Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/aWvnCP5OOFtEK8UUXdE2Mh0S2C0.roa
File: aWvnCP5OOFtEK8UUXdE2Mh0S2C0.roa (raw, json)
Hash identifier: aXw0opIXkqwpbkrqULg0/fqQY3da9JGEmCSf45CpAL4=
Subject key identifier: 69:6B:E7:08:FE:4E:38:5B:44:2B:C5:14:5D:D1:36:32:1D:12:D8:2D
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 018B14516E8C56C6F1A534D13B71288DB4AB
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/aWvnCP5OOFtEK8UUXdE2Mh0S2C0.roa
Signing time: Mon 09 Oct 2023 12:02:42 +0000
ROA not before: Mon 09 Oct 2023 12:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42244
IP address blocks: 185.115.142.0/24 maxlen: 24
185.115.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:51:6e:8c:56:c6:f1:a5:34:d1:3b:71:28:8d:b4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Oct 9 12:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=696be708fe4e385b442bc5145dd136321d12d82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:ae:f3:42:49:16:60:d7:d7:25:97:b9:fe:
3d:2b:8d:a4:83:d0:8d:e3:86:55:9d:28:4d:d9:df:
52:a5:d3:b6:7c:4b:cf:a9:25:f5:af:5a:b1:aa:4a:
0f:37:6b:a4:57:61:c2:ae:a9:65:11:fb:8a:05:22:
34:0b:4b:91:b9:c3:87:fb:17:72:ac:2b:d6:57:ea:
e6:1b:9b:f8:17:16:14:a6:09:7f:82:d5:c6:c8:4a:
32:06:9f:5a:ac:48:61:b8:0d:88:75:f5:5f:c5:cc:
74:84:68:da:dd:f2:37:0d:3e:27:0a:54:58:06:25:
43:75:e8:43:b3:42:5f:4c:e8:ab:05:da:c2:c9:18:
59:04:16:d3:11:58:93:f7:24:db:c5:6a:bd:a5:c2:
41:e4:89:a2:88:94:4e:52:a1:11:6f:d8:a5:a1:ab:
d2:2e:ae:e2:05:12:17:f1:21:ea:aa:be:06:b7:3b:
90:ae:c6:bc:33:60:07:4e:59:f5:c5:60:cf:65:59:
d0:c2:8a:3c:26:0e:0a:f1:15:9d:cf:d9:34:36:ca:
5c:1a:90:c5:e2:5d:91:77:f5:77:09:67:43:36:f1:
c7:3b:b4:e7:80:22:b0:6c:4b:fd:45:06:aa:c7:2f:
10:4e:22:c5:99:a1:99:88:df:fc:41:74:2f:a8:c1:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:E7:08:FE:4E:38:5B:44:2B:C5:14:5D:D1:36:32:1D:12:D8:2D
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/aWvnCP5OOFtEK8UUXdE2Mh0S2C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.140.0/24
185.115.142.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a6:f8:07:fa:92:75:7a:43:07:c4:8d:30:1f:40:db:03:a5:
13:74:85:0e:59:b8:1d:bd:7a:41:a9:7f:ef:20:6f:59:2a:1d:
39:e3:60:07:66:ca:fe:74:a7:67:76:7b:d2:77:40:44:38:76:
90:d8:f2:68:3f:60:f6:26:75:b8:58:ab:42:93:66:c9:34:8a:
f7:54:e6:d5:c6:32:ce:63:ac:67:3c:df:90:41:5a:c8:3f:ca:
e6:3c:bf:89:93:b7:67:b6:2c:ff:86:be:2f:1a:9d:5e:9f:b2:
b1:96:86:7e:df:2e:2a:a3:94:51:f4:25:72:63:2b:64:37:d3:
2e:61:71:4d:71:c2:31:c0:13:bf:b5:88:cb:a2:95:73:77:5b:
54:b2:6e:04:9c:85:1b:67:b1:3b:27:5f:ae:9d:48:11:4f:06:
6d:a8:b0:b9:67:7b:88:d7:58:a1:2e:97:a9:07:b4:be:32:12:
1a:0d:d9:cd:3e:a9:9d:09:0c:62:bc:96:aa:52:23:b2:7c:7f:
5c:02:94:e7:53:c6:55:1d:e5:ea:df:26:2b:11:63:36:b7:07:
77:cd:dc:97:bc:0f:c4:4f:a1:93:a5:11:9f:d9:bf:19:a2:b4:
ef:72:43:59:04:3e:d5:f6:44:27:33:e6:2f:fa:ea:a1:46:9b:
45:3d:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:52 2025 by rpki-client