Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ppJYk0Syk1l-pyOpoRxQsDHW2Ew.roa
File: ppJYk0Syk1l-pyOpoRxQsDHW2Ew.roa (raw, json)
Hash identifier: HLyeAvgQOYVL12QTchQ7hAXvV6KaHy25PK1K0OE8rss=
Subject key identifier: A6:92:58:93:44:B2:93:59:7E:A7:23:A9:A1:1C:50:B0:31:D6:D8:4C
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A771333DD37F69ECFA42150675F5
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ppJYk0Syk1l-pyOpoRxQsDHW2Ew.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 146.185.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a7:71:33:3d:d3:7f:69:ec:fa:42:15:06:75:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a692589344b293597ea723a9a11c50b031d6d84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:05:42:4f:b7:79:54:ca:78:56:df:03:78:
57:6d:22:7c:7c:11:f2:11:eb:b3:9a:e7:d3:99:86:
d9:30:0d:f6:18:b5:fb:89:a9:2f:e1:03:31:92:ae:
75:b3:66:8f:53:4c:d7:08:e2:d1:75:c5:84:94:2a:
83:66:ac:31:75:1b:bc:d3:c0:96:5a:0e:82:20:32:
91:66:cd:7b:e2:9e:99:d3:3d:df:02:51:a2:2f:52:
6e:8b:74:2b:aa:90:fe:24:de:85:68:dc:85:c0:cd:
33:2c:2c:b4:22:2a:e7:b4:61:72:dd:e8:78:ab:11:
18:81:3d:88:b4:90:7b:1f:0d:55:a8:36:28:ce:5c:
92:99:18:25:da:f5:73:83:ba:42:63:44:bd:3f:61:
9c:d9:e1:0e:a7:0a:19:9d:80:29:34:9f:f1:c4:6f:
81:2f:e6:1c:29:b7:84:6e:3a:bd:62:db:9d:ba:ea:
1f:57:ae:53:c1:0a:d3:31:26:2d:4e:59:d1:78:82:
6d:81:40:e2:64:41:2a:23:f3:70:a9:10:b5:b6:23:
f5:ac:bc:ec:1f:88:05:6d:47:ae:04:06:f5:87:30:
cb:06:0d:36:84:8f:c8:28:84:e0:0d:0f:74:1a:9a:
b8:2a:7b:d9:b5:af:22:c6:77:3c:a9:e2:6c:1e:69:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:92:58:93:44:B2:93:59:7E:A7:23:A9:A1:1C:50:B0:31:D6:D8:4C
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ppJYk0Syk1l-pyOpoRxQsDHW2Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.253.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3e:0f:7d:93:45:c6:22:6e:65:c3:e3:2d:05:28:95:78:50:
34:5f:fc:2f:ca:45:5a:49:6d:0d:9d:ad:c3:93:ad:20:34:12:
c7:dc:da:5c:d6:c1:f8:b6:a6:ee:eb:57:f0:d6:ad:f4:24:5e:
2f:f9:b0:9f:40:d7:14:63:ea:ae:b9:bb:af:25:04:d9:79:74:
bb:53:84:9f:86:5b:50:ef:eb:83:a1:b1:d5:6e:c8:05:e5:95:
68:c6:6d:47:b1:14:e5:4b:3d:85:dd:75:51:11:27:74:2e:57:
55:3a:61:b8:92:63:e9:f2:79:b5:d3:d9:d8:c2:79:e3:97:ba:
d9:1d:95:1d:95:7c:2d:56:1a:8d:ae:a8:52:e4:7a:4c:e3:65:
ec:20:85:09:af:3c:14:51:27:31:05:79:a7:0a:6f:da:49:05:
6c:66:b6:d3:c8:b8:ee:1a:e8:0c:3b:63:5c:ba:00:c9:cd:a6:
81:4e:5a:e5:63:eb:93:33:c5:11:02:ba:b4:b0:16:e1:b7:91:
f1:3d:70:7a:fd:a5:6f:45:3d:4f:b6:78:dd:63:ce:20:d5:55:
a0:db:c6:ad:e8:c5:16:12:03:ab:56:7b:57:cb:ab:2d:6d:47:
40:81:cd:54:b8:99:bd:94:12:72:d1:3f:68:4e:ab:de:96:f5:
9b:de:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:00 2025 by rpki-client