Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/al6s6WgAHfcCaxm7dnRoKhGccgc.roa
File: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (raw, json)
Hash identifier: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=
Subject key identifier: 6A:5E:AC:E9:68:00:1D:F7:02:6B:19:BB:76:74:68:2A:11:9C:72:07
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 019424B3EEE23B6D473DF9311DBF6FCACD49
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/al6s6WgAHfcCaxm7dnRoKhGccgc.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18186
IP address blocks: 185.238.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ee:e2:3b:6d:47:3d:f9:31:1d:bf:6f:ca:cd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a5eace968001df7026b19bb7674682a119c7207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:40:3f:fa:91:b3:d2:26:18:a5:5b:1b:c1:
99:63:2e:06:2c:5a:11:41:e7:42:0e:64:cf:b5:2a:
53:89:b7:e4:28:64:a2:b4:30:76:70:5e:21:fb:09:
2e:64:1a:8d:36:93:28:55:ea:5b:98:ea:16:a0:e8:
de:5a:f8:13:47:a6:3f:89:11:67:99:74:5b:7c:23:
ef:f5:bf:aa:96:fe:41:72:c9:4b:d1:ef:08:96:48:
3f:b8:9b:ef:8b:4f:3f:61:cd:52:f4:59:02:a9:ca:
27:0c:66:87:5b:24:6b:20:9c:31:80:49:20:f1:0e:
e5:48:19:29:51:e5:fd:40:e6:c6:f4:b8:9d:84:28:
be:71:b6:0d:48:de:57:9e:61:68:08:ce:f9:bd:61:
65:c5:e0:8f:f0:e8:a6:93:46:c6:79:9e:42:3a:2d:
cd:43:11:e0:0d:4a:04:db:10:29:b0:96:92:66:8f:
3f:74:8c:e6:4c:ba:9c:9d:15:59:2c:a9:8e:ef:14:
66:b0:7e:ab:0b:8a:32:68:96:5a:62:fb:4c:02:5f:
e3:54:ad:39:f7:15:ee:30:44:f4:11:e5:7f:d9:a6:
63:cb:d1:c6:6c:7d:13:ba:b3:25:74:2f:96:c8:8f:
27:49:83:cb:df:9b:c9:a8:9c:ed:05:ce:a5:57:c7:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5E:AC:E9:68:00:1D:F7:02:6B:19:BB:76:74:68:2A:11:9C:72:07
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/al6s6WgAHfcCaxm7dnRoKhGccgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.212.0/23
Signature Algorithm: sha256WithRSAEncryption
79:45:45:ba:07:30:bc:b0:67:01:c4:34:8a:eb:04:84:82:b7:
22:3a:0f:01:76:26:2e:1b:7f:06:23:9c:c3:85:47:66:8c:cd:
d7:61:01:25:36:4f:91:6b:0a:25:4f:ee:09:c2:95:44:ee:33:
25:c5:7a:49:58:cb:1a:0a:78:b0:f6:25:db:33:a5:71:97:c7:
c0:80:c3:82:75:e2:1f:24:9f:e1:29:89:20:d0:00:29:0b:b8:
ef:ed:ed:0a:61:c6:ae:b8:b5:cf:45:95:5e:74:a8:3f:c7:c7:
fa:d5:bd:6e:19:8f:81:b1:12:b5:d5:1c:0d:ae:bd:8e:d5:1a:
a3:4c:9f:dd:e0:02:db:f3:2c:54:72:8d:d9:b2:37:dc:bf:df:
1d:4b:00:fe:b7:14:76:33:0f:00:4e:d6:f8:41:c7:03:c4:f9:
09:f0:d2:53:cc:9b:24:6f:43:5a:cb:11:70:23:f6:97:d7:07:
93:9f:b0:ef:cf:8a:64:d1:45:4a:5a:31:ea:fa:32:20:d5:d4:
10:e2:b0:d8:46:8d:5d:b8:d9:90:c1:d7:d4:ba:a7:d6:3b:f4:
5c:04:ac:59:81:ab:7a:3f:b7:cd:0c:eb:1b:20:9b:d0:9f:e5:
1d:e7:a4:86:52:e0:1b:c8:5d:08:69:22:65:07:c8:1e:de:87:
8f:3f:dc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:08 2025 by rpki-client