Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/PSDe4mK_6sDHN2_ikwrsB7r4x8E.roa
File: PSDe4mK_6sDHN2_ikwrsB7r4x8E.roa (raw, json)
Hash identifier: +rSMz15QPdcNrfCJaZ0raaYeAdhGu+UnOVTPQ1q0l6Q=
Subject key identifier: 3D:20:DE:E2:62:BF:EA:C0:C7:37:6F:E2:93:0A:EC:07:BA:F8:C7:C1
Certificate issuer: /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial: 01942521DC2CE956799F3CB51BC014B02DBA
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/PSDe4mK_6sDHN2_ikwrsB7r4x8E.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56798
IP address blocks: 185.169.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:dc:2c:e9:56:79:9f:3c:b5:1b:c0:14:b0:2d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf814df8575986dd904a98687583c138768a114
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d20dee262bfeac0c7376fe2930aec07baf8c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:b7:86:97:87:02:8d:1a:6c:da:65:cb:e4:
9e:13:c0:eb:8e:6c:2c:7f:5e:e1:30:bb:b3:cd:22:
05:75:f4:2c:58:56:3c:ad:c6:f9:56:ef:55:ff:9b:
22:75:74:9b:e5:7e:6b:5d:87:7d:fe:c0:90:70:b2:
e9:db:6f:df:4d:ca:ef:01:56:d7:51:4f:b4:85:e0:
c3:41:12:3c:fd:77:ac:43:71:9d:51:e7:9f:d0:1e:
c1:71:eb:23:ed:85:59:a3:54:6f:2b:c0:06:73:9e:
ac:51:87:f2:e8:a4:92:69:90:01:2e:49:55:d9:7a:
6b:8d:64:5a:70:67:0d:d6:3d:ad:f1:de:0b:cf:8e:
b7:69:f4:6d:1f:7e:e3:e5:24:3c:6c:ff:ec:87:29:
47:20:42:af:81:eb:d0:02:83:38:69:a9:68:2c:09:
cd:dd:05:36:9b:a7:99:bc:10:8b:c3:a9:a2:97:25:
85:de:0c:15:64:c5:74:e1:83:2a:2a:d3:c1:db:c0:
e7:ec:b2:02:32:99:75:29:d7:ef:35:e4:f6:0b:13:
0d:7b:85:a3:d4:ed:69:c2:e7:1a:46:2e:ca:5f:a6:
0f:8c:26:e8:73:ae:7c:48:58:af:05:75:6d:8a:a0:
f1:9b:70:5b:f6:1b:d6:35:2c:b6:d7:9a:f0:1d:2d:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:DE:E2:62:BF:EA:C0:C7:37:6F:E2:93:0A:EC:07:BA:F8:C7:C1
X509v3 Authority Key Identifier:
keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/PSDe4mK_6sDHN2_ikwrsB7r4x8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.94.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:6e:c0:d4:26:13:c4:b7:db:89:2d:f4:16:88:5d:09:c5:ee:
99:b8:1b:b8:f6:3f:58:29:10:ba:55:73:75:db:98:d8:db:9b:
f2:0a:40:7b:16:56:2c:89:14:04:36:9b:8b:1e:4a:2c:ec:17:
d9:71:95:e5:84:89:f0:74:17:90:45:43:87:a3:c5:fb:71:7e:
4a:4c:61:62:96:e2:66:b8:5b:b7:5e:be:8a:66:4a:c7:40:29:
a2:ae:2b:ce:2e:a0:ad:5d:cb:d3:41:b6:c4:fe:90:a4:e3:a0:
11:9c:3c:e0:83:b0:e7:2f:6c:c9:00:7a:6c:82:65:39:31:c3:
6f:d0:bc:46:d6:db:bc:5e:3d:cd:61:19:a5:79:cd:73:9a:6b:
c5:55:35:08:46:99:9f:1c:66:71:eb:e4:e3:a4:a8:a9:70:3f:
27:2c:6c:b2:ee:4c:c0:8b:05:5f:db:7c:07:6a:f1:2e:f7:d1:
b2:81:b8:cb:98:3c:0c:b9:32:d0:c3:e8:04:d1:64:52:6c:fe:
eb:cd:1f:55:25:e0:4a:46:a5:a1:22:06:5a:63:8e:f8:0c:a9:
96:53:26:54:b4:b7:c2:55:2e:dd:78:01:c5:4b:cf:61:4f:ef:
72:ce:10:3f:35:a0:0e:11:ee:a0:e8:dd:34:ed:68:2f:00:37:
83:91:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:30 2025 by rpki-client