Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/0CXMUaTMQIKH6epSkL7Djl138G4.roa
File: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (raw, json)
Hash identifier: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=
Subject key identifier: D0:25:CC:51:A4:CC:40:82:87:E9:EA:52:90:BE:C3:8E:5D:77:F0:6E
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 019425217ECA359CE38AA57D82B7CD1CAC4A
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/0CXMUaTMQIKH6epSkL7Djl138G4.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197749
IP address blocks: 185.169.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7e:ca:35:9c:e3:8a:a5:7d:82:b7:cd:1c:ac:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d025cc51a4cc408287e9ea5290bec38e5d77f06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:86:cb:f1:0d:46:e6:97:01:c8:a5:58:2a:
56:ad:dd:2f:f7:74:00:e6:61:86:74:38:02:08:fe:
c7:a1:ec:3f:be:d3:f3:a3:50:95:85:c3:88:e3:07:
f3:34:b7:3e:98:d1:e7:41:c8:fc:ea:65:20:a0:18:
32:71:e2:95:60:51:30:3b:18:bb:c2:c8:68:70:44:
82:fe:75:97:bd:dd:9f:f8:87:07:74:3a:85:c5:7d:
99:54:00:e6:b0:02:e8:1c:18:0c:f8:e3:6b:c2:c3:
17:1e:e5:66:a0:30:4f:27:2a:32:ca:b5:df:2e:56:
9d:95:7c:81:9c:87:82:b0:24:cb:64:ca:42:29:aa:
4d:4e:32:76:65:26:c8:16:04:ac:84:67:4d:f9:91:
b1:d7:ac:dc:ae:26:3f:4e:1b:6e:a4:a4:01:9c:56:
47:d8:49:3b:90:4d:c6:14:7c:b3:d8:99:c3:76:45:
88:42:28:69:b9:0b:aa:e1:a0:c7:a5:65:31:c2:8e:
fe:28:86:fb:f8:ae:4b:4e:5a:e7:0a:ef:f4:50:f7:
47:e5:25:12:f2:48:6f:2b:c5:5a:e7:25:6a:92:8a:
4b:15:dc:ff:b2:85:31:cf:55:81:04:e1:23:6f:cc:
a9:8f:0a:08:c9:3c:c9:ee:13:18:cd:76:54:3b:3b:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:CC:51:A4:CC:40:82:87:E9:EA:52:90:BE:C3:8E:5D:77:F0:6E
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/0CXMUaTMQIKH6epSkL7Djl138G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ae:b6:8f:7b:db:f9:93:d5:40:a4:aa:6a:76:b1:c2:77:31:
40:f1:67:a9:4d:92:96:01:b6:f1:17:ed:8e:be:a4:f2:cd:44:
87:d5:3f:9f:82:7e:4c:93:b1:61:0f:db:56:eb:58:f1:df:30:
58:e1:ec:2d:fb:83:1a:4f:d2:f8:63:48:b0:67:9c:62:e8:c8:
94:98:bd:11:01:17:fa:b8:cd:c3:a6:a2:c3:c7:8a:e9:3f:09:
48:e9:ac:14:2a:86:c9:5b:88:68:49:7d:d4:fc:fc:b8:7f:f7:
cb:1a:48:58:c2:16:96:5d:9d:1e:a3:a9:12:1e:08:72:d2:a0:
29:7f:74:53:f0:55:27:44:1b:76:93:bd:8b:71:f7:94:d8:80:
81:46:c8:cb:01:50:14:8d:c8:93:aa:b2:03:7b:08:51:97:c3:
5c:66:60:c1:8f:ab:29:d1:fb:63:1c:af:fe:0a:62:39:03:81:
2f:d2:05:a0:5a:4f:f1:60:ff:b5:cc:64:dc:3b:d5:ae:9b:0e:
e9:3b:b7:5c:5f:dc:c3:8d:35:e0:90:d4:ce:c2:d2:0a:5b:fd:
0d:11:13:ed:12:a0:bf:24:ac:ba:d6:e1:30:1f:63:91:11:ed:
69:8f:d6:5b:ff:f0:2f:1a:8a:9d:d2:c0:ab:2c:66:3f:a5:fb:
71:40:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:22 2025 by rpki-client