Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/V64dlNuRxsB4pj8KUNyI80O85tg.roa
File: V64dlNuRxsB4pj8KUNyI80O85tg.roa (raw, json)
Hash identifier: 2nVKvx4azH+bxWy0PRhnAkeITVbTxn6s3MeHunV69tk=
Subject key identifier: 57:AE:1D:94:DB:91:C6:C0:78:A6:3F:0A:50:DC:88:F3:43:BC:E6:D8
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 019425FC0B047B4589ED24F412A4FA5488D6
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/V64dlNuRxsB4pj8KUNyI80O85tg.roa
Signing time: Thu 02 Jan 2025 07:47:42 +0000
ROA not before: Thu 02 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206756
IP address blocks: 185.175.116.0/22 maxlen: 22
185.175.116.0/24 maxlen: 24
185.175.117.0/24 maxlen: 24
185.175.118.0/24 maxlen: 24
185.175.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0b:04:7b:45:89:ed:24:f4:12:a4:fa:54:88:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 2 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ae1d94db91c6c078a63f0a50dc88f343bce6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:14:9b:36:e2:62:0a:b4:26:86:96:7c:ae:
68:19:b1:f7:33:11:73:d6:34:03:37:d3:78:0b:14:
a7:40:2f:9a:5b:2e:7c:57:48:be:43:a3:34:fd:0c:
df:d3:39:a1:a4:09:90:14:d4:6f:c8:1d:ac:61:ee:
05:a4:11:32:a0:d2:3a:b7:27:d5:0f:f0:d6:24:6e:
4d:da:bb:75:78:3b:68:55:3e:81:da:02:47:48:1b:
04:9c:53:12:03:b3:88:97:e9:03:75:37:37:ae:c0:
19:00:6c:57:bb:e7:44:7b:97:47:ab:bf:d0:57:dc:
19:9c:6c:0c:d8:c4:62:2d:f9:fa:66:c1:a3:0d:ef:
54:ab:ad:cc:12:3b:66:17:0a:ab:ab:d5:f4:6e:df:
db:99:af:27:57:5a:24:91:a2:50:a0:72:97:70:fc:
33:99:65:2c:ce:00:37:8e:b8:49:b1:a9:d4:27:71:
7c:67:b9:2f:c2:60:ea:16:14:8f:2e:c6:36:89:e9:
23:b1:5e:cc:8f:15:73:0a:2c:c6:57:ad:dc:3b:63:
8f:4a:4c:c8:8d:82:c0:96:d1:a2:4d:db:63:2e:43:
36:57:57:45:d7:f1:83:93:a3:7b:97:82:a1:e1:86:
3f:08:a8:7f:b6:d9:dc:a3:f2:2d:57:a5:02:52:ba:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AE:1D:94:DB:91:C6:C0:78:A6:3F:0A:50:DC:88:F3:43:BC:E6:D8
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/V64dlNuRxsB4pj8KUNyI80O85tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:30:28:c9:6b:73:7f:4b:31:25:3a:cd:7f:94:b8:7c:c6:fb:
07:6b:e8:a2:9b:41:9b:c6:21:3e:40:6c:0d:f1:80:3a:92:df:
93:26:a2:cb:af:5d:e0:e7:6d:cf:c7:49:f9:0f:17:51:96:32:
60:4b:a0:0a:a1:4b:e7:87:bd:f0:20:55:92:c8:a2:57:e6:81:
f2:b4:ba:d2:f3:9e:f4:7d:82:fe:9e:6d:e2:c8:83:04:a9:71:
9f:3e:c3:28:02:b7:1b:f7:cf:df:25:dd:77:c3:d4:85:35:1e:
b2:0b:6f:7b:3b:da:d3:6b:f3:3a:be:8e:d9:a7:0a:3c:b7:1a:
fd:74:8e:75:b3:37:c4:53:51:1c:27:03:56:b0:5f:b7:c8:c3:
6c:0e:d4:75:20:82:06:af:75:04:8c:69:0b:36:6b:ce:30:9e:
b7:ac:ef:da:d4:9d:41:ca:f5:de:fb:ce:69:9d:0d:64:00:a1:
e2:c6:c9:91:1d:bb:55:45:3c:0d:7a:74:27:09:a2:5a:ab:0c:
de:9b:b4:39:d3:29:d4:b8:e5:9f:b0:3e:10:2c:6c:99:f3:38:
93:e2:93:79:2c:6f:ed:6b:4f:82:df:26:f0:06:89:d1:4c:1e:
2f:b0:78:4a:3c:ea:18:11:27:55:c6:a8:1a:f3:bc:61:03:b5:
cc:c2:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:50 2025 by rpki-client