Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/6vC7E9fCr2S2YLpYl9NYikdwrIo.roa
File: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (raw, json)
Hash identifier: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=
Subject key identifier: EA:F0:BB:13:D7:C2:AF:64:B6:60:BA:58:97:D3:58:8A:47:70:AC:8A
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 019427471E6ACCA5558197DE30C1FB2348ED
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/6vC7E9fCr2S2YLpYl9NYikdwrIo.roa
Signing time: Thu 02 Jan 2025 13:49:19 +0000
ROA not before: Thu 02 Jan 2025 13:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 185.231.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:1e:6a:cc:a5:55:81:97:de:30:c1:fb:23:48:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jan 2 13:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf0bb13d7c2af64b660ba5897d3588a4770ac8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:a6:d6:ae:a1:80:b2:fe:88:f2:62:f5:33:
c5:e8:ac:9d:1f:5c:3d:41:4e:cd:86:da:de:c4:a0:
41:2c:a6:cc:68:fb:42:10:81:fd:99:ed:a9:66:dd:
a5:b4:12:52:c4:6e:06:dd:7e:9c:94:e0:59:0e:3a:
45:89:ab:1a:7c:19:d8:20:27:b7:a1:66:95:4a:fa:
c2:6a:c9:cd:d8:b7:4e:8a:50:54:5d:6b:e9:3f:59:
12:c0:26:f0:33:0d:42:3a:d4:06:3e:72:eb:47:12:
f6:7f:0b:57:78:c4:ca:e7:fd:0e:5e:5e:c2:b4:28:
5d:cf:86:43:2e:b4:79:93:c0:b4:7b:ce:18:93:b4:
a4:9a:41:74:bd:2e:ce:bc:21:19:61:7e:e6:13:5a:
33:09:a2:c2:4e:6d:24:f4:72:5f:9c:b3:3f:e4:64:
6f:3a:4d:43:64:bd:38:b6:00:8b:d5:08:9c:19:38:
b9:0a:1d:2a:07:40:9c:8d:97:7c:e0:8a:02:71:2c:
b4:26:0a:ad:d8:29:19:1b:6b:02:05:b0:d1:69:80:
fc:a5:54:a5:8b:73:58:c6:43:53:0e:5f:0c:d4:ab:
b2:80:2d:0e:fe:61:c5:0d:eb:23:89:c1:df:aa:d2:
90:7f:1d:b1:4b:89:d4:1c:42:0a:e9:29:d9:96:c3:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:BB:13:D7:C2:AF:64:B6:60:BA:58:97:D3:58:8A:47:70:AC:8A
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/6vC7E9fCr2S2YLpYl9NYikdwrIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.233.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2e:26:4d:58:1d:42:3f:65:ed:1a:a8:8f:a8:aa:30:34:9b:
31:a0:d4:fe:c0:25:06:e7:ca:9f:fc:2a:f4:68:ea:51:bb:49:
4d:00:cd:9c:b6:55:6d:51:93:11:85:7a:38:49:87:8e:e0:a9:
b0:59:26:22:38:8b:8a:e3:71:e5:ba:9b:30:28:eb:d3:43:8e:
19:96:89:d9:4d:43:c4:1e:39:57:c6:83:1a:c3:0b:9c:52:e8:
1a:b9:b4:56:e7:f1:b4:50:e5:41:ac:cf:2b:74:7c:89:b1:57:
4b:60:6e:66:34:5e:d0:05:d4:2a:4f:da:3b:71:d3:6c:13:0d:
11:c7:a5:5c:ed:07:14:f5:ed:ed:e3:73:09:d1:75:ec:e3:e6:
64:45:d7:e6:2e:be:72:ed:40:6c:44:07:05:97:85:71:16:f8:
9b:08:e6:cc:3d:c7:fc:43:85:61:eb:84:a6:d7:bb:37:24:a6:
ff:4a:62:18:d8:bd:f1:9d:4e:b0:ac:a4:07:cb:b2:6d:8a:f9:
74:d2:dc:42:54:5f:7c:f2:cd:4e:a8:e2:f8:49:2e:7d:1b:01:
e9:c5:82:78:3b:94:49:c6:a3:c9:c7:de:40:2e:d2:ee:b4:c7:
0e:90:0d:87:c8:28:b9:24:b7:e8:2d:33:cc:70:fa:3c:61:b9:
13:5d:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:19 2025 by rpki-client