Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/afVgxjAetRHf-32SfxI2xSGcZNY.roa
File: afVgxjAetRHf-32SfxI2xSGcZNY.roa (raw, json)
Hash identifier: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=
Subject key identifier: 69:F5:60:C6:30:1E:B5:11:DF:FB:7D:92:7F:12:36:C5:21:9C:64:D6
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 0194221F654A7076DE3C396A318228E544DD
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/afVgxjAetRHf-32SfxI2xSGcZNY.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 185.62.150.0/23 maxlen: 23
185.248.148.0/22 maxlen: 22
2a03:567::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:65:4a:70:76:de:3c:39:6a:31:82:28:e5:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69f560c6301eb511dffb7d927f1236c5219c64d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:81:cf:ce:6d:c4:74:04:47:86:f1:97:4c:
9c:05:36:20:ed:30:a5:21:36:1b:25:57:a1:be:fa:
95:c2:a4:47:ae:42:0c:4a:ae:2a:ad:cd:d3:95:8f:
ad:ac:42:96:12:2e:b4:13:d7:fd:87:36:06:db:ba:
c2:4b:b6:16:30:d6:a6:6c:a2:57:a3:d3:17:f5:57:
69:a7:de:e1:ca:1e:ca:0f:88:6b:78:df:d6:cf:44:
15:63:d8:9b:1a:03:c4:60:20:82:53:4e:e0:61:1d:
20:f2:72:eb:a1:17:6d:c2:2d:2d:89:f2:38:88:49:
d1:31:a9:0c:fc:ad:63:28:83:9a:ca:f2:5e:43:b0:
7f:f7:84:22:5d:e2:ae:1b:b7:a2:52:56:84:59:e1:
12:46:22:18:69:3f:a5:d2:f6:81:b0:e0:49:0c:cb:
6f:14:c2:5e:4d:5b:d8:f3:a4:60:37:ee:73:72:26:
b7:d5:a2:49:ae:41:d5:03:6e:fc:3a:7b:e6:80:22:
f8:3b:17:48:bb:12:fa:bf:e4:98:41:d8:08:a2:95:
e2:b3:94:5a:d8:45:8e:2a:0e:49:4c:39:74:00:91:
4b:6b:45:da:8b:64:db:b3:72:35:03:61:41:80:f5:
ea:d3:57:20:6f:1d:24:cd:43:4d:19:d9:91:8f:8b:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:60:C6:30:1E:B5:11:DF:FB:7D:92:7F:12:36:C5:21:9C:64:D6
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/afVgxjAetRHf-32SfxI2xSGcZNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.150.0/23
185.248.148.0/22
IPv6:
2a03:567::/32
Signature Algorithm: sha256WithRSAEncryption
5f:8f:3b:c4:87:ab:cd:b2:5b:bf:aa:9f:f4:29:18:ef:2c:bc:
cf:da:da:c9:f4:82:4a:12:ff:68:ca:ca:ea:85:3c:a2:05:22:
59:0f:28:20:94:3f:d9:b8:74:aa:b1:4f:08:4b:be:0b:b9:7b:
4f:ed:c0:66:b2:67:4f:aa:45:fa:ba:f9:18:f2:5f:0b:5b:ca:
64:92:75:da:48:65:64:cb:32:71:33:72:d3:96:c4:fe:eb:7f:
6a:96:70:ce:96:03:ce:5a:fa:50:d4:09:12:40:12:bc:f3:a0:
dd:b5:f4:85:5d:dd:6e:65:6b:cc:aa:3d:6f:a0:28:50:c2:55:
54:45:fa:68:9f:6f:52:ab:b5:6c:af:68:50:ba:7a:10:99:f8:
c8:1b:ab:14:ec:06:74:f0:54:54:07:32:fa:a3:cd:b7:2d:eb:
1c:34:6c:ee:38:83:58:d7:4b:89:54:f3:1b:97:de:69:d8:e9:
e5:b6:76:36:6c:71:68:e0:34:ba:55:06:2c:ed:5f:51:3b:a3:
6f:12:74:e5:cf:d4:eb:f4:c7:51:f9:af:a1:64:ed:a8:1b:5a:
31:4f:d9:df:34:1f:15:06:73:10:aa:94:bc:06:2d:a2:b7:05:
39:fe:b4:b5:42:3a:8f:f3:00:8c:b4:8b:9d:93:20:a1:dc:5e:
65:7d:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:14:14 2025 by rpki-client