Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/Uev3ms-PRGrivyRSUw9HwGncKw0.roa
File: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (raw, json)
Hash identifier: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=
Subject key identifier: 51:EB:F7:9A:CF:8F:44:6A:E2:BF:24:52:53:0F:47:C0:69:DC:2B:0D
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 01943D0EAB092C1F0D6A097D9E21949BFE7B
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/Uev3ms-PRGrivyRSUw9HwGncKw0.roa
Signing time: Mon 06 Jan 2025 19:19:18 +0000
ROA not before: Mon 06 Jan 2025 19:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 185.20.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3d:0e:ab:09:2c:1f:0d:6a:09:7d:9e:21:94:9b:fe:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jan 6 19:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51ebf79acf8f446ae2bf2452530f47c069dc2b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:a6:4b:58:cf:b5:34:59:58:f2:6b:2f:11:
d8:99:70:5b:97:29:fb:68:80:f3:cd:5f:2b:fa:4d:
01:d6:53:01:94:24:17:b0:d6:a5:d9:4d:0b:50:f0:
49:81:d5:81:17:b6:2a:f2:a5:8e:a9:ff:8a:37:ac:
33:45:0c:a0:59:b4:52:93:71:ae:c1:f1:de:d0:f6:
1f:8a:ef:33:07:9b:f2:46:58:a3:4f:c7:be:1c:5a:
34:67:b9:1e:ac:cf:80:97:a3:d4:c9:27:dd:31:c4:
07:13:12:1c:9a:ac:47:ce:34:d9:fc:10:1d:2a:ae:
09:76:75:7b:15:fc:3f:b3:2c:16:35:1d:b3:e9:cd:
53:35:3a:f8:3b:15:35:e2:7e:66:00:ef:b0:0c:15:
48:5d:3a:e9:57:ac:e7:15:2c:13:c9:0d:f4:f1:15:
72:b0:99:bf:86:ab:36:8b:10:84:e0:dc:0a:a7:17:
f4:b1:98:95:ed:a0:91:73:81:e1:50:95:e7:c1:48:
24:0d:9a:44:01:9b:d9:ac:26:7d:04:54:aa:6c:28:
00:87:f0:ad:01:cc:65:fe:6b:b8:dd:1d:ba:52:c9:
76:c0:c4:59:8f:21:fc:4c:93:e9:d5:84:c0:2c:81:
e5:1e:c6:ba:a2:7e:af:fe:c5:ad:c4:b9:47:7e:36:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EB:F7:9A:CF:8F:44:6A:E2:BF:24:52:53:0F:47:C0:69:DC:2B:0D
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/Uev3ms-PRGrivyRSUw9HwGncKw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:04:e3:df:14:6e:1c:62:8c:1c:64:8b:83:0e:3c:0a:80:48:
56:a8:18:1d:a4:1b:8a:3a:49:70:2c:51:c5:ab:d6:fe:96:07:
ae:a9:c8:e5:2c:58:b8:3b:48:9b:dc:f8:43:4d:b4:7c:bd:5e:
89:de:ce:ce:90:10:50:d3:24:fd:80:bf:3a:9b:21:4d:2c:cc:
d2:bd:3b:27:ef:49:56:ad:e0:6f:b7:b3:70:e9:9c:b6:54:d5:
25:d8:b4:c9:f6:d4:66:6d:00:96:be:7c:4a:ee:46:65:5b:b0:
f7:ba:40:ce:96:eb:21:ae:9f:6a:f7:f3:92:c8:7b:d2:16:8c:
51:42:78:19:cc:6e:68:f6:c3:e1:c7:59:54:58:26:0c:7d:91:
44:21:94:1b:d0:a7:79:16:d6:24:21:db:9f:b2:8a:45:e5:d5:
11:93:8d:63:23:c0:94:31:35:23:88:4e:92:30:ae:4d:ca:98:
87:07:da:4b:be:0f:38:c8:8b:0a:77:bb:a7:e5:db:b9:7b:f6:
41:c5:d5:b9:6d:92:40:56:84:1c:ca:f4:a3:da:20:33:bc:2e:
13:93:53:ac:94:b8:19:cb:c9:f7:78:4f:f3:07:f9:3a:60:77:
d7:9a:a4:fd:02:08:11:3c:26:46:26:83:7c:74:3f:95:68:9b:
d1:52:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:53:44 2025 by rpki-client