Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/646H87YSEkgW60B6TS9Mv8ofIgY.roa
File: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (raw, json)
Hash identifier: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=
Subject key identifier: EB:8E:87:F3:B6:12:12:48:16:EB:40:7A:4D:2F:4C:BF:CA:1F:22:06
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019427B5A16CD60A4DA4CD71E33C0A50E8F6
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/646H87YSEkgW60B6TS9Mv8ofIgY.roa
Signing time: Thu 02 Jan 2025 15:50:02 +0000
ROA not before: Thu 02 Jan 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 185.31.200.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a1:6c:d6:0a:4d:a4:cd:71:e3:3c:0a:50:e8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb8e87f3b612124816eb407a4d2f4cbfca1f2206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:aa:58:fc:26:81:e7:7a:ab:a7:a8:3a:27:
78:66:f9:f3:a1:f3:5c:a9:ba:27:c4:4a:93:62:6c:
70:1c:cc:82:00:3e:fe:f4:cc:07:67:fc:c0:85:1c:
e2:ad:de:e4:85:01:79:62:f2:ac:1a:79:35:4c:61:
d4:55:04:1a:00:df:68:cc:02:a6:3d:e8:54:17:04:
7d:06:0b:ce:91:23:c8:f3:bc:0c:06:67:83:f2:c4:
21:36:5e:0e:72:80:5c:d6:84:1f:27:c1:ce:a4:97:
11:1c:ac:80:eb:26:5a:6c:1b:1c:d1:98:3b:55:83:
23:88:4c:b2:b3:80:c7:9d:54:80:0e:a2:a5:cf:b9:
e8:a8:f5:5c:43:f5:4b:5a:54:29:95:08:c3:a5:c4:
d6:9c:98:dc:88:c9:7a:12:f5:68:c7:b4:60:01:16:
42:0b:5f:e2:f3:46:c2:d7:57:52:60:fd:b0:c1:36:
64:98:3f:bc:61:e6:a2:12:7b:71:86:86:6a:d9:dc:
0d:7d:ec:b3:67:13:12:78:d1:07:85:07:24:83:4e:
3f:9b:2f:0f:ec:83:b4:74:a1:d2:b0:d8:c0:b4:c6:
49:7c:be:68:d5:3c:f0:42:01:a4:50:f4:cf:ff:8e:
23:7d:74:c8:17:b6:d7:67:48:27:9b:de:ab:37:31:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8E:87:F3:B6:12:12:48:16:EB:40:7A:4D:2F:4C:BF:CA:1F:22:06
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/646H87YSEkgW60B6TS9Mv8ofIgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.200.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c3:9a:42:45:6e:7e:11:c1:5b:ad:38:a2:a2:db:46:a3:ed:
4b:d7:2e:69:94:00:b0:b3:20:d8:52:a6:f2:64:68:57:21:33:
f5:70:08:ca:2c:79:e9:dd:5f:dc:65:59:6f:92:45:e5:db:4e:
5d:9c:a8:f2:45:ab:ca:c2:2f:39:d0:2b:0d:f2:6e:71:30:aa:
cd:9f:5e:55:93:a8:75:1b:68:51:a7:1d:ec:1e:5c:58:6c:c4:
b6:4d:c8:66:9a:4a:0a:43:e9:72:4f:8c:26:3f:4c:c4:ab:c4:
00:1c:50:94:24:b8:08:95:94:b5:68:a6:28:f1:6b:c5:97:9b:
1d:98:8d:db:e0:f1:61:6d:0e:53:3f:16:ea:f6:38:0b:e1:ac:
70:9c:ef:1b:37:ee:3b:90:19:87:73:fb:94:e5:88:92:65:1d:
5d:d8:94:9b:84:27:8c:e1:0e:18:bf:85:7a:9e:8f:8d:84:17:
50:9a:e8:ca:f4:56:59:57:ce:22:d1:51:71:14:bc:8b:f6:c1:
76:d6:bf:b7:45:c0:d3:aa:78:fa:16:47:6e:1c:75:68:79:b8:
b1:63:1c:8b:ce:99:08:c5:47:a9:4f:a9:24:6e:60:a9:d9:c1:
ce:4e:2d:db:ab:a4:73:27:ab:12:b5:49:6f:b8:fc:56:a1:7f:
09:32:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:23:53 2025 by rpki-client