Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/xgAJzGKQjNFCM2JBKJizp1BMT3s.roa
File: xgAJzGKQjNFCM2JBKJizp1BMT3s.roa (raw, json)
Hash identifier: xalaZXFWFIVxCWkwdXHaCbPZ5E7vqyXNW3HRwSdLns8=
Subject key identifier: C6:00:09:CC:62:90:8C:D1:42:33:62:41:28:98:B3:A7:50:4C:4F:7B
Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Certificate serial: 0194228E3B56C0F7088A0EE5AF161437E438
Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/xgAJzGKQjNFCM2JBKJizp1BMT3s.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.235.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3b:56:c0:f7:08:8a:0e:e5:af:16:14:37:e4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c60009cc62908cd1423362412898b3a7504c4f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:d7:ef:48:61:c3:80:e6:ea:f6:d4:43:89:
17:2b:3b:ca:fd:90:b5:4c:b7:6f:8b:1b:e2:d0:73:
ef:f7:b2:f3:9f:85:26:04:d8:46:23:d4:32:d1:62:
f3:d3:02:1a:5a:4f:ff:41:f3:3d:a8:83:da:3b:aa:
84:23:b5:cc:e1:d1:ff:3a:12:c3:ea:17:ec:98:12:
76:bd:e0:be:5c:6e:51:c1:88:74:98:eb:cb:e9:5f:
99:de:c0:b0:e8:03:09:35:ba:22:ec:28:99:2a:b8:
c5:f8:9d:08:c6:14:0e:d6:55:6b:4f:5d:5f:74:85:
48:05:66:c9:28:b2:90:5d:4f:e0:1f:a6:2e:e2:70:
d8:8b:b4:e1:54:e8:db:10:64:44:84:11:cc:47:7d:
28:af:a7:5a:1a:0a:96:6d:04:95:27:d2:be:2a:6b:
44:36:7c:e8:ef:11:39:b1:fe:61:eb:db:94:a7:ac:
a0:88:6a:71:5a:60:50:9a:c0:95:4f:7f:e6:c2:95:
d4:8f:25:3f:6b:68:09:a4:3e:cf:ca:8c:fe:49:68:
e0:dd:cf:cb:41:ca:26:21:b9:d1:20:dd:1a:97:f4:
03:1c:a4:2a:3a:4a:3f:57:47:70:d9:3c:e8:29:70:
6e:a8:1d:e5:fd:5d:36:cf:97:f7:4b:8d:bc:14:0a:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:09:CC:62:90:8C:D1:42:33:62:41:28:98:B3:A7:50:4C:4F:7B
X509v3 Authority Key Identifier:
keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/xgAJzGKQjNFCM2JBKJizp1BMT3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:08:28:b5:33:38:a7:15:46:ef:d0:44:9d:99:d3:3e:2b:7d:
27:3b:e2:d1:95:7c:86:be:14:04:72:82:28:61:49:ed:f4:2b:
3e:47:93:15:70:de:4a:eb:a3:6d:cc:5d:1f:5a:7e:4a:c4:21:
6f:25:cf:7b:c0:ef:15:87:ee:8c:98:78:12:8a:00:3d:cc:6e:
e2:72:72:8e:b1:e0:a4:0b:83:13:1a:2e:4f:7a:f3:d2:a2:7e:
69:0e:9c:d7:00:ea:b7:d4:5f:14:0b:b3:11:41:09:f6:b4:c4:
79:ca:8c:83:08:13:c1:7c:4b:8b:31:cf:69:56:6f:75:c6:01:
8d:85:98:04:4b:f8:f6:f0:73:dd:2e:37:bf:9a:c6:88:25:f8:
85:28:5a:8c:4e:a9:1e:d4:a5:cf:7e:da:f8:ca:9c:ad:f0:3c:
4c:a4:1f:2d:99:1e:4a:f9:0a:b3:53:e5:fd:05:bd:a7:76:7f:
60:62:33:5e:de:74:65:6b:89:11:57:b4:0b:74:fe:b5:2a:e0:
7e:a2:e0:b2:20:fd:b9:78:c2:21:cd:6f:79:b1:09:d6:14:c3:
65:52:85:90:92:3f:ff:25:52:ac:d6:5a:2b:08:f4:62:59:8d:
51:ec:9d:95:ba:da:c7:58:fd:08:ba:5d:fe:18:0a:db:8d:b7:
db:74:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:12 2025 by rpki-client