Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/c6Nj79I3Har3nGytaNZUrH4rLp8.roa
File: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (raw, json)
Hash identifier: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=
Subject key identifier: 73:A3:63:EF:D2:37:1D:AA:F7:9C:6C:AD:68:D6:54:AC:7E:2B:2E:9F
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019424454F5A1778DC63B0BEB3F606078B25
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/c6Nj79I3Har3nGytaNZUrH4rLp8.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12826
IP address blocks: 185.23.132.0/23 maxlen: 23
185.23.132.0/24 maxlen: 24
185.23.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4f:5a:17:78:dc:63:b0:be:b3:f6:06:07:8b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73a363efd2371daaf79c6cad68d654ac7e2b2e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:fc:b6:3f:0d:35:dd:76:24:be:8f:44:da:
89:f3:55:dd:b8:36:0d:ff:2d:3e:ea:10:42:ed:4a:
7e:74:62:f1:d6:52:f4:c6:8d:5e:5e:a5:3b:f2:00:
4b:76:14:9e:a8:6b:dd:93:a8:61:ed:fe:80:9b:2c:
38:e7:27:fd:40:63:b5:13:10:93:85:0c:d3:13:8e:
9d:7c:49:4b:90:c7:99:47:25:80:bf:fd:ed:d6:25:
ed:f6:2a:2c:ca:fb:68:ea:ee:7a:92:61:20:f8:67:
6b:76:ff:02:a8:d4:d2:c8:25:89:16:ee:3c:11:af:
23:c0:18:a3:24:ad:0c:bd:e5:60:51:bf:a6:c9:a9:
cc:62:b0:5e:83:c6:11:29:58:17:bc:63:8f:b2:d2:
16:52:b5:0a:1a:9d:4e:e7:28:63:67:a7:5e:18:27:
89:07:d3:54:a6:96:9c:b3:5e:b9:56:54:a5:94:7c:
03:8a:8a:08:56:2f:0f:4f:92:6e:95:99:aa:ad:d3:
53:ad:8d:fa:47:02:d6:08:c0:67:e3:e6:bc:13:f7:
76:b3:ba:57:7b:45:31:4d:dc:a1:b3:51:68:e2:bb:
96:0d:66:b6:3f:10:fb:f4:3b:fc:a0:27:f9:b6:d8:
62:de:74:58:5f:af:be:dd:ca:13:cd:f2:39:3c:0c:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:63:EF:D2:37:1D:AA:F7:9C:6C:AD:68:D6:54:AC:7E:2B:2E:9F
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/c6Nj79I3Har3nGytaNZUrH4rLp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:4d:f4:84:bf:60:22:68:2d:c3:91:a4:8c:5d:42:b7:99:f1:
11:c8:de:2d:67:cf:0f:f2:45:68:8a:e9:b7:fa:f3:e0:a3:5d:
17:a9:ed:63:89:8f:f4:bd:97:9a:4c:23:9e:3f:63:a1:e2:0e:
57:63:f4:04:73:4e:3a:95:26:8a:c9:19:c6:f9:8f:60:00:5f:
39:0a:41:2f:6e:1c:6d:3b:90:59:3a:f9:44:31:bb:cd:1b:48:
90:5d:c7:93:9c:d1:ad:a9:73:4c:ea:2b:e1:ff:0c:16:83:73:
f5:84:bf:c0:a6:42:f9:9c:d0:6d:b8:2c:4e:13:51:18:79:45:
41:58:4c:f9:95:c5:c0:39:79:af:20:28:e0:06:b7:03:8d:a5:
f9:f5:cb:d0:cb:5c:fe:65:c8:27:f9:88:18:87:6a:3f:92:26:
aa:c3:cd:44:16:e4:41:a3:5c:c2:78:ea:3f:e9:3a:15:c9:16:
0c:94:47:c3:ce:b9:67:76:a9:52:49:f4:c7:58:fb:3a:5b:6b:
73:1f:4a:eb:d6:59:96:2c:65:07:52:72:ae:48:7c:78:4c:6a:
1f:c5:a2:56:08:58:82:b1:05:fe:fb:f7:b1:0c:a7:11:ad:84:
84:a6:5b:66:41:4c:a0:86:56:a9:5f:dc:e3:f1:60:ae:47:ff:
94:8c:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:33 2025 by rpki-client