Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/aiBw7mg-7iWQbjUD1MChAVL_Coo.roa
File: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (raw, json)
Hash identifier: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=
Subject key identifier: 6A:20:70:EE:68:3E:EE:25:90:6E:35:03:D4:C0:A1:01:52:FF:0A:8A
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 019420D628743D467046484F28F992267993
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/aiBw7mg-7iWQbjUD1MChAVL_Coo.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 185.248.94.0/24 maxlen: 24
185.248.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:28:74:3d:46:70:46:48:4f:28:f9:92:26:79:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a2070ee683eee25906e3503d4c0a10152ff0a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:7b:73:3d:f9:3c:ae:d6:2b:13:99:76:07:
9f:9d:c4:73:88:f4:82:0b:22:ee:7e:93:19:58:ed:
04:09:7e:a5:3d:f5:c8:04:5d:8e:6c:88:6d:89:d4:
4d:c3:c1:70:fc:62:3f:1d:a0:67:0e:b6:f3:c5:56:
3d:fb:26:09:6d:14:93:7c:2b:d3:fe:1c:fe:7e:03:
4f:20:a1:0e:85:0f:a9:21:d1:72:41:32:63:c7:b4:
8a:51:ba:f0:45:70:b1:9e:5e:70:e8:52:d2:e1:8c:
6a:f7:f5:f0:ad:84:5a:59:51:29:33:42:22:c9:de:
4a:3d:b1:7d:3d:9d:7b:c9:39:fd:0a:e8:92:18:c7:
78:8a:e0:f7:a3:d4:35:7b:97:a4:0c:dc:ae:44:3d:
a2:ec:82:e8:04:1f:3d:74:5b:a0:62:08:28:61:c0:
87:c2:8a:4c:17:e3:1e:2a:df:cc:72:00:86:11:c7:
7c:b6:8a:5d:62:15:a8:d6:90:f2:1f:b3:2c:ee:56:
49:58:57:02:a9:9b:51:5e:12:04:d3:82:82:9b:7f:
58:16:0a:7e:fc:2e:21:04:0c:f1:55:23:91:d6:0f:
31:15:87:0c:15:66:9f:9d:96:92:b0:13:bf:6f:d1:
ad:bb:ee:41:9c:6c:20:cf:f0:c5:33:9c:98:f4:19:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:70:EE:68:3E:EE:25:90:6E:35:03:D4:C0:A1:01:52:FF:0A:8A
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/aiBw7mg-7iWQbjUD1MChAVL_Coo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.94.0/23
Signature Algorithm: sha256WithRSAEncryption
35:48:f2:65:bc:21:fb:fe:56:8c:48:86:c8:a9:74:60:e3:52:
cb:f4:82:25:2d:85:0b:f8:97:fc:1d:fa:b9:95:99:12:85:72:
02:eb:b3:07:b0:a3:db:78:c8:ea:5f:de:9d:00:a3:de:14:60:
3f:fa:c0:91:22:23:27:b3:af:51:23:17:57:1a:59:b6:ac:28:
59:29:c4:0e:91:d1:30:85:97:9a:84:33:68:58:cd:a5:38:e1:
86:2b:6e:7b:e7:3f:61:e2:2e:3a:50:1b:dd:ac:df:db:49:96:
92:f5:00:6d:1d:10:e3:75:f3:89:d7:d9:3d:cc:a1:a1:ee:6e:
c1:d3:f3:cb:6f:b7:3a:5c:38:68:c3:35:0a:27:a4:ba:43:10:
80:6e:01:22:e6:b6:57:ea:34:d1:3b:e4:98:0e:d6:67:83:ac:
54:9f:90:f7:89:5c:38:0f:32:40:74:79:d3:ae:ee:11:cd:60:
2a:67:18:00:d7:a5:34:6b:39:94:31:87:17:48:23:bd:9c:e8:
15:fe:66:d0:5c:52:6e:9e:b3:2f:9c:23:38:d3:25:12:f0:d9:
82:c6:8d:7b:98:ce:45:b2:56:c2:72:d5:85:f2:09:d4:8b:82:
64:15:52:67:45:01:7e:96:a1:8f:7b:a5:b9:b1:c0:5f:2d:e6:
ef:d4:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:49:08 2025 by rpki-client