Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fK9mu6aUR4qFXV3icPJMCDcbiug.roa
File: fK9mu6aUR4qFXV3icPJMCDcbiug.roa (raw, json)
Hash identifier: kZbqJr16nS87WFpbaE8ouhKqteiejaKtVX3bPiUiPRg=
Subject key identifier: 7C:AF:66:BB:A6:94:47:8A:85:5D:5D:E2:70:F2:4C:08:37:1B:8A:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222008B4D287395E7E32416008A85372
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fK9mu6aUR4qFXV3icPJMCDcbiug.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199163
IP address blocks: 185.121.68.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:08:b4:d2:87:39:5e:7e:32:41:60:08:a8:53:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7caf66bba694478a855d5de270f24c08371b8ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:33:cc:af:85:c4:12:53:d4:0f:d0:07:f0:
60:57:64:1f:7f:ee:48:cb:e5:5b:58:a9:af:78:ac:
d4:b2:35:47:ae:76:90:89:55:ec:83:8a:41:6d:49:
e7:c4:27:22:60:bd:1d:e6:95:f4:79:05:63:77:a0:
2e:21:94:ff:0e:77:20:9a:65:bf:41:ae:f2:0e:b6:
77:15:d2:b9:e2:b4:fc:2c:90:1f:24:cc:d3:fc:96:
5e:74:46:65:b4:c9:04:43:26:7f:c1:cc:86:e0:dd:
16:2b:fa:02:c4:f5:12:12:41:c4:2e:b9:a9:9c:5d:
20:4f:f6:16:df:8c:ba:3a:5e:75:a1:d5:2b:42:84:
70:8a:49:3c:a6:9f:d0:48:61:16:d3:f9:b9:11:98:
d2:09:17:87:e6:db:34:3a:ec:29:24:b7:0f:de:89:
c0:41:ed:c5:30:c1:e3:34:a2:40:e6:06:b8:4b:2d:
b2:34:f2:da:c7:58:ce:17:26:d8:be:89:98:d3:7b:
fd:6e:fd:bb:bc:76:55:2b:ab:4c:92:3d:25:49:09:
9d:e2:1f:dd:7c:22:5f:7d:cf:31:8d:db:2f:45:42:
e4:b5:9f:e1:a2:2f:cf:21:8e:a8:e7:2a:3d:ea:dd:
74:09:32:2d:43:45:66:a8:7f:0a:1e:64:f1:49:4a:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:66:BB:A6:94:47:8A:85:5D:5D:E2:70:F2:4C:08:37:1B:8A:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fK9mu6aUR4qFXV3icPJMCDcbiug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e1:d3:8a:57:b7:b2:fa:68:c9:3f:92:1d:60:90:61:01:23:
97:5d:9c:b5:10:ee:43:4e:ff:e9:a8:3d:e4:d2:8c:bf:14:e0:
12:f1:47:41:fa:7c:bb:73:a5:b6:e1:4b:8f:6f:ff:df:7d:72:
c6:cf:e1:41:be:11:a9:bf:52:ef:5f:f8:4a:10:f0:98:d9:6d:
b1:7a:aa:62:ab:9b:7c:75:54:fb:71:9d:7d:9b:bb:63:bc:0b:
18:94:40:e1:53:1d:02:97:33:8a:2b:86:98:dd:fe:fa:5c:45:
d7:55:76:22:15:dd:0a:29:08:9c:1e:80:22:f1:b5:cf:75:55:
eb:c3:45:4a:96:52:bd:a9:e2:ad:55:cf:8b:50:44:c7:5d:c1:
97:6a:5d:e4:a5:c7:79:44:d8:ba:13:d9:a8:cb:4a:fc:fe:7e:
3b:d1:7c:ff:b5:25:49:a5:30:6d:9c:ba:7d:68:70:a2:c6:8e:
f4:cf:73:93:b9:d0:0f:be:bc:b3:d9:56:9f:4f:4f:bc:5f:00:
cf:aa:8d:fd:ad:4a:ea:31:73:b9:a9:41:3b:9c:fc:3d:90:3d:
ee:c3:2f:cc:25:95:70:df:92:25:21:19:b4:bb:a6:c4:34:f6:
9c:3f:04:b8:bc:cb:d6:48:1c:7d:28:c4:17:38:c8:da:b6:5a:
5e:5e:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:02 2025 by rpki-client