Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qpXVn6899wrRbizL-ejjlmHTNGw.roa
File: qpXVn6899wrRbizL-ejjlmHTNGw.roa (raw, json)
Hash identifier: WLbvvQt39yLWiJkYBcD0VviPKxLnznjfUtU3LjRDTE4=
Subject key identifier: AA:95:D5:9F:AF:3D:F7:0A:D1:6E:2C:CB:F9:E8:E3:96:61:D3:34:6C
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194221FFBEFDCC2DBB533AA7ECB14A55634
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qpXVn6899wrRbizL-ejjlmHTNGw.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16125
IP address blocks: 185.143.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fb:ef:dc:c2:db:b5:33:aa:7e:cb:14:a5:56:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa95d59faf3df70ad16e2ccbf9e8e39661d3346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:b3:31:ec:41:13:5d:74:46:bc:cd:0a:da:
98:aa:e8:e0:e6:45:c3:14:62:51:97:78:b5:3e:ed:
5b:5c:5e:b1:37:3f:05:e4:57:35:15:8c:a7:60:98:
94:e2:7c:b4:6c:47:dd:6a:61:1e:e6:03:88:a6:0d:
db:93:01:09:6c:43:c9:60:ff:6c:f6:81:64:b7:63:
61:72:b4:a7:57:6c:59:7d:8e:37:2f:ec:3b:43:03:
d4:fa:c6:41:0b:c4:d9:82:c8:f9:76:91:c2:d4:d5:
6b:23:fe:13:45:f8:ef:87:a9:25:a9:54:e9:a9:01:
70:be:58:72:7f:81:45:b5:17:72:25:aa:15:0f:a7:
b1:51:3e:55:0c:2b:9e:f7:d1:aa:90:b0:c3:2d:2f:
e0:1a:a3:5e:0d:95:9f:85:23:92:57:d9:b7:7c:de:
10:0a:19:c1:05:02:89:e2:5d:1d:04:40:40:37:06:
e6:b5:de:ab:12:23:3b:a4:76:66:c6:a3:80:4d:f0:
78:34:f5:08:e5:44:95:17:f5:c3:08:02:92:e7:68:
9d:4b:29:c8:31:5c:e2:97:07:5d:15:f5:ed:dc:be:
5c:f0:f2:33:7f:e1:dd:72:9b:91:ef:70:31:8c:3a:
e3:ed:1a:fc:7a:f5:76:ce:cb:dd:fa:3f:14:a1:cc:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:D5:9F:AF:3D:F7:0A:D1:6E:2C:CB:F9:E8:E3:96:61:D3:34:6C
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qpXVn6899wrRbizL-ejjlmHTNGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.73.0/24
Signature Algorithm: sha256WithRSAEncryption
42:03:12:c2:40:19:d2:0b:02:34:b4:21:c6:c9:57:7a:1e:78:
83:bb:0c:1b:b1:fc:79:20:9a:20:2b:5e:3e:58:bf:1c:e8:bc:
fa:c4:d4:18:43:ac:ce:0b:0c:9d:e4:6c:33:d3:28:fd:22:2b:
e1:d8:b2:4f:83:6f:80:bd:92:4d:89:d8:40:71:16:f6:0b:c5:
bc:88:8c:a0:3d:57:40:e3:f3:d1:1c:e5:d8:c6:b4:cf:8e:62:
25:86:fe:8e:f9:9b:41:74:63:f1:a2:f3:64:59:a8:9e:30:6a:
a4:5b:d0:85:78:8d:8a:7b:64:2d:78:05:52:3a:23:d0:39:e5:
17:ef:d4:ff:03:9f:c3:f4:57:76:88:d0:6a:2b:75:94:a3:6e:
be:9b:26:27:21:27:28:a7:ab:7d:07:c7:30:2d:c7:3f:c8:0c:
b4:fc:44:65:d0:53:45:22:7f:6a:5a:da:69:7f:a2:e9:4e:ba:
6b:a4:e9:5e:8d:b0:7e:41:eb:f6:7d:b2:2b:c0:71:ca:16:8d:
4d:a8:5e:08:e3:a7:c2:a1:dc:8b:72:1a:1c:14:c4:92:08:fd:
3e:52:99:02:4e:00:98:ad:f4:17:6d:7a:a8:5d:6c:91:de:5d:
28:ae:55:8f:00:f9:2b:55:b2:46:9f:d7:10:f3:3b:67:fc:e1:
15:16:9c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:14:28 2025 by rpki-client