Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/AqTqw2ViRO-kcW6-ZE-vp3H2Mb0.roa
File: AqTqw2ViRO-kcW6-ZE-vp3H2Mb0.roa (raw, json)
Hash identifier: FUcrQaH7elxLvJOEEycQh4B9ZjW64hvH8auR0jXjDqs=
Subject key identifier: 02:A4:EA:C3:65:62:44:EF:A4:71:6E:BE:64:4F:AF:A7:71:F6:31:BD
Certificate issuer: /CN=690d8581c464c996bcf826bc25654a5504957f8d
Certificate serial: 01AC4B06
Authority key identifier: 69:0D:85:81:C4:64:C9:96:BC:F8:26:BC:25:65:4A:55:04:95:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/AqTqw2ViRO-kcW6-ZE-vp3H2Mb0.roa
Signing time: Sat 01 Jan 2022 10:04:40 +0000
ROA not before: Sat 01 Jan 2022 10:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 185.170.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28068614 (0x1ac4b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690d8581c464c996bcf826bc25654a5504957f8d
Validity
Not Before: Jan 1 10:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02a4eac3656244efa4716ebe644fafa771f631bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:7d:22:50:50:24:da:f8:e2:00:bf:9a:4e:e3:
65:66:37:9b:b9:92:b0:8c:ae:8e:fb:ee:7c:ed:cd:
9c:be:a7:2d:9d:71:da:64:28:4c:ed:ec:49:ce:40:
dd:48:ee:85:01:d2:42:ea:56:bc:cd:af:4b:71:31:
ca:2e:64:ff:f3:61:ba:0a:81:4e:8a:3d:d2:f3:91:
2e:08:fc:51:8f:70:5c:b4:30:34:c8:71:f3:30:4f:
89:5c:b0:2b:ff:db:f3:29:f8:5f:6c:f7:0c:c8:b9:
b3:49:30:3d:5a:a5:d5:ea:39:a9:b3:45:33:60:1a:
58:3c:29:29:a3:5b:5d:de:e8:78:bb:c4:a0:9e:44:
02:a4:64:4e:2f:49:e0:cf:58:9e:c8:12:c9:6a:c1:
b0:86:4e:5d:5e:97:6b:26:2a:cb:8d:3e:64:01:62:
38:fe:eb:15:23:af:93:62:d1:fc:5c:c0:dd:40:0e:
f6:9b:e9:e1:99:0b:4f:1d:f4:91:70:4e:79:77:47:
c9:9d:26:5a:ce:f2:a6:cf:83:7b:8c:12:dd:8a:bf:
6d:6e:11:9f:1a:5d:be:13:56:08:e9:90:ee:f6:d6:
0e:be:53:3a:7d:d2:5b:26:f0:bb:64:a4:75:1f:11:
be:e4:76:ae:1a:19:2d:83:7e:98:e4:7c:5f:86:f2:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A4:EA:C3:65:62:44:EF:A4:71:6E:BE:64:4F:AF:A7:71:F6:31:BD
X509v3 Authority Key Identifier:
keyid:69:0D:85:81:C4:64:C9:96:BC:F8:26:BC:25:65:4A:55:04:95:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/AqTqw2ViRO-kcW6-ZE-vp3H2Mb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:93:0a:8b:f2:ce:22:0e:40:84:1d:05:fd:3d:fa:bb:62:71:
e0:3d:45:2b:cc:f1:a1:61:1b:c6:c8:0c:53:0e:5e:46:73:77:
f1:d4:91:52:30:f0:93:f6:b3:89:cd:f8:8d:ec:25:ba:08:6e:
a6:e2:a6:8d:26:68:c2:98:97:e8:61:02:6d:2d:72:e0:8a:cb:
bd:5c:55:1b:78:13:80:52:d0:9a:18:37:50:35:0b:43:60:50:
a2:de:8c:1e:84:75:93:3a:66:15:b4:a6:ad:88:4f:2c:b4:74:
86:b3:1a:01:1c:c3:3c:93:5d:95:d1:c8:0a:5c:26:45:ac:a3:
f3:d7:a4:ba:b3:34:d1:51:d6:1e:d7:5d:8b:17:e2:b3:72:ed:
95:28:b2:78:8c:b9:1c:e3:70:50:24:60:45:73:f7:a2:44:46:
34:a0:08:3d:85:65:1c:b1:6b:36:65:3d:56:5f:62:4a:ac:20:
2e:c3:4e:da:3d:0d:07:76:9b:e6:7b:08:88:a3:ed:b2:65:17:
6e:51:1e:0d:5b:d5:a7:32:a1:25:4a:f3:63:61:d3:b8:ff:d5:
c0:6b:d0:63:bc:9e:02:4e:48:33:0d:0f:1f:77:04:e8:c2:42:
67:0f:ee:72:b5:91:93:24:2d:d6:a5:23:f5:2f:93:6d:65:92:
8a:22:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:35:04 2025 by rpki-client