Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa
File: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (raw, json)
Hash identifier: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=
Subject key identifier: 2D:30:20:10:F7:08:83:B5:D0:07:32:B7:0A:3F:48:E4:F5:4B:32:4D
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 019427B4143724B83FDA486F012BA94CD6B1
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa
Signing time: Thu 02 Jan 2025 15:48:20 +0000
ROA not before: Thu 02 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42956
IP address blocks: 185.81.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:14:37:24:b8:3f:da:48:6f:01:2b:a9:4c:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jan 2 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d302010f70883b5d00732b70a3f48e4f54b324d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:19:9c:a6:e0:e2:9e:a4:97:72:e8:53:8f:
7e:35:11:f7:97:1f:17:ca:66:7c:e8:6e:b6:a7:19:
6e:49:36:ae:87:de:0d:d8:7b:76:6a:30:d7:4e:1d:
d0:5a:a1:3f:b5:22:c2:08:ec:e4:88:43:f5:f5:0b:
a9:ad:8a:72:d8:e7:03:3b:1d:52:56:c3:f7:5e:90:
45:3f:0e:02:66:42:fd:bc:34:8b:d5:bc:69:d4:cb:
2b:aa:17:a0:4c:c4:9d:48:c4:a6:53:f8:3d:30:ad:
57:c5:d8:44:c8:47:9c:03:09:78:77:66:84:12:7e:
af:20:73:05:e0:95:1a:de:79:1c:ab:9e:09:a4:c2:
41:ab:04:01:c8:b6:1f:c0:c1:d0:cd:0c:00:9f:11:
0c:a3:29:7f:ec:5f:ef:60:f0:52:e7:a4:e1:f0:65:
9c:d6:69:a7:12:d1:3e:d4:50:7e:1a:e4:79:6d:ee:
78:c3:6c:b5:52:b3:9e:54:82:84:8e:f0:be:42:85:
b3:3d:3f:7f:6d:6f:61:f9:9b:d4:b8:5b:f6:a9:ed:
60:3d:89:ce:91:04:e1:60:9a:e8:1b:b0:e9:64:86:
9f:d6:f5:27:d0:59:7c:09:a1:28:fe:c0:eb:c6:b1:
5d:42:55:82:be:88:ef:5d:28:d4:de:17:a2:dc:5a:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:20:10:F7:08:83:B5:D0:07:32:B7:0A:3F:48:E4:F5:4B:32:4D
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.122.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0f:4a:fc:c6:85:41:86:55:3c:9e:94:3d:17:fd:06:1e:0e:
88:76:42:63:a2:6a:7e:2a:74:20:9f:c9:94:9e:30:e7:14:1d:
6e:97:e4:22:ea:a6:5f:41:b9:f7:8c:9c:c6:7c:aa:28:c4:fa:
c6:0c:a9:1f:05:c7:84:5a:72:72:c2:2f:d1:25:3b:c5:70:b5:
68:e5:b3:68:40:4e:2b:c0:64:9e:95:10:e0:cd:c9:ba:d8:a3:
f2:24:19:5b:73:7b:6e:b2:51:c9:31:e9:62:85:72:c4:68:10:
b3:31:a4:06:b1:57:34:69:4b:9f:c9:bb:ec:e9:a2:b2:85:b8:
88:7c:f2:39:e7:f3:63:43:8b:b1:2d:74:50:76:d0:a7:0b:b9:
48:54:21:10:2a:de:97:4c:4f:a9:74:ef:4a:f2:71:c7:6f:d2:
35:f5:38:25:ca:0e:55:14:f4:8c:c6:e0:94:c7:a7:82:bd:8e:
f6:68:f3:5e:8e:4d:4e:d2:4f:7b:7a:4c:5f:20:37:3c:44:0c:
9c:8d:85:2d:fe:0e:e0:e4:10:28:52:bb:ea:04:86:c2:30:f1:
96:c8:36:69:ab:bf:31:be:47:9f:69:75:f1:34:b2:64:20:f9:
83:1a:d8:f6:6b:64:00:63:00:43:66:27:47:51:1d:df:eb:be:
52:6a:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:38:47 2025 by rpki-client