Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/J65Pn7n5Sh8xR78z7z0tac9NxEI.roa
File: J65Pn7n5Sh8xR78z7z0tac9NxEI.roa (raw, json)
Hash identifier: OZKdaXncMRK8ybMPUGR1+XM+jguqWZYjIXyaJtzf7+4=
Subject key identifier: 27:AE:4F:9F:B9:F9:4A:1F:31:47:BF:33:EF:3D:2D:69:CF:4D:C4:42
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0195CE4F79B53B2195AB5F6F233A412822E1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/J65Pn7n5Sh8xR78z7z0tac9NxEI.roa
Signing time: Tue 25 Mar 2025 17:17:49 +0000
ROA not before: Tue 25 Mar 2025 17:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 185.143.72.0/24 maxlen: 24
212.16.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:4f:79:b5:3b:21:95:ab:5f:6f:23:3a:41:28:22:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 25 17:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27ae4f9fb9f94a1f3147bf33ef3d2d69cf4dc442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:1a:5d:74:fb:01:d7:73:b1:67:f3:da:45:
94:60:8b:91:10:f0:fd:ac:f8:72:54:16:29:e7:d5:
9c:42:42:dd:71:f1:92:dd:61:15:17:20:08:59:5e:
a5:cc:c2:bf:ed:03:28:0d:71:6e:c1:5b:30:6b:54:
9b:17:1e:b0:80:09:d5:60:e0:5d:61:1c:54:6b:ef:
5f:8a:da:9d:8f:61:9e:31:b7:32:94:c2:79:40:99:
8c:22:3c:3a:a1:e9:f9:0d:77:78:38:3c:93:8b:2a:
c1:13:ae:15:ab:bb:3f:22:23:cd:c7:17:2a:c7:5d:
4c:6d:ca:a3:f5:26:fb:85:68:cb:6d:13:e2:c8:b0:
7b:58:d5:81:06:42:0a:64:1b:a1:46:8e:bb:7e:04:
15:f5:6b:3f:5e:ef:53:4c:9e:41:1e:d2:87:2a:8f:
ee:4e:c9:91:23:24:81:d4:da:83:62:af:5c:76:e9:
f9:ac:64:bd:83:d6:df:5f:d2:c4:86:65:e3:49:42:
b4:f1:1f:3c:99:b5:fc:4c:88:75:0a:b0:fa:d2:1f:
a5:cc:aa:16:3b:a5:c3:dd:43:00:d4:b3:bb:37:f0:
c4:60:83:cd:02:6a:18:68:ed:b7:8b:e7:75:01:dc:
e0:e8:79:37:eb:2e:52:6f:bd:19:c5:c3:0f:14:ef:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:4F:9F:B9:F9:4A:1F:31:47:BF:33:EF:3D:2D:69:CF:4D:C4:42
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/J65Pn7n5Sh8xR78z7z0tac9NxEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.72.0/24
212.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:29:e3:68:95:9a:61:ce:7a:6d:65:46:42:be:a2:84:dd:90:
56:a3:5a:0a:57:a7:51:8a:5e:2c:a0:15:d7:85:c0:6a:9e:ff:
87:63:f3:fa:01:29:43:28:38:1a:f5:3c:e9:cf:01:b9:63:30:
52:fd:14:55:05:79:7a:49:57:f7:36:84:93:11:56:5a:8b:06:
21:d5:67:e4:80:9a:78:94:a0:43:2e:c1:aa:f4:6d:cd:2b:e4:
af:88:b0:8b:e4:41:04:c2:80:65:4c:50:58:54:fd:1c:df:2b:
c6:ff:a1:79:84:a9:f1:81:1d:c6:33:71:3d:b9:67:4d:5c:39:
f8:7a:7e:55:86:95:1f:3b:38:ac:37:c0:17:de:7d:5f:d4:d4:
a0:43:b7:20:15:0e:c5:ea:e7:b2:cd:3e:68:9d:49:fb:05:c0:
c3:70:a2:ae:45:ac:c8:cf:60:42:f2:68:a8:e0:7c:46:36:ae:
03:0d:7f:8c:f9:7a:e3:06:9e:c2:61:90:18:b4:58:77:e3:63:
ed:86:18:7a:ac:3a:ed:68:43:70:b7:49:e2:25:97:b2:20:14:
4b:06:a0:cb:5b:e6:2f:2f:c8:9b:90:f8:e1:2f:25:1c:31:39:
b2:9f:2d:ee:10:60:9a:71:33:80:eb:b5:41:fc:9e:97:2f:22:
4b:07:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:07 2025 by rpki-client