Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/lIr5yIALJv3-BOg4uAYoEY_kNlo.roa
File: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (raw, json)
Hash identifier: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=
Subject key identifier: 94:8A:F9:C8:80:0B:26:FD:FE:04:E8:38:B8:06:28:11:8F:E4:36:5A
Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial: 019424B401F73C5F30C5D7566DADB7E413A7
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/lIr5yIALJv3-BOg4uAYoEY_kNlo.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 185.201.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:01:f7:3c:5f:30:c5:d7:56:6d:ad:b7:e4:13:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948af9c8800b26fdfe04e838b80628118fe4365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:b0:63:54:04:bf:11:5f:63:db:ee:a2:de:
cf:f0:e0:a5:15:82:1a:17:20:77:2c:7a:1a:59:c1:
e6:23:71:14:73:43:bc:72:94:fb:92:ae:83:9a:bb:
4e:6d:af:0c:d6:38:2b:82:4d:c8:e6:1b:ed:e0:aa:
cc:f9:da:c3:09:14:ec:f1:b9:95:7c:1f:9c:23:d5:
81:c5:45:c3:7c:fd:40:ac:1e:2d:4b:82:4c:5a:e1:
ee:f8:46:02:8e:39:09:42:15:7c:af:80:df:02:49:
96:3d:9e:25:c0:8c:7c:5f:b1:43:99:d9:b4:e4:c4:
1e:d2:d2:d6:28:6e:0f:a7:d5:b4:93:c7:0c:80:4b:
82:3a:85:3e:f0:b0:e1:6e:c2:1b:49:94:fe:02:64:
3c:e0:be:2b:a0:a0:ab:4e:33:08:48:48:06:1c:c0:
09:34:65:48:72:b6:f9:54:19:c2:0c:22:8c:9b:f6:
be:02:a6:fd:ed:b0:ef:4e:4e:22:53:aa:06:4a:ed:
c2:f6:03:73:26:8d:f7:d2:c0:89:99:a9:1b:04:67:
1a:99:b7:54:30:33:7d:7c:ea:6b:89:a9:8d:63:61:
e3:4d:cc:a4:6e:a6:d7:15:44:bc:84:f8:91:fb:10:
12:21:ac:6c:a6:16:37:1a:60:e4:cc:da:eb:c0:c6:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:F9:C8:80:0B:26:FD:FE:04:E8:38:B8:06:28:11:8F:E4:36:5A
X509v3 Authority Key Identifier:
keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/lIr5yIALJv3-BOg4uAYoEY_kNlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.69.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f5:0c:b6:4f:f9:cc:8e:f4:ab:fd:ba:04:b2:c7:5c:96:25:
a0:b5:9b:5c:79:8c:f3:97:63:a1:c9:66:1d:b0:ca:f7:f5:b9:
d8:89:9c:65:0e:b1:c9:b0:4f:bf:00:7f:66:99:56:f1:92:4c:
30:cf:cd:d5:57:63:95:42:8e:04:81:77:8a:36:df:5e:98:91:
bb:73:b4:58:5f:78:5c:38:85:a7:45:c4:29:36:27:ba:8f:30:
20:0c:1a:f1:0c:e5:98:37:00:92:bf:68:ce:43:9c:59:c9:f6:
35:96:00:4a:c3:c1:57:69:04:9c:e5:a6:cc:c8:4f:33:8a:5c:
49:74:c2:83:66:55:d4:e0:38:3c:96:76:36:89:cd:73:bf:5e:
04:76:b6:36:28:cd:2e:61:62:bd:46:12:d0:01:99:f3:80:88:
25:fc:38:a1:47:e8:25:d8:88:95:51:e4:d3:81:e2:fe:3b:ee:
6c:62:df:46:c4:5e:83:5b:59:2f:31:0b:24:06:27:d6:c8:3a:
85:ed:41:85:5f:b6:71:80:ab:c2:3b:d3:87:6e:bc:46:39:1c:
53:99:a8:40:7b:c7:bd:11:a7:2f:34:d0:2b:c8:28:fb:05:29:
9e:85:12:00:11:05:51:5f:a9:c4:0e:c0:cb:1f:76:01:05:f6:
7d:e3:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:41 2025 by rpki-client