Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/aWYIXcaJkiVxLLibbCxl3jRBEqg.roa
File: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (raw, json)
Hash identifier: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=
Subject key identifier: 69:66:08:5D:C6:89:92:25:71:2C:B8:9B:6C:2C:65:DE:34:41:12:A8
Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial: 019427B628838A2FCB48A281EC4A33376B53
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/aWYIXcaJkiVxLLibbCxl3jRBEqg.roa
Signing time: Thu 02 Jan 2025 15:50:36 +0000
ROA not before: Thu 02 Jan 2025 15:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212280
IP address blocks: 185.217.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:28:83:8a:2f:cb:48:a2:81:ec:4a:33:37:6b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6966085dc6899225712cb89b6c2c65de344112a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:7d:8f:2d:cf:3b:40:29:e4:7a:16:45:45:
7d:6d:9f:6e:aa:c6:2d:c4:73:b9:41:1b:85:eb:18:
f3:73:0b:93:11:4c:db:97:b8:4d:b9:18:fb:ea:51:
0d:5b:b1:16:b8:97:7a:48:f9:9e:41:b9:fc:78:21:
ad:a7:24:8c:67:6d:82:31:85:16:51:f5:68:0c:96:
ae:17:58:19:3f:5e:aa:84:41:7d:76:c7:c0:7e:f8:
e3:55:e5:11:ef:00:70:95:26:90:99:40:61:5c:bd:
07:a3:91:3c:81:97:e9:60:82:f5:4b:b3:2b:c5:81:
96:1d:5c:91:07:e0:0a:c6:00:1d:bc:ec:21:18:02:
c3:15:68:e5:ab:90:a6:7a:30:c2:87:24:7d:b8:d0:
05:1b:23:23:e9:51:bc:c6:1b:13:dd:68:18:37:02:
18:23:03:7b:8f:2e:94:69:63:ff:53:72:78:87:90:
17:4b:5c:cd:63:25:78:99:d1:4f:1e:15:ed:21:af:
4d:e5:83:62:1b:a5:a1:f8:6e:c7:5e:ad:a6:6a:0f:
26:5a:e0:d7:94:a5:fa:02:5e:fb:36:fd:de:ea:52:
82:fb:e0:60:e4:f0:4d:a3:13:09:db:46:09:65:a5:
88:32:73:f6:13:f7:c0:38:b2:b2:f3:75:22:c3:1d:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:66:08:5D:C6:89:92:25:71:2C:B8:9B:6C:2C:65:DE:34:41:12:A8
X509v3 Authority Key Identifier:
keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/aWYIXcaJkiVxLLibbCxl3jRBEqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:09:af:7f:fa:70:8a:da:da:37:cb:d6:4d:51:b4:ce:d4:af:
51:af:e5:c1:05:29:76:9f:c5:67:fa:14:4e:77:81:2d:31:0e:
f2:d9:4e:e9:bd:76:de:96:0c:34:dd:70:e5:05:96:92:e5:c9:
88:66:e1:81:34:42:f1:9a:5b:f5:7f:fb:c2:9d:01:86:81:e4:
11:d5:18:0c:a7:c4:d5:fd:68:8c:57:64:5c:9d:ed:12:6a:03:
2d:07:b0:18:1a:33:6f:b6:7c:6f:bc:40:04:b0:3b:a3:a4:e1:
1c:60:af:03:00:95:a1:60:da:26:0b:93:93:01:ed:7b:de:e6:
cd:18:ca:11:86:76:3d:f8:f5:c6:62:c3:c3:45:7f:fc:87:6d:
2e:47:75:6b:21:e8:ac:02:79:54:63:01:5c:01:7a:5b:85:78:
a8:d4:73:2c:c2:70:e7:18:3c:b5:b1:71:6b:c3:44:13:c2:e9:
ac:52:04:31:12:d4:48:c8:a3:69:84:a0:ff:95:b4:cb:1c:54:
7f:95:2d:74:81:36:b2:e7:0f:35:53:8f:90:cd:41:2c:26:6f:
d3:77:de:70:51:b8:ac:5d:c3:e7:83:df:74:de:45:67:8f:1d:
49:89:ae:09:32:bd:cf:2d:14:d9:d3:14:cc:16:3e:aa:17:0c:
f3:ae:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:27 2025 by rpki-client