Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa
File: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (raw, json)
Hash identifier: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=
Subject key identifier: 9B:54:BB:22:0F:04:A0:9F:9A:B7:BD:2F:65:11:76:51:BB:89:8B:94
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 0194258EEEB4543CBAFD74DFC30E3FA8E728
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60111
IP address blocks: 185.255.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ee:b4:54:3c:ba:fd:74:df:c3:0e:3f:a8:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b54bb220f04a09f9ab7bd2f65117651bb898b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:ce:90:77:cf:b0:c1:7d:c1:74:57:de:c1:
7e:04:68:fa:e4:ae:78:19:6b:f2:c8:10:eb:7c:bd:
c8:80:6e:23:ad:8b:10:e7:a8:32:a5:17:63:3b:93:
d0:54:14:de:e0:d8:92:7b:1c:24:af:95:e5:4d:00:
71:a2:81:e1:05:44:ab:37:b9:09:ab:1d:0a:3d:62:
ec:07:09:81:52:83:f6:a7:3f:24:f5:1e:d2:1c:51:
32:58:4a:f6:33:77:d1:55:96:85:bc:74:51:82:2d:
e9:8e:1c:56:b6:13:26:ab:06:ce:86:31:54:bb:9c:
ea:0d:d0:1c:e5:c3:c5:17:de:b2:a5:14:3f:69:a4:
ad:4c:7a:2f:b3:c8:52:03:a1:fd:0f:0f:a6:29:86:
cb:79:70:c4:e8:00:b0:43:bd:53:6a:3e:4c:ea:78:
3e:72:ba:13:a3:25:fd:7f:0f:72:67:18:83:a7:e4:
5b:26:4a:b9:ef:9a:5c:84:c6:68:03:00:66:3d:c7:
ce:f7:27:0b:c7:a9:c2:a0:1e:fe:2b:ae:d0:d8:ac:
67:94:aa:97:6b:8c:99:ac:72:5b:96:85:29:88:da:
74:33:da:0a:af:bb:ba:09:5e:dc:59:b9:d0:93:9e:
8a:be:9c:ec:a1:53:90:20:e1:54:65:b2:54:b1:bd:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:BB:22:0F:04:A0:9F:9A:B7:BD:2F:65:11:76:51:BB:89:8B:94
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.156.0/22
Signature Algorithm: sha256WithRSAEncryption
85:29:fe:ea:27:47:a4:7e:ce:86:f7:79:44:84:a0:c4:a3:01:
6c:bb:c7:35:a6:fb:c5:26:16:de:6d:f7:cd:90:5d:e3:10:ef:
fe:21:48:cf:a2:0b:8a:c4:36:b2:99:ce:c2:76:94:f0:aa:c8:
eb:e1:e1:62:a0:35:3a:23:5c:36:8b:c7:a4:2b:21:ed:0d:5a:
08:02:e3:5a:00:f5:0d:a9:62:77:db:ac:2b:0a:59:c6:1d:2a:
43:48:46:58:6f:13:9a:c8:69:e7:2c:9b:74:f7:7d:04:eb:42:
2f:97:b4:5b:4f:b9:97:9b:d4:03:04:e5:85:11:74:88:f4:31:
20:e5:70:a9:5e:95:2d:4f:b9:4a:91:23:16:a1:fe:2c:2a:b6:
d0:e5:7b:f1:35:86:9b:b2:8d:43:8a:7e:e7:e9:7a:18:2d:a4:
1d:ac:b9:11:cb:5a:2b:94:9e:a6:54:8b:66:15:a1:ca:74:b1:
66:7c:0a:71:f2:71:cd:26:77:f5:d7:88:3d:f7:31:6c:2e:e5:
0c:b7:85:50:db:21:84:75:8b:0b:db:f0:ec:c9:ba:5c:9d:05:
72:70:f5:52:e4:b9:b9:d1:f4:ae:7a:78:9a:e0:55:62:f2:88:
2e:06:e7:16:79:80:46:bc:ae:17:9f:70:4b:d8:9b:87:75:a4:
3d:65:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:14 2025 by rpki-client