Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa
File: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (raw, json)
Hash identifier: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=
Subject key identifier: 68:29:7E:74:34:68:3C:ED:23:4D:1D:08:6F:F4:1E:24:38:DD:99:2E
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 019427478DBBFAC4426AF63C7627B8F2F464
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 185.19.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8d:bb:fa:c4:42:6a:f6:3c:76:27:b8:f2:f4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68297e7434683ced234d1d086ff41e2438dd992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:db:2c:a7:83:76:92:13:23:46:33:8d:ca:
8d:5c:65:85:13:de:7b:88:e6:a9:12:ac:fd:59:7c:
a3:d4:4a:50:65:42:5e:90:52:5e:ff:18:4a:74:5a:
9e:52:5b:02:e9:1f:36:1a:97:f0:a5:1e:91:9b:e6:
9f:12:cc:02:dc:81:43:6f:fb:de:a6:fe:7f:c9:e4:
bb:bb:2f:1e:b2:a6:f3:a7:27:0b:bd:9a:fb:44:26:
9e:dd:bc:08:36:9d:94:20:e6:ac:5b:17:1e:b1:b5:
18:66:c7:92:70:01:27:98:f1:eb:0b:65:ed:e0:46:
62:e9:2a:29:6c:1d:eb:8e:3c:32:67:05:b0:b3:28:
7d:55:2c:9e:98:40:04:55:11:d9:5b:82:9b:03:b1:
a2:7a:1b:51:91:3a:e5:72:7c:dc:a6:b8:2f:b0:56:
06:59:41:a8:0f:fa:79:04:ea:18:d1:5e:96:1e:1f:
80:44:57:2a:ea:69:43:71:0b:f7:ac:7e:c1:a7:b9:
82:dd:bd:fc:c4:67:18:e5:17:07:81:f7:dd:30:1e:
b8:e5:8b:a7:a9:c6:a2:e1:70:8d:8a:36:db:0d:4e:
b7:da:c5:df:6a:07:21:e4:7d:76:d2:3c:7e:a4:a9:
13:6a:ef:a4:07:5b:dc:49:f3:c5:69:63:97:d0:d9:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:7E:74:34:68:3C:ED:23:4D:1D:08:6F:F4:1E:24:38:DD:99:2E
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9a:55:13:d9:16:d1:46:10:95:05:29:a8:30:fb:9d:62:c2:
4e:1d:b6:e9:b2:d4:cb:6f:58:e1:b3:77:09:1b:8b:f9:6e:cc:
02:dd:62:7e:98:7b:47:ab:ae:a2:0b:d1:36:15:7f:40:2a:98:
03:f7:6d:87:62:17:c2:25:7a:46:d0:56:b8:1f:42:3e:12:15:
3c:50:56:7b:36:81:9c:3e:e1:46:4f:72:a4:c0:aa:3e:ac:3f:
33:1c:d5:4a:65:8b:8e:f4:37:46:96:1f:7b:c2:e7:b3:cc:7d:
59:df:37:c6:12:34:29:93:ed:be:6a:7f:13:4b:a8:e1:5c:bf:
6f:6c:11:fb:b5:4d:ca:95:0b:4f:1f:dc:55:8a:a2:34:8b:39:
20:a4:b7:37:17:b5:37:f7:b3:8e:5e:b6:c1:6b:6d:22:f2:67:
dd:b0:54:b8:58:b0:bd:59:34:f6:e1:f0:22:2d:a4:8d:bc:9d:
26:0e:1d:f1:fb:71:92:f7:1b:bb:28:52:0c:05:9e:73:d1:98:
91:18:66:77:74:a3:00:5a:99:3a:b7:bf:f1:9f:61:c4:10:0e:
4c:22:83:c6:a3:a2:8a:3e:ea:19:31:f9:10:6b:91:01:0f:2d:
cc:04:34:8f:05:1a:65:7a:45:83:f8:d3:ed:cd:ac:5e:7f:df:
67:bf:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:48 2025 by rpki-client