Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa
File: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (raw, json)
Hash identifier: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=
Subject key identifier: D6:E0:2E:28:BB:74:EF:6F:99:42:50:C4:68:4B:C9:E1:C5:59:B7:45
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0194266C41DCA194AC8CF0113233351680E8
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.137.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:41:dc:a1:94:ac:8c:f0:11:32:33:35:16:80:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6e02e28bb74ef6f994250c4684bc9e1c559b745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:c6:99:79:e9:1a:0d:fc:d4:1a:34:52:48:
d5:52:2f:51:23:59:91:ce:89:e1:02:2c:f0:af:57:
f8:3a:de:03:43:18:61:23:ae:4a:d9:80:6b:ae:c2:
3f:db:23:be:b1:dc:84:f3:4e:53:76:db:a5:3b:17:
56:5f:79:60:34:e8:1f:1a:10:ef:03:68:cd:c9:8a:
1a:60:23:ad:bf:cf:49:7a:bc:24:86:a9:c2:07:db:
3c:90:19:3e:e5:13:1b:7e:77:bf:55:ae:65:29:51:
c9:ae:db:54:80:ce:8a:1c:13:29:e5:69:d3:c6:ca:
43:f1:f2:a0:e7:24:ee:10:12:6d:f5:52:10:cd:1b:
47:dc:8f:8e:87:c2:f9:03:61:3b:41:2b:ac:84:fb:
6d:26:d9:f6:13:2c:b7:f3:54:92:b0:6e:9f:da:bf:
dd:b3:0a:de:71:19:cb:ec:c4:a2:19:a1:ae:d8:5d:
2f:e7:2a:f2:1f:b4:08:a4:c3:fb:98:2c:7d:5c:1d:
b7:1c:71:d8:f2:ee:53:06:07:28:3c:60:77:ee:fc:
ff:ea:ff:ee:19:59:97:4c:52:a0:4f:3b:26:ac:16:
8c:34:35:9d:7c:d0:c3:74:82:b1:fc:4b:d0:b9:e7:
bb:02:63:b0:7f:c7:a5:98:12:57:38:fe:7b:00:2c:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E0:2E:28:BB:74:EF:6F:99:42:50:C4:68:4B:C9:E1:C5:59:B7:45
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:79:0f:8c:82:9e:50:92:21:86:2f:bc:4b:52:3c:60:ee:1f:
1f:08:87:d3:05:87:27:50:6c:26:fc:ea:45:f6:60:c5:e6:46:
64:4d:33:38:9b:91:17:90:34:82:ca:6e:8a:e5:b4:f5:30:fd:
9c:93:07:41:80:7b:67:35:35:26:ed:a2:ae:31:fc:7e:68:88:
fe:96:a9:04:d1:07:aa:5c:dc:0e:0f:72:49:45:07:e9:61:d9:
3a:02:24:90:3f:32:4a:5d:2e:0b:42:44:e7:34:b7:94:53:b1:
51:19:ca:0c:79:ff:1b:c3:b0:fd:6c:5a:81:12:7f:24:ee:62:
aa:13:30:68:b8:99:c5:b5:5e:fd:ae:69:6f:fd:c5:7b:59:dc:
7a:bc:5e:09:cb:90:b0:23:e0:48:8c:71:e3:53:86:de:74:2f:
78:5a:9d:f7:c4:2e:40:b4:87:09:9e:fe:23:cd:e1:9b:26:5d:
c5:bf:e3:2d:3a:48:09:20:f2:57:28:c0:9a:84:1d:84:ec:41:
ce:26:66:db:97:7c:ef:44:62:2d:47:c5:5e:84:c1:01:8d:5b:
32:a5:c9:43:d6:87:3e:a7:d7:0a:e3:94:49:fd:d9:bb:51:7c:
da:78:d2:13:09:f5:02:1f:6b:14:81:93:e3:2b:b9:f6:ca:eb:
44:b9:45:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:40 2025 by rpki-client