Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/AkteWvLHK5p1anOKmFa5Bg-ia58.roa
File: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (raw, json)
Hash identifier: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=
Subject key identifier: 02:4B:5E:5A:F2:C7:2B:9A:75:6A:73:8A:98:56:B9:06:0F:A2:6B:9F
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 01941F8C98057704A4ACE7F41FACEC4CE006
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/AkteWvLHK5p1anOKmFa5Bg-ia58.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42850
IP address blocks: 185.108.7.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:98:05:77:04:a4:ac:e7:f4:1f:ac:ec:4c:e0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=024b5e5af2c72b9a756a738a9856b9060fa26b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:5d:cd:33:9b:52:8a:5a:13:f1:8b:9c:8a:
68:65:b8:c7:42:f6:de:f8:ab:4a:df:00:9d:e7:eb:
f6:13:4e:25:97:62:56:8e:95:51:28:3d:5e:55:cc:
28:b4:f6:12:3c:28:0e:52:f6:40:c5:00:9c:45:29:
e1:c8:ea:79:a4:b6:34:79:90:98:3f:0e:0f:b5:35:
ae:57:ac:f2:c1:86:dc:eb:05:a6:f7:45:35:f2:ef:
54:f1:3d:5c:4c:b0:52:6b:4e:16:12:c7:fd:64:8f:
cb:f6:bf:5f:8d:dc:5e:3e:f4:21:89:06:91:ae:23:
17:bb:82:18:09:ac:27:70:55:81:13:0d:d2:4c:d0:
ba:c5:ca:9a:7c:1d:67:0d:e5:d7:4b:fc:0f:14:02:
44:ec:b3:80:96:0e:a2:1c:b4:40:c5:1f:32:88:0d:
14:d3:6f:0d:3f:d8:b2:c7:63:10:d7:f2:97:df:26:
32:ce:d8:83:6d:1c:17:a2:e1:b9:b4:59:0c:33:85:
e8:68:b2:9c:c4:ac:45:6e:13:85:90:39:6f:13:f4:
a2:3e:99:28:3e:f6:62:22:c9:b1:6c:bf:4e:65:11:
f9:9a:6a:e5:b7:05:ce:51:b0:69:c5:b8:2f:de:5c:
31:13:86:42:a4:8e:01:83:68:56:cf:13:c4:22:32:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:5E:5A:F2:C7:2B:9A:75:6A:73:8A:98:56:B9:06:0F:A2:6B:9F
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/AkteWvLHK5p1anOKmFa5Bg-ia58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.7.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:79:8d:a8:3e:8c:5d:8f:0a:65:be:f7:87:0b:37:70:79:74:
75:53:14:da:8a:c2:b9:d3:e3:6c:f5:4b:fa:b7:63:07:c2:c7:
00:9f:cc:98:af:03:cc:39:eb:5d:4f:33:e5:f3:0b:45:12:b4:
0c:a5:e9:ce:1b:a5:f7:27:37:7f:87:3a:bd:02:e1:de:0a:18:
1d:de:ca:79:21:4b:6f:a6:25:1e:47:8a:b7:02:ec:95:38:46:
4d:ed:17:a3:d2:5e:f0:5d:26:33:30:f8:9e:a2:f4:57:34:9f:
53:d1:2f:bb:78:41:6a:7d:dd:3e:bc:07:87:14:db:54:42:21:
73:3f:c0:95:e7:c0:a0:7a:8f:2b:4c:2e:d7:30:8e:f7:87:92:
40:3e:20:da:51:4f:e3:21:11:ba:d9:4d:9f:58:a9:cf:9e:c0:
0f:9a:eb:7c:58:2b:af:be:94:9b:cb:db:db:76:47:a4:dc:21:
5a:cc:32:2d:b0:36:3d:51:b0:b2:ea:a0:ef:f2:c4:37:63:25:
c0:53:f1:e7:e7:40:55:f2:d4:ae:8d:9c:50:e1:5b:85:12:f3:
a8:3f:5c:3b:d5:4c:be:bf:7e:92:80:79:93:a7:f5:51:16:0f:
64:27:1c:4b:cc:bb:02:cf:46:65:f8:7b:47:28:7a:69:87:c6:
1a:e8:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:26 2025 by rpki-client