Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/0uN1IrDa2eHWnvtb7KMgQp7nPd4.roa
File: 0uN1IrDa2eHWnvtb7KMgQp7nPd4.roa (raw, json)
Hash identifier: a//pwChknU221zS1t/N/7lHWhe2+pDu9+gy9m8WxO1Q=
Subject key identifier: D2:E3:75:22:B0:DA:D9:E1:D6:9E:FB:5B:EC:A3:20:42:9E:E7:3D:DE
Certificate issuer: /CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Certificate serial: 019423D6F84D4F75FBC41AC383278D89D44B
Authority key identifier: 6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/0uN1IrDa2eHWnvtb7KMgQp7nPd4.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59796
IP address blocks: 185.71.64.0/22 maxlen: 22
185.71.64.0/24 maxlen: 24
185.71.65.0/24 maxlen: 24
185.71.66.0/24 maxlen: 24
185.71.67.0/24 maxlen: 24
185.121.240.0/22 maxlen: 22
185.121.240.0/24 maxlen: 24
185.121.241.0/24 maxlen: 24
185.121.242.0/24 maxlen: 24
185.121.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f8:4d:4f:75:fb:c4:1a:c3:83:27:8d:89:d4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2e37522b0dad9e1d69efb5beca320429ee73dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:36:81:46:32:7f:fe:c8:8b:cd:12:5d:38:
93:4a:10:06:9a:86:6f:37:09:cd:9d:0b:de:fe:20:
fe:58:5e:af:43:7c:10:95:45:f4:7d:6f:a6:81:84:
d5:a6:db:2d:4f:a0:04:d1:49:f2:0e:a1:73:35:b3:
68:16:5c:62:db:f4:6b:45:f2:9e:18:64:33:67:c6:
c8:0f:50:0a:7a:05:d9:02:ca:8c:b4:33:d4:62:af:
f1:66:d0:1a:9a:c3:53:0d:a4:c5:a8:b5:51:bf:b7:
0d:08:08:0d:f0:de:d2:9b:61:e2:a9:01:fd:7b:87:
fb:96:9f:35:23:10:d4:32:2c:3a:f6:5e:d7:0f:3c:
3e:9c:fa:31:d4:82:1e:d1:c7:ff:f7:23:89:4c:b7:
b6:05:ff:51:d6:6c:ed:f0:98:30:c1:9b:25:6b:6c:
5d:98:de:49:c0:39:ad:28:05:f7:f0:52:4e:d3:68:
3a:42:e5:df:45:45:bb:da:a2:a7:89:de:11:91:36:
8f:f9:e2:bd:67:fe:a2:21:e6:3a:9b:6a:7b:bb:e3:
50:44:52:b2:cf:03:50:82:f8:ac:10:f8:b8:2e:eb:
7b:f9:db:ce:c7:c3:c3:57:3e:ff:c3:0d:f9:3f:1f:
5f:5c:ed:34:63:a5:6b:9d:58:d9:1b:05:1a:cd:a0:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:75:22:B0:DA:D9:E1:D6:9E:FB:5B:EC:A3:20:42:9E:E7:3D:DE
X509v3 Authority Key Identifier:
keyid:6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/0uN1IrDa2eHWnvtb7KMgQp7nPd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.64.0/22
185.121.240.0/22
Signature Algorithm: sha256WithRSAEncryption
87:bd:93:23:bf:b8:58:e2:ec:b4:40:96:40:c7:34:2c:fd:49:
c7:75:89:63:57:ec:9a:01:3d:31:03:ad:79:60:c7:c4:17:d7:
07:69:6f:1a:2b:04:64:2f:a1:de:33:08:6e:a8:ee:1c:91:85:
d0:91:94:05:dd:b6:ba:00:05:b9:7b:7a:d2:80:4b:4b:d5:20:
52:08:4d:55:5e:fc:bc:b4:75:89:e5:6d:cc:29:ad:75:e4:22:
85:a2:a6:04:41:b8:9a:96:4e:06:20:db:c3:c5:b5:5e:9a:26:
5e:44:aa:e9:e0:11:07:6a:22:7c:42:11:79:07:4f:9f:5a:b7:
86:39:eb:8c:5f:96:17:c2:6e:9f:46:1e:7f:7c:93:01:52:6d:
0a:28:35:4d:2c:e5:01:ad:99:f4:e6:8c:78:50:d7:b3:4e:ac:
eb:64:b4:07:d5:31:61:47:95:7c:9b:a9:15:2e:a0:ea:43:7f:
d3:1d:43:24:73:09:1f:93:7b:2d:6d:13:07:86:4b:3e:26:c2:
2f:c4:c7:67:a4:fc:44:84:08:fc:e9:f6:aa:aa:29:36:c4:01:
6e:9d:67:3e:b2:78:f8:da:78:9e:32:c3:d7:c7:be:55:28:8a:
71:9c:72:8f:5b:6a:f1:b3:98:db:07:f8:0d:43:64:a2:11:6e:
7d:4a:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:52:46 2025 by rpki-client