Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa
File: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (raw, json)
Hash identifier: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=
Subject key identifier: 02:34:35:AA:6A:B5:40:05:E3:BC:0B:8C:1E:10:73:CB:17:F7:01:04
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019569A2EC89B595F77331021EB32866B88B
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa
Signing time: Thu 06 Mar 2025 04:07:19 +0000
ROA not before: Thu 06 Mar 2025 04:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.69.1.0/24 maxlen: 24
195.42.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:69:a2:ec:89:b5:95:f7:73:31:02:1e:b3:28:66:b8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Mar 6 04:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=023435aa6ab54005e3bc0b8c1e1073cb17f70104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:ba:83:de:63:e3:2a:57:d9:df:64:6e:4f:
f3:1c:82:da:97:1f:0c:b8:11:4f:45:d0:a4:d9:a8:
0c:34:c6:4a:83:65:5c:10:02:ef:bf:3d:f5:9e:4c:
34:54:4a:ae:6b:65:c3:e3:ec:01:c1:8f:92:85:27:
55:2d:eb:ba:f2:17:cd:60:89:a4:1d:25:ea:d2:51:
27:ec:58:ba:20:76:a7:4a:c5:3a:bc:73:4d:8a:f2:
3f:15:9b:90:62:19:d0:3f:c6:f4:af:eb:3c:e0:bb:
56:a0:c4:51:ab:b2:3d:42:7a:55:50:7d:cc:5d:7b:
39:81:70:9d:1d:cf:42:13:b0:bf:bd:1d:5b:0a:78:
36:14:e9:70:25:1e:ed:d9:78:ef:72:a7:13:ab:26:
c1:7c:2c:c3:ad:db:16:14:84:93:c5:1a:51:fd:fe:
30:d4:ec:9e:c5:65:e0:cb:a1:ac:d0:29:f6:99:c8:
58:e7:16:b3:55:13:01:5b:0f:9c:a2:b4:20:f3:d9:
be:02:5d:0a:06:be:77:0c:a6:cd:83:b6:f6:0b:58:
f8:6f:f1:dd:30:5e:88:ee:61:33:51:0c:af:0d:6b:
96:41:c6:db:26:14:a6:6d:20:ec:b0:46:e3:11:c0:
4c:4e:fb:7c:40:e9:16:01:5c:74:30:29:bc:e7:c7:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:34:35:AA:6A:B5:40:05:E3:BC:0B:8C:1E:10:73:CB:17:F7:01:04
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.1.0/24
195.42.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:94:78:2b:fb:eb:9a:4c:98:98:e6:b7:bd:13:b4:3c:84:84:
b1:6a:01:e9:60:42:34:8e:47:88:ea:1a:6e:b7:0d:28:4d:2e:
62:9b:95:17:66:1f:03:f2:22:48:9f:47:5e:5a:12:c3:ea:67:
a6:15:cf:4a:b3:46:2a:43:7a:e4:04:bf:93:a4:88:61:bc:3e:
13:ea:4c:df:36:86:e6:7a:13:eb:62:05:79:a5:02:9a:dc:9a:
1c:f8:9d:e3:c9:36:70:38:e7:df:d6:d5:49:7a:88:c0:4a:49:
ce:26:a3:4d:18:f3:59:45:46:9b:f5:00:bb:c4:40:4b:0c:5b:
2b:ea:90:c4:50:79:0e:38:59:a8:26:b9:91:cc:80:7a:69:03:
19:01:22:f5:b7:90:cf:9e:97:f7:81:84:6a:cc:fd:99:4d:47:
97:a5:46:43:75:80:1f:39:32:3c:60:a2:11:82:e7:81:a3:77:
08:b4:dd:13:c8:61:6e:ca:a1:72:be:ee:bf:e4:70:dd:c6:09:
fc:6b:c2:92:14:2c:dc:d2:15:5e:91:5c:0e:bc:38:b9:0c:4a:
a7:ea:f0:67:21:92:eb:7f:62:b8:cc:9a:87:67:a2:12:e0:e6:
b0:0e:42:35:30:71:4d:cf:f1:ef:58:6d:be:35:85:4d:0b:80:
9c:f4:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:20 2025 by rpki-client