Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/LXJlajvgawQz-fcwy_IHn9JUdLk.roa
File: LXJlajvgawQz-fcwy_IHn9JUdLk.roa (raw, json)
Hash identifier: gPA5jmR23VISxR5klM0I8t8+yR5jcA+vzYAiOrq/pxw=
Subject key identifier: 2D:72:65:6A:3B:E0:6B:04:33:F9:F7:30:CB:F2:07:9F:D2:54:74:B9
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E56899C3A1DFFEC2E6920B6DF703
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/LXJlajvgawQz-fcwy_IHn9JUdLk.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56694
IP address blocks: 185.65.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e5:68:99:c3:a1:df:fe:c2:e6:92:0b:6d:f7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d72656a3be06b0433f9f730cbf2079fd25474b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:96:5a:b6:84:4d:20:d1:a0:40:13:9c:1a:
88:1a:47:8f:46:c1:31:dd:0c:0b:bd:87:f7:94:fa:
ae:c4:d5:95:7e:0c:11:08:c9:dd:2d:88:13:59:e5:
86:38:32:3c:aa:d9:c5:69:2b:d0:dd:61:b7:9f:35:
e1:6e:2f:d3:a3:00:1f:6b:92:a0:4d:29:dd:e0:ff:
86:c1:ce:b6:00:f8:13:69:b1:f0:14:04:b8:1a:65:
48:7e:de:b3:7c:0e:8e:07:a2:41:8f:c7:1f:13:a6:
62:24:fa:58:df:10:f4:c4:19:e1:be:c7:ee:73:ed:
b5:68:15:78:f9:28:07:02:03:d4:d9:34:08:d1:c0:
18:1c:cf:33:0b:ed:5b:64:a3:6b:f2:4f:4c:c0:74:
0c:a9:1d:fc:1b:26:1b:72:2c:46:92:93:c0:25:54:
02:eb:3f:cc:73:a6:ed:e2:96:b2:85:c3:85:1e:01:
a8:60:a4:f2:80:5c:f3:97:08:c3:09:db:e0:61:16:
a3:25:59:4a:1b:7e:89:b2:d2:a8:40:a4:1f:e1:d0:
70:dc:dc:1b:73:60:12:0f:38:00:d0:26:af:1f:32:
7d:c9:93:52:eb:f3:40:b2:23:85:be:04:2c:a5:f1:
ca:f0:fa:c0:1d:5a:fb:0e:54:36:cf:a1:d2:0f:d1:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:65:6A:3B:E0:6B:04:33:F9:F7:30:CB:F2:07:9F:D2:54:74:B9
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/LXJlajvgawQz-fcwy_IHn9JUdLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.201.0/24
Signature Algorithm: sha256WithRSAEncryption
57:27:0a:42:4d:fc:a1:8e:b2:05:6a:9f:30:5c:80:4a:4c:c0:
83:1a:36:c3:0f:1d:52:eb:d1:c4:d7:1d:2f:74:27:f7:30:59:
01:dd:0d:a0:1f:42:f7:7a:99:4f:dd:5c:6a:56:79:e1:a9:30:
28:5d:de:fe:ee:ac:b6:1d:dd:bb:d1:b2:55:c3:e1:8e:3e:06:
a5:a8:4b:26:d6:cf:c8:50:83:56:80:4c:6c:74:1d:74:c3:dd:
8e:09:d7:5a:9a:4d:e8:77:2d:b1:14:e5:9a:e9:fe:36:c0:2d:
32:7b:06:c9:a2:15:8d:29:3b:65:69:46:d3:16:a9:c6:c4:16:
1f:23:a7:1c:68:4f:e1:a0:75:dc:91:70:2f:48:fc:30:7b:7b:
83:4d:7e:21:45:28:fe:f7:c7:68:30:d9:2d:9a:6b:8b:55:e4:
3a:ab:a6:17:c0:f6:8e:5b:9e:14:6e:4c:70:3f:25:0e:ad:b9:
06:99:a0:86:74:da:06:77:26:63:be:d6:c9:19:ae:7b:e5:05:
bb:79:65:fc:b9:e1:31:19:fc:5c:16:e0:25:96:1f:45:c0:59:
8c:16:95:6c:04:91:ec:f2:5a:f2:87:d9:ee:a4:cd:2b:10:d4:
9f:bd:db:cd:ab:ec:7d:06:92:50:46:15:3d:b1:0a:60:60:05:
af:fc:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:01:04 2025 by rpki-client