Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/A6pAxjGxKaZ8cBQxM6VOfuACktY.roa
File: A6pAxjGxKaZ8cBQxM6VOfuACktY.roa (raw, json)
Hash identifier: 6TXyfMk0O0fiDnlkdSujt38ckZAaiuNevdWV1WDuZM0=
Subject key identifier: 03:AA:40:C6:31:B1:29:A6:7C:70:14:31:33:A5:4E:7E:E0:02:92:D6
Certificate issuer: /CN=70a4ed02536ee1a2a6c81eab78355473daf27114
Certificate serial: 45D1
Authority key identifier: 70:A4:ED:02:53:6E:E1:A2:A6:C8:1E:AB:78:35:54:73:DA:F2:71:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKTtAlNu4aKmyB6reDVUc9rycRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/A6pAxjGxKaZ8cBQxM6VOfuACktY.roa
Signing time: Mon 28 Feb 2022 15:07:33 +0000
ROA not before: Mon 28 Feb 2022 15:07:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 185.248.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17873 (0x45d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a4ed02536ee1a2a6c81eab78355473daf27114
Validity
Not Before: Feb 28 15:07:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03aa40c631b129a67c70143133a54e7ee00292d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:45:1f:f6:51:30:87:8b:9f:74:ad:f8:62:
84:24:84:d4:25:f2:a4:ef:8f:68:29:97:de:c2:8d:
3c:50:11:94:1e:15:aa:51:ac:f4:cf:41:8a:87:e7:
1b:46:3f:48:01:1d:39:3e:13:4e:48:98:f3:bf:a3:
b5:31:d3:74:60:0d:74:a8:b3:84:1c:92:d9:37:2d:
61:a5:71:7d:e4:e4:ca:74:21:3e:ea:e1:32:14:38:
4f:57:5d:7d:56:a6:b6:a2:05:e7:bf:b4:8b:4d:7e:
40:ae:ac:fb:94:5d:94:a9:8b:bf:18:1b:d6:96:17:
aa:7d:cc:6c:08:fd:1f:d4:6d:d6:24:52:c3:f6:2c:
99:c4:a6:12:a0:15:af:e6:e5:17:38:d6:95:7a:4f:
7f:fc:53:4d:fe:9c:15:b6:d6:01:c3:8e:07:ea:99:
63:d9:7a:15:c2:2e:e8:d0:9a:1a:81:e6:3a:4f:73:
48:f7:e0:85:56:d8:e9:4e:70:96:a3:bd:4b:4a:21:
ed:50:62:85:74:48:73:28:8f:98:46:36:a4:3a:22:
2c:a8:46:6d:10:1e:10:6a:71:d1:d8:52:a6:a7:be:
dc:16:af:85:d7:95:af:0f:a8:e6:ba:70:d0:ff:c4:
de:c6:3c:63:e6:6f:21:5c:03:8a:13:31:bc:08:88:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AA:40:C6:31:B1:29:A6:7C:70:14:31:33:A5:4E:7E:E0:02:92:D6
X509v3 Authority Key Identifier:
keyid:70:A4:ED:02:53:6E:E1:A2:A6:C8:1E:AB:78:35:54:73:DA:F2:71:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKTtAlNu4aKmyB6reDVUc9rycRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/A6pAxjGxKaZ8cBQxM6VOfuACktY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/cKTtAlNu4aKmyB6reDVUc9rycRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.24.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b9:5b:45:d7:99:37:b4:ad:7a:18:bf:6b:f6:8c:44:f3:60:
48:95:04:8c:41:28:eb:4f:20:93:0b:3c:c7:2a:e1:87:a6:b4:
df:c0:ce:84:17:95:b5:fe:bf:e1:75:f2:b4:4e:e2:ac:41:4d:
49:c9:01:2e:84:dc:6d:9d:ef:4a:fd:1b:32:0a:bf:b9:d8:8f:
68:dd:b0:60:5b:59:f2:5e:a6:a8:5c:71:ce:93:9e:95:c4:3e:
63:cb:33:9b:d2:bb:f5:c5:4d:2c:5a:7c:32:d1:f9:2d:a5:7f:
c1:99:c9:9d:ec:9a:ee:4d:56:aa:7e:5e:c0:09:23:13:a4:b8:
ea:90:96:e9:1a:58:c2:d0:62:07:72:f4:02:8d:6c:e7:b1:61:
8f:97:a0:c1:4e:bf:77:93:e7:ef:65:dd:99:5b:1b:06:f3:83:
01:0c:6a:bf:1f:6e:34:bd:f6:0c:e1:d0:b8:14:3f:e3:55:f7:
d8:7f:fd:8b:e0:5f:c1:41:b0:12:60:9a:2a:b8:c2:d6:1b:7f:
1b:a2:5d:05:fe:da:5c:b2:99:50:51:5f:9f:2c:2f:a9:12:5a:
3e:ff:45:d2:f0:c7:f4:c3:97:3c:13:65:c1:7f:d5:a0:82:ca:
88:65:50:f5:80:ac:05:b0:a0:b9:17:78:09:75:dc:77:b8:b0:
60:c4:1e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:28 2025 by rpki-client