Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/xx8xA0JnzBykNL-Z7GzXL0j5bD0.roa
File: xx8xA0JnzBykNL-Z7GzXL0j5bD0.roa (raw, json)
Hash identifier: 476qF8QW7rlffGimT6vIV2UtU8yiqDsBP0tdI7yQI0M=
Subject key identifier: C7:1F:31:03:42:67:CC:1C:A4:34:BF:99:EC:6C:D7:2F:48:F9:6C:3D
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 0194236A153555DB7C85016974DFC53651CC
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/xx8xA0JnzBykNL-Z7GzXL0j5bD0.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8218
IP address blocks: 185.75.241.0/24 maxlen: 24
2a05:5504::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:15:35:55:db:7c:85:01:69:74:df:c5:36:51:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c71f31034267cc1ca434bf99ec6cd72f48f96c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:55:ef:e8:18:77:8b:b8:75:ff:b6:06:0b:
d9:e4:be:0d:90:21:a1:af:0e:50:e7:3d:d8:fc:51:
aa:2b:ac:82:e2:d8:5c:a0:79:09:f0:ba:4e:15:60:
96:aa:43:44:65:4c:ec:1e:e9:6a:7b:20:f4:b0:b9:
4a:c0:f3:a4:59:a0:41:48:7e:a3:36:a4:f6:0c:7b:
85:63:ea:20:a9:fa:79:c9:84:bc:08:88:98:bc:34:
19:a0:94:f1:e0:03:bf:c3:f3:31:bc:28:d6:1b:de:
15:db:47:41:54:ba:ee:93:bc:d4:1d:29:d5:9d:d1:
78:e8:63:21:70:0f:69:ea:49:26:42:f5:40:a8:6a:
26:3a:7f:27:2b:d1:1b:07:ba:c0:b1:58:88:81:56:
27:10:97:94:90:86:c9:dd:5a:1d:9b:3d:9f:3b:8e:
c8:e5:85:c6:03:e9:ce:2a:b1:23:5c:1a:cc:b2:62:
f8:51:ed:19:0e:dd:0c:91:9f:19:ae:1d:7b:f4:60:
8e:c2:c0:73:ca:17:3a:67:8a:74:b4:77:12:1e:bc:
8c:64:15:d8:40:8f:87:8c:1c:30:f6:ff:20:f7:a0:
7a:d9:3f:01:a6:d7:c2:88:a4:5a:10:72:99:73:bf:
cd:de:9b:b4:2a:f2:8b:2e:81:81:48:c4:9a:50:4d:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:31:03:42:67:CC:1C:A4:34:BF:99:EC:6C:D7:2F:48:F9:6C:3D
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/xx8xA0JnzBykNL-Z7GzXL0j5bD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.241.0/24
IPv6:
2a05:5504::/32
Signature Algorithm: sha256WithRSAEncryption
2d:d0:39:ae:70:f7:0a:38:d3:1f:b5:ab:48:ec:e8:44:39:79:
cd:08:98:1b:31:1d:1d:41:6f:f5:07:fd:10:2f:03:c3:e6:ac:
37:22:49:56:03:43:c8:b1:98:73:d6:3e:08:26:98:3f:a5:2f:
ae:9d:70:d6:ea:7f:ea:66:ed:2e:7f:ac:cf:d2:81:92:2a:2a:
5f:f5:cb:34:f7:2f:81:c7:c0:e4:6d:ef:39:96:7e:86:3b:84:
58:96:56:45:06:23:71:83:e2:8a:d0:0e:57:f3:ea:f7:92:fa:
9c:d2:e2:6c:6e:1d:a2:2d:e8:b0:4c:59:36:ec:2a:52:5c:70:
18:51:92:e9:5c:25:23:aa:e5:78:6f:c7:ef:93:da:d2:dd:27:
13:b4:7c:1e:1b:35:c6:dd:22:11:3b:36:20:7f:05:fd:d8:51:
f8:56:4a:99:b6:40:03:e0:14:a2:03:8c:4c:b8:b8:9a:29:98:
06:f2:80:ac:38:e9:e7:45:bb:b8:90:03:a7:07:03:38:da:e2:
94:b2:cf:ab:2f:fe:5c:fd:ce:ec:5b:ce:2f:cb:d0:80:cf:6d:
8e:0d:cf:54:b5:6b:db:60:e7:40:b6:40:65:9c:8b:ba:c3:b1:
5f:15:9c:c1:47:ee:1a:06:51:1c:ed:34:a6:12:3e:de:62:60:
91:13:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:32:45 2025 by rpki-client