Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/N6LVOXDpApHcakcmSkzmPFC6k_k.roa
File: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (raw, json)
Hash identifier: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=
Subject key identifier: 37:A2:D5:39:70:E9:02:91:DC:6A:47:26:4A:4C:E6:3C:50:BA:93:F9
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019423D745F4536648355D43FD3761F43AAC
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/N6LVOXDpApHcakcmSkzmPFC6k_k.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47803
IP address blocks: 185.130.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:45:f4:53:66:48:35:5d:43:fd:37:61:f4:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37a2d53970e90291dc6a47264a4ce63c50ba93f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:1d:98:7b:a7:88:b4:07:bc:8a:de:6a:cc:
7e:61:10:2d:b5:20:c0:ae:72:8b:43:97:95:ed:c4:
9e:10:40:24:8c:53:0b:87:9e:86:51:ce:fb:84:3d:
44:32:42:5c:93:e8:b5:9e:94:c9:1b:50:cc:b1:19:
a6:8b:e3:2e:5a:c2:12:1e:a5:ed:1b:a0:ad:74:fa:
62:8b:dc:40:67:0b:38:b1:56:b4:1d:48:ab:7e:0d:
b5:f4:f7:e9:ea:ef:63:62:a9:ae:3b:ef:40:c5:85:
d0:ee:9e:14:02:6d:4d:c6:48:b7:3e:02:5f:d0:24:
69:58:14:cb:71:cd:fb:50:8a:ac:8c:0c:44:2a:91:
c0:f9:c9:34:17:8d:77:11:58:9a:e9:3a:9b:d1:5f:
b3:89:5e:99:1a:99:e0:f0:dd:7d:e9:00:e4:f7:8e:
78:2f:ae:a4:3c:1c:73:92:22:e7:68:d3:e3:fe:87:
94:3e:02:d5:04:d0:f2:55:42:24:7e:c5:f2:93:aa:
d5:4f:bc:a0:e2:ee:44:12:ba:82:e4:54:32:66:4c:
69:75:19:7c:3f:ac:f5:43:5a:b9:73:04:47:be:2d:
43:d0:99:a0:71:08:5f:c0:26:2d:05:98:5d:64:81:
20:88:c2:3b:a4:79:8d:40:c8:8e:49:f1:45:26:ca:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:D5:39:70:E9:02:91:DC:6A:47:26:4A:4C:E6:3C:50:BA:93:F9
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/N6LVOXDpApHcakcmSkzmPFC6k_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.192.0/24
Signature Algorithm: sha256WithRSAEncryption
40:cc:5c:f0:01:ea:63:95:35:a7:b9:10:e6:43:9d:8d:46:0b:
a1:a1:0e:32:d5:f7:3a:9f:e2:fd:5f:1c:8a:a8:77:86:60:73:
e1:7e:23:1e:2f:d6:2a:21:a1:09:4e:49:9d:91:56:d5:86:18:
10:eb:9a:fb:4c:cc:18:5d:3c:dd:c2:f2:b9:54:b3:b7:d0:f8:
26:d8:f9:09:42:45:63:89:72:40:36:51:74:58:81:04:60:b2:
f9:8e:2d:33:cd:ca:fc:c0:56:04:3f:34:47:b2:f5:39:f1:08:
b3:f6:3c:f0:65:d5:1b:bf:3a:af:cf:83:b9:bc:1c:5a:9e:3e:
c8:a6:33:b0:14:46:dc:1e:98:f3:99:df:63:38:b4:df:91:f3:
82:50:55:08:ce:74:40:2d:15:66:45:71:64:23:cf:40:b5:68:
d8:d9:70:d3:7c:7b:4a:fe:44:9d:8c:d4:1d:73:85:b4:c0:fa:
d6:42:5e:07:44:b2:8d:11:c2:3b:35:3e:9f:b8:e0:84:70:9d:
a3:90:01:2a:97:18:6f:72:3c:ee:83:bf:c2:cf:5f:ed:94:4a:
87:ee:c8:78:f2:a5:39:70:d9:6f:73:d9:b2:33:c9:98:b6:fe:
f9:64:93:e3:52:ee:46:4d:46:1a:91:26:09:4d:2b:f7:ce:7a:
30:78:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:42 2025 by rpki-client