b8:b6:
c7:42:f7:8d:f5:34:11:95:bb:57:6a:d0:5e:5b:a9:f2:81:89:
4e:cc:8b:c6:f5:7b:d4:e4:d8:fd:f3:01:27:c6:02:98:d5:6a:
9f:35:bf:8b:c3:8b:5d:75:7e:80:52:30:75:af:df:d5:bd:e1:
1f:41:a9:9a:3c:98:1c:0b:71:f2:b4:bd:df:6c:44:20:d7:1a:
57:4d:cd:f0:ee:f6:6a:be:00:ee:52:5e:16:90:a0:c7:83:68:
9f:6d:8d:b3:38:db:4d:2f:03:e0:81:72:f8:91:df:f3:e1:bb:
49:2d:c5:c2:76:6d:24:47:90:de:be:d8:ca:96:d9:c0:cc:d7:
52:1d:ff:8d:9b:0a:15:c4:31:61:57:d1:4b:8e:0e:7f:3b:10:
ea:22:e5:8f:07:81:50:1a:f6:93:9e:12:74:61:e0:68:62:68:
b1:8e:9b:b3:cc:57:91:3f:3b:5b:ee:20:a8:5f:f0:6d:5f:8c:
28:c9:13:4a:a2:f9:9f:bc:fb:ff:b7:c1:48:06:2e:94:9e:f0:
55:b5:80:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:12 2025 by rpki-client