Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/64T0ThntK_T_XpMgojpC9XD428A.roa
File: 64T0ThntK_T_XpMgojpC9XD428A.roa (raw, json)
Hash identifier: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=
Subject key identifier: EB:84:F4:4E:19:ED:2B:F4:FF:5E:93:20:A2:3A:42:F5:70:F8:DB:C0
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 01941F8C68B281ABE56ADC9E4C1BF0376821
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/64T0ThntK_T_XpMgojpC9XD428A.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204811
IP address blocks: 185.239.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:68:b2:81:ab:e5:6a:dc:9e:4c:1b:f0:37:68:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb84f44e19ed2bf4ff5e9320a23a42f570f8dbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:b6:32:e3:fc:cd:04:06:eb:8b:d3:f0:e8:
c5:0b:31:87:a3:cb:9c:71:db:5f:a1:22:05:5a:89:
68:9b:f4:a9:36:36:a3:ea:ab:5f:93:ba:2e:52:ba:
06:20:32:76:88:81:b9:dd:e5:d5:00:21:6d:4d:d5:
70:fb:02:5d:e7:8c:90:11:4a:13:c9:52:5b:54:99:
b3:b7:ec:ab:76:72:ab:a0:fa:57:51:08:34:0a:19:
28:e2:dd:49:04:30:96:29:6f:d8:f3:7d:fb:72:17:
ae:c1:3a:f6:60:99:2d:15:2b:c0:2c:a0:96:3b:03:
53:ef:e7:c5:d1:2d:2b:d6:f3:b1:b5:4d:42:32:47:
d3:d4:ec:5a:cb:96:59:94:b4:cb:b2:03:d6:94:34:
2d:bf:0e:bd:bf:4b:b2:ff:76:48:fd:6b:18:1b:9c:
05:b2:03:2d:8b:ea:74:2e:af:ef:b9:74:89:af:4a:
c0:8b:4e:62:1c:12:ea:df:a5:1a:de:7b:f6:92:a6:
0f:b1:d1:20:97:c1:ef:fe:17:10:b6:9f:15:89:58:
05:c5:27:b6:d7:33:f0:51:c9:03:f0:d9:04:2a:99:
20:89:22:46:94:77:dd:85:f8:53:4a:22:72:37:17:
89:0c:8a:62:33:c6:c3:a3:09:54:5e:9a:90:33:5b:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:84:F4:4E:19:ED:2B:F4:FF:5E:93:20:A2:3A:42:F5:70:F8:DB:C0
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/64T0ThntK_T_XpMgojpC9XD428A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e1:6c:98:84:a4:17:d6:5b:6a:f3:57:60:4b:9a:d7:c1:f3:
38:d2:7a:1f:4e:c6:ca:c3:49:ac:15:cd:8a:89:e6:3b:14:bf:
79:c3:38:8d:59:38:17:2c:4c:d6:cb:79:73:58:ca:cc:e9:44:
a5:f2:53:e1:8f:81:48:85:30:3b:91:35:d7:af:77:f1:c0:c2:
24:c1:e5:f7:38:eb:fd:72:dd:f2:ea:63:aa:c6:47:15:4c:aa:
46:b9:d4:35:89:f4:e9:ff:20:dd:e9:30:b5:07:41:6d:18:fd:
54:10:0d:5b:6e:27:d6:c8:1d:67:75:1c:90:1c:f8:8b:92:c1:
8a:de:b7:03:6c:1f:54:42:ee:b0:99:e3:dc:ab:5d:6b:ff:ef:
bc:3b:89:80:1e:c6:a2:8b:76:89:02:31:d4:9d:52:be:d3:55:
a6:1f:4f:6a:a6:95:22:5f:2b:87:1a:12:c3:93:00:5f:da:2d:
c5:a4:62:82:70:9f:ca:3b:d3:2b:95:7c:98:e0:48:3d:66:f2:
9e:4b:47:c2:69:6a:44:7e:da:84:d5:e2:aa:4f:60:4c:04:70:
0f:75:4a:80:6d:97:47:22:fd:01:76:8b:1a:c9:94:59:d4:9b:
59:ac:09:79:27:70:a6:4d:3b:90:b2:73:13:4f:cc:5c:4e:2f:
fa:4e:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:28 2025 by rpki-client