Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/pjaKLMuwBrCK2zclw6H70zoKtIk.roa
File: pjaKLMuwBrCK2zclw6H70zoKtIk.roa (raw, json)
Hash identifier: 6es2NusKpE7ziQeD2mfSoLSbfsF4uiyT4uvlC5izuyk=
Subject key identifier: A6:36:8A:2C:CB:B0:06:B0:8A:DB:37:25:C3:A1:FB:D3:3A:0A:B4:89
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 0186448D7C611DAFD4495FA6FE2320475AF0
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/pjaKLMuwBrCK2zclw6H70zoKtIk.roa
Signing time: Sun 12 Feb 2023 07:36:08 +0000
ROA not before: Sun 12 Feb 2023 07:36:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40987
IP address blocks: 185.223.44.0/24 maxlen: 24
185.223.45.0/24 maxlen: 24
185.223.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:8d:7c:61:1d:af:d4:49:5f:a6:fe:23:20:47:5a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Feb 12 07:36:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6368a2ccbb006b08adb3725c3a1fbd33a0ab489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:fd:c3:80:a2:61:a9:0b:58:ab:b8:e1:97:
f0:34:40:99:75:28:6b:a4:22:7f:ec:4c:2d:38:43:
3b:17:21:3b:81:19:da:10:da:24:8a:2d:dd:11:f6:
50:8f:79:5d:fb:c5:c4:e4:e1:54:6d:ce:9c:a1:be:
8b:63:d0:4e:42:4e:e4:65:50:51:a2:96:ab:79:3c:
c0:63:be:36:23:02:b0:c4:40:07:70:b8:65:fb:af:
f1:29:0c:78:92:8e:e1:e1:9b:23:88:a2:45:cc:62:
fc:07:43:c4:c4:b2:29:86:ff:b5:6c:70:cb:a0:10:
9e:7f:3b:5c:f7:72:ec:01:db:f7:d3:46:d1:b6:c4:
2e:27:30:17:53:04:43:78:1c:0a:f1:3d:f8:ff:a9:
71:3a:29:05:e8:c7:a7:9c:a1:41:80:31:7b:52:3a:
c4:50:2b:a2:f3:21:25:33:b4:c2:f1:d2:ce:fe:63:
45:cb:a1:b7:e2:d5:eb:c6:42:61:e6:01:c2:97:cf:
e2:b0:b5:5c:60:80:1b:dc:97:02:0b:19:f2:69:ea:
87:f7:6a:5c:03:f2:52:97:97:36:5a:7b:3c:3e:3b:
88:a0:56:f8:07:f0:0b:d7:98:4f:6c:1c:70:e6:18:
1c:42:47:11:9f:c5:98:08:dc:16:e9:e4:28:1b:4c:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:36:8A:2C:CB:B0:06:B0:8A:DB:37:25:C3:A1:FB:D3:3A:0A:B4:89
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/pjaKLMuwBrCK2zclw6H70zoKtIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.44.0-185.223.46.255
Signature Algorithm: sha256WithRSAEncryption
42:a3:db:62:e9:6f:d2:58:c4:ab:38:0e:cf:02:75:ce:83:79:
4c:31:ad:ba:1b:a6:20:1e:05:8e:55:b1:39:3f:03:88:10:e8:
3b:72:31:51:f2:bd:cf:61:65:88:64:99:45:f9:e9:42:d4:3d:
f0:fb:26:a0:3f:46:99:e8:e2:a5:af:41:5c:43:c3:b6:46:59:
7d:67:2f:90:15:f5:b8:b9:2a:27:42:4c:59:ce:ed:b6:9a:9d:
4f:fc:83:a8:57:9a:d3:46:1c:e0:44:11:81:0b:0d:4a:5f:72:
53:11:10:13:9d:a9:83:20:f6:f7:56:80:12:a0:e9:79:30:e0:
da:81:c8:61:20:e6:cc:4c:ba:22:df:59:b0:80:ee:e1:d3:e8:
f1:d8:09:ab:df:5c:db:5b:75:33:68:8b:cf:85:b2:89:62:9d:
e4:b8:82:f0:b2:22:d2:20:36:d9:da:ed:17:14:fd:9a:7a:62:
2f:ca:bb:78:5a:cc:57:6c:a1:20:6c:14:ad:07:cc:69:98:bd:
d3:37:97:68:50:0b:97:75:a8:17:d3:8f:27:28:47:b2:d0:46:
a3:51:23:f0:46:4d:f0:19:02:6c:ab:de:d2:2b:c9:73:64:7b:
74:b1:ac:e8:ac:f2:01:64:cf:56:3c:d0:be:02:e6:4f:07:9f:
48:a7:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:17 2025 by rpki-client