Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/0LoYqwN4EfuOpzNBl81Ir0O3xvg.roa
File: 0LoYqwN4EfuOpzNBl81Ir0O3xvg.roa (raw, json)
Hash identifier: h5JSgifNUd2hd+AKHO4CM6TE/DtVvf5eI+T3LKM47js=
Subject key identifier: D0:BA:18:AB:03:78:11:FB:8E:A7:33:41:97:CD:48:AF:43:B7:C6:F8
Certificate issuer: /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial: 0194221FC5B98E7B7639E2EBB693651A7C74
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/0LoYqwN4EfuOpzNBl81Ir0O3xvg.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8368
IP address blocks: 185.29.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c5:b9:8e:7b:76:39:e2:eb:b6:93:65:1a:7c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0ba18ab037811fb8ea7334197cd48af43b7c6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:3d:fc:45:6a:28:ec:db:83:a8:c7:94:28:
8c:48:58:e1:05:fb:88:15:12:f2:04:b6:44:8e:f6:
bc:37:89:2e:0f:be:8a:50:b6:c0:b4:11:49:83:92:
c6:c2:5a:10:6a:f9:74:44:a6:ab:1a:5c:3b:78:6c:
d4:b3:66:04:e6:93:f7:97:51:04:ec:a2:58:88:28:
37:59:1b:12:4a:d0:67:a2:9c:2b:0b:6b:21:b0:79:
73:3b:65:b2:00:1e:50:65:dd:d2:1b:10:01:40:84:
53:3f:27:7b:18:77:ec:d8:1c:85:1b:c4:86:84:78:
bf:c7:7e:48:e7:e1:a8:cd:e2:ab:32:01:6e:63:bb:
69:98:6c:79:77:73:75:05:60:0d:d9:ca:a1:b7:b1:
dd:28:0c:30:17:bc:f3:2f:f2:f8:7c:ac:53:51:c7:
55:66:3f:42:bb:58:c3:cf:b0:1f:5c:7d:ae:01:6c:
27:70:55:2c:2f:65:b7:26:bc:2c:de:ce:0a:af:5b:
45:a3:56:4a:b5:5c:69:5b:a5:e5:e3:14:46:8f:23:
5e:d2:dc:3c:d3:17:56:be:35:17:a0:05:8c:8d:8c:
d2:5f:ae:b9:99:b3:ed:08:8f:88:6e:5d:8d:c4:ed:
d8:39:7c:75:82:c3:73:cf:39:9f:3d:05:a7:f6:58:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:18:AB:03:78:11:FB:8E:A7:33:41:97:CD:48:AF:43:B7:C6:F8
X509v3 Authority Key Identifier:
keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/0LoYqwN4EfuOpzNBl81Ir0O3xvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:67:e5:98:bb:88:35:3f:d6:dc:0d:00:27:4f:ef:6a:ba:2b:
a5:0b:f5:3e:9b:fc:16:53:44:8f:81:81:42:f0:aa:4b:05:5f:
13:29:c6:d0:fc:09:b8:40:e6:b0:f9:b2:d4:aa:0d:ff:6f:d9:
88:91:9c:07:ae:c7:c4:df:68:50:08:29:7e:06:e9:80:06:a2:
85:b3:f7:53:de:23:95:9c:91:68:bb:7c:87:0e:bf:c4:e2:94:
08:11:d2:cd:93:1a:a8:51:18:0e:3c:db:d3:5f:19:a4:f5:f4:
9e:5b:00:f9:c2:e4:56:e8:c9:44:cc:ad:cd:df:a1:b3:6b:1c:
79:34:60:d6:1f:e7:49:ac:2a:7b:b3:96:2f:af:f9:67:48:47:
a8:b7:40:7a:43:da:29:1a:17:a9:d2:df:6f:cb:39:ff:7d:88:
e2:69:e6:a0:ea:4d:74:46:65:12:de:9b:ea:6a:61:4e:ad:70:
15:c5:1a:9e:8a:74:61:b0:40:7d:db:96:f5:ed:b8:e8:72:8f:
1f:71:79:27:ee:d3:f5:ae:2c:27:d3:65:b4:ac:d9:dc:a1:30:
1a:6a:b4:e2:f8:8f:84:67:f7:00:98:9b:ca:cb:73:5e:f6:df:
10:69:a2:2e:da:4b:93:09:dc:d6:a8:c7:4b:7f:f9:03:a1:6b:
5a:50:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:54 2025 by rpki-client