Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/hjRwwruuc7xXtL8W5gfmyR6abQw.roa
File: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (raw, json)
Hash identifier: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=
Subject key identifier: 86:34:70:C2:BB:AE:73:BC:57:B4:BF:16:E6:07:E6:C9:1E:9A:6D:0C
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 019421B1FA732C0D037BFE9DECFFD224F0D9
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/hjRwwruuc7xXtL8W5gfmyR6abQw.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 185.240.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fa:73:2c:0d:03:7b:fe:9d:ec:ff:d2:24:f0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=863470c2bbae73bc57b4bf16e607e6c91e9a6d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:8b:8c:27:54:1f:99:6e:f9:93:54:dc:87:
33:69:8b:0c:b9:7f:75:4b:ae:91:bd:c3:2a:a0:cf:
f3:de:bf:04:61:08:0b:4f:a8:91:6a:0e:bd:15:90:
78:98:fd:b1:51:ee:a9:3c:f8:49:30:8b:b9:7d:ae:
d7:a7:e9:b3:05:89:f4:0a:88:5b:6d:68:00:18:e5:
fc:da:86:56:12:d5:74:2a:ea:0e:c3:2f:96:fb:d3:
8f:a0:08:9b:a0:f1:d1:9d:d4:00:49:18:05:91:81:
ba:74:03:11:6e:27:2c:e3:28:d8:62:6e:d5:c3:6c:
f6:1a:47:c2:8f:7d:7e:84:81:12:e0:7c:1a:34:fe:
df:19:ba:bb:d0:0f:21:13:b8:18:a6:ee:43:32:e7:
98:c2:c2:53:12:fe:34:59:7b:35:a2:0b:b2:48:f0:
02:aa:4f:81:c7:a5:ab:47:bc:e5:84:ea:ad:4d:76:
64:8b:cb:8b:7e:ca:3f:cc:3d:dc:e3:96:85:d2:57:
a0:93:cd:97:9a:a1:ca:d9:43:67:94:b3:c2:a6:13:
66:66:c4:5a:5a:a7:7f:54:de:1a:be:bf:c5:22:57:
17:a6:5d:31:4d:a6:d0:cc:09:ef:d0:70:e2:e4:58:
95:ba:1f:02:0d:15:a7:f3:82:66:54:b2:12:20:df:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:70:C2:BB:AE:73:BC:57:B4:BF:16:E6:07:E6:C9:1E:9A:6D:0C
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/hjRwwruuc7xXtL8W5gfmyR6abQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9b:2e:a1:4d:9a:e4:b1:05:2d:a3:a0:03:f3:15:3b:ed:c4:
75:cf:45:a5:3b:37:93:c9:ab:fc:c9:10:43:a1:98:5b:ed:64:
83:fe:82:0c:25:f7:84:19:46:5b:f0:1d:73:45:b9:c5:14:2d:
78:93:48:61:3c:84:0e:37:ab:b3:06:09:57:96:65:d5:7d:3f:
f3:1a:1d:4b:64:35:4a:86:95:2d:8e:cf:ae:eb:86:ee:75:51:
e8:d7:f9:a6:9e:84:92:c8:88:4d:98:23:88:55:f2:a7:1d:d8:
1a:3d:3f:74:f7:25:db:ed:82:fa:83:2c:67:94:dc:d7:e7:1e:
be:d5:15:dd:6e:77:04:09:77:8d:b4:46:db:41:ff:f3:e9:7c:
86:6a:52:cb:03:10:cf:b6:da:cf:98:f2:b4:43:fd:dd:37:82:
39:1d:fc:2c:e4:42:73:bc:63:a8:a5:7d:a9:09:3e:19:fb:44:
50:c5:89:48:13:95:e9:f3:df:52:08:c4:48:90:bf:86:8b:73:
6c:08:ec:96:b5:87:a1:0e:2e:cd:73:56:bb:67:8f:71:2c:97:
6b:88:fa:94:59:76:aa:a4:0b:7d:ea:05:85:14:33:48:4d:5b:
0a:f1:0c:a9:73:d4:7f:62:93:ea:84:33:aa:37:f7:77:41:5b:
a6:55:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:25 2025 by rpki-client