Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/6t_-rwl5vkceJUl9xfuErIgk5XQ.roa
File: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (raw, json)
Hash identifier: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=
Subject key identifier: EA:DF:FE:AF:09:79:BE:47:1E:25:49:7D:C5:FB:84:AC:88:24:E5:74
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0194236A26F91D946E27A5A4CF630B8DC0D5
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/6t_-rwl5vkceJUl9xfuErIgk5XQ.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11426
IP address blocks: 185.114.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:f9:1d:94:6e:27:a5:a4:cf:63:0b:8d:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eadffeaf0979be471e25497dc5fb84ac8824e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:f8:e9:ea:75:ed:23:61:d9:e7:45:72:bb:
18:e7:2a:a1:f5:56:b4:88:1f:60:29:b3:68:80:60:
e0:a2:44:15:b4:42:f3:66:a4:44:db:cf:d7:53:ae:
3f:7a:e2:aa:85:6b:08:63:01:df:00:1b:8a:27:b5:
b6:8c:b5:41:ba:78:f8:b2:27:de:a5:f6:d5:89:2a:
42:e1:a7:1f:52:e5:b1:62:2d:81:a6:4f:28:fc:3f:
ac:34:39:c0:5c:42:2e:7c:60:42:67:a5:ee:d4:33:
5c:e7:40:ea:ff:b9:62:04:71:da:ce:9d:5e:0d:d0:
b9:0b:33:cf:ff:e5:4d:24:5e:0d:af:07:0b:d2:fd:
ca:d5:88:1f:83:20:d5:c1:fd:1b:b9:ce:25:99:d8:
9e:42:1b:2b:eb:f9:6d:0f:9d:79:52:13:b3:3b:16:
1c:5d:f4:02:e0:94:b7:75:77:06:8b:9e:5d:8f:e4:
76:a1:20:99:58:84:21:46:96:78:17:25:c8:b7:df:
a8:f7:14:a1:40:ee:6a:a7:af:5f:dd:b5:91:b4:b0:
a4:ee:7c:6b:37:3e:13:71:a4:1a:2e:96:8d:cc:22:
b2:3e:8a:d4:78:8d:1d:34:a9:f3:20:9c:ed:24:22:
84:4a:2f:6a:85:d5:95:db:c0:a2:e7:23:e1:03:44:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:FE:AF:09:79:BE:47:1E:25:49:7D:C5:FB:84:AC:88:24:E5:74
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/6t_-rwl5vkceJUl9xfuErIgk5XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
39:49:03:b2:18:f8:0e:ec:09:2c:f7:da:4a:e8:90:71:c5:6b:
4b:ae:0f:d9:c3:06:8c:1c:1e:7d:cf:b8:3b:cf:b0:ae:a5:57:
45:88:41:62:90:3f:d7:6c:d4:8a:83:db:fe:42:12:c7:84:49:
23:a9:1f:d7:a9:29:ae:22:69:4e:78:69:52:5e:22:86:4e:58:
8d:fa:16:84:b3:b4:fc:b6:6d:d9:a7:71:0a:9f:86:aa:15:49:
ec:4c:05:42:72:93:2b:d7:48:a0:5c:dc:92:53:b7:fc:20:b2:
79:fd:29:52:46:a9:5e:98:0b:cd:45:12:a2:38:11:ac:a5:7e:
02:87:34:cb:d8:bd:ea:99:24:32:54:98:5c:f3:5f:73:5f:7c:
e0:f7:1d:18:bb:d0:6e:6d:75:e3:d9:0b:5a:98:86:56:97:2f:
82:38:66:b8:cd:40:54:6c:43:8b:74:8c:55:50:94:9a:12:ee:
15:da:d7:25:72:7f:b3:7a:e3:74:cf:8b:e0:4e:19:3c:c9:f1:
50:73:7d:a6:d4:9b:d2:73:39:59:e1:9e:54:5d:55:af:25:de:
91:5e:4b:60:76:41:95:0d:57:c0:61:e7:4f:76:de:d5:c8:fb:
c1:6c:ae:05:73:7f:bb:19:70:50:a8:6d:55:69:30:9b:b8:96:
46:57:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:53:49 2025 by rpki-client