Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa
File: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (raw, json)
Hash identifier: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=
Subject key identifier: 01:4C:5F:F7:9B:E4:FA:8D:46:B7:FC:2B:7F:A5:0F:BF:2F:A1:EC:E0
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 01941F8C815654ECC2FFA222FCBCE80BBF51
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205655
IP address blocks: 185.211.11.0/24 maxlen: 24
2a0b:60c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:81:56:54:ec:c2:ff:a2:22:fc:bc:e8:0b:bf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=014c5ff79be4fa8d46b7fc2b7fa50fbf2fa1ece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:81:02:30:14:7e:85:62:00:d9:76:b4:ba:
18:da:60:9f:bf:98:54:57:6f:f1:d0:b6:14:45:f7:
43:2f:d7:45:99:a1:3b:c1:cc:e2:82:49:cc:02:83:
31:94:36:4b:8c:be:e5:0a:a0:59:0e:67:f2:e6:1d:
ba:09:2b:c3:11:56:70:5d:e1:ef:93:fd:35:44:aa:
fd:fa:8c:44:80:5f:42:9c:0a:37:46:e5:7b:10:56:
55:5b:3b:d4:79:28:0c:c9:54:2c:c3:6b:c0:7f:85:
a4:67:18:e7:46:4a:af:ee:89:ed:a9:66:53:88:6f:
ae:f9:62:93:a6:9f:5e:63:3a:97:02:28:17:88:8d:
25:d7:11:af:30:8b:6b:5e:bb:63:19:6f:1c:3e:03:
e0:31:e6:67:4c:56:f8:03:04:4a:32:2a:42:de:08:
61:3a:e5:1a:70:ad:65:e8:69:a3:db:61:6b:e8:10:
34:80:a2:cd:91:d2:66:34:dc:da:10:77:82:da:df:
d5:bd:ec:41:c1:53:e4:b6:50:13:3b:e0:77:c1:55:
31:e2:88:b1:f7:80:a2:84:db:4d:48:f3:f2:a1:17:
b6:49:3a:d9:a7:bc:ea:7a:36:14:a4:00:93:c8:22:
85:1d:5f:dc:87:fb:b6:dc:be:c5:73:d0:af:a8:52:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4C:5F:F7:9B:E4:FA:8D:46:B7:FC:2B:7F:A5:0F:BF:2F:A1:EC:E0
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.11.0/24
IPv6:
2a0b:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:21:7c:14:8a:8b:c8:03:7e:60:04:d8:7d:29:37:ef:9d:c7:
68:46:33:d1:33:ee:c3:99:e7:6a:f8:e2:8b:9b:55:fb:13:69:
1e:3d:2f:7c:15:59:fc:dc:bb:ad:01:2f:54:26:6d:b2:e5:89:
4a:f5:88:c4:49:18:2d:6b:b0:72:8a:f8:db:cd:9f:9b:5e:4c:
f3:c6:4f:ea:6c:ba:0c:47:c8:9b:8a:7e:43:ec:b9:18:77:32:
a0:de:1a:71:33:ef:20:3d:ab:78:cb:77:6d:66:98:a2:ef:64:
3d:4b:a3:94:1f:1b:81:0e:dd:e7:10:62:31:dd:cf:17:db:03:
d6:82:d5:d9:ca:d6:c6:81:b7:af:6a:58:dc:dc:38:af:5a:ad:
a2:50:08:78:ed:94:88:99:71:9f:30:31:80:9d:d7:b0:f7:94:
0a:ab:a3:4c:34:9a:90:2a:d4:3d:37:fc:a5:a1:50:70:87:18:
1e:26:20:20:e1:60:8d:5e:32:73:b7:64:7c:42:17:8b:4a:92:
33:01:71:be:50:a0:e1:25:a8:11:94:d7:c0:bb:b4:36:bf:bf:
e2:4e:2e:e8:40:a9:e7:5a:c3:b1:44:61:3c:56:59:d8:6d:3a:
56:62:9c:4e:12:a8:8e:c4:a3:f0:26:4d:c3:13:71:79:33:80:
b9:e4:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:18:39 2025 by rpki-client