Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/ilp0a42y4ZM8M4NmpHagTEQmfIY.roa
File: ilp0a42y4ZM8M4NmpHagTEQmfIY.roa (raw, json)
Hash identifier: b8xhghXOeNEICuuPH88EHMI0zu8DkuF/9JKbLv1CD0s=
Subject key identifier: 8A:5A:74:6B:8D:B2:E1:93:3C:33:83:66:A4:76:A0:4C:44:26:7C:86
Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial: 019421443B528304879DADDD1C9D61C78DE7
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/ilp0a42y4ZM8M4NmpHagTEQmfIY.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 185.70.45.0/24 maxlen: 24
185.70.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3b:52:83:04:87:9d:ad:dd:1c:9d:61:c7:8d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a5a746b8db2e1933c338366a476a04c44267c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:ea:f0:41:95:f4:92:a4:df:65:2f:e2:ef:
f1:99:a4:25:87:5f:c8:14:8d:e3:d0:02:00:0f:23:
38:c7:db:77:6d:83:67:86:23:7f:18:19:ee:5b:c1:
c8:7c:9e:08:96:9e:97:4b:4d:84:20:bb:ce:93:64:
b1:6f:4f:f8:17:b6:3e:b9:0f:fe:31:51:f1:3f:79:
06:cd:c2:f3:42:13:08:5c:c8:25:f4:a3:69:f0:3b:
69:ce:7d:42:9d:c4:fa:31:48:91:c7:55:41:03:26:
27:b9:ec:68:04:a4:14:77:f1:6c:ef:61:18:a3:81:
a6:20:16:f6:4e:5d:fa:d2:df:da:62:fd:1c:5f:75:
e9:69:1f:5a:bf:48:2e:19:4b:02:a5:7b:27:1f:99:
22:3d:78:ec:15:f9:df:1f:15:d0:b8:5c:75:1f:77:
f3:3a:97:d3:b4:04:0b:22:15:08:82:b3:72:69:4b:
03:1a:86:35:73:73:cc:71:92:5e:59:8c:f2:00:ec:
62:18:e2:63:7a:12:d4:17:32:5a:c5:d1:73:ac:33:
2b:d0:32:c5:5b:f5:03:f2:f3:cb:a9:0a:c1:53:2a:
bc:3c:0e:7b:37:b2:87:90:bc:e9:48:bc:f3:8a:ae:
b7:23:25:da:f1:c8:fc:41:3c:6f:19:47:a4:a1:d7:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:74:6B:8D:B2:E1:93:3C:33:83:66:A4:76:A0:4C:44:26:7C:86
X509v3 Authority Key Identifier:
keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/ilp0a42y4ZM8M4NmpHagTEQmfIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.45.0-185.70.46.255
Signature Algorithm: sha256WithRSAEncryption
aa:33:c4:30:e0:8a:7e:29:4f:d6:e6:c0:f8:a1:e2:01:5c:f1:
b0:a8:cc:7f:40:88:5a:d7:dd:f3:29:13:bb:9a:49:fc:f2:5a:
51:9e:24:03:19:45:f1:29:bc:7f:dd:a2:38:38:7d:60:3c:b3:
68:53:c0:2b:a6:9a:e8:54:f3:c6:58:2d:97:d6:8c:a6:21:1f:
98:f7:06:a8:62:34:b9:34:e5:2b:52:bf:80:56:ca:84:f1:ad:
5a:05:78:57:dc:01:58:94:49:f3:e0:63:fe:1d:59:7a:2a:03:
e6:03:64:91:30:a9:3e:2f:38:b0:b0:e8:30:75:69:91:ba:d1:
d2:b1:55:06:56:75:88:2a:48:d8:ef:29:ea:42:ff:7e:6e:79:
b3:9c:ca:7f:ea:f0:19:fb:93:cc:73:7a:d8:31:d8:50:ef:a2:
21:43:c6:b3:15:c6:a8:fe:1e:f8:13:ba:66:d9:e8:d3:7d:d2:
6e:07:ff:b2:b3:2f:60:6c:7b:a6:e0:8a:6b:da:1b:54:92:8d:
66:a0:01:cd:5a:ba:7d:34:35:33:d6:cd:24:61:4e:c9:18:d4:
a4:9f:07:a1:f0:b1:17:f6:31:9f:a1:6e:bf:80:09:ed:93:8c:
32:7f:c4:33:02:8a:6b:43:45:cd:ad:a5:0d:38:63:ee:51:3f:
5d:2b:b8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:31 2025 by rpki-client