Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/_K6pKy4r_yxn6KKjdedN6hKQIRc.roa
File: _K6pKy4r_yxn6KKjdedN6hKQIRc.roa (raw, json)
Hash identifier: Fa8PiwPRQ/Nbg/tMa4sLtAZckTKFYG8hQ2oLAm3z+YE=
Subject key identifier: FC:AE:A9:2B:2E:2B:FF:2C:67:E8:A2:A3:75:E7:4D:EA:12:90:21:17
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 0194F987A033B7CC84C998AFD4511ED19315
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/_K6pKy4r_yxn6KKjdedN6hKQIRc.roa
Signing time: Wed 12 Feb 2025 09:40:02 +0000
ROA not before: Wed 12 Feb 2025 09:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 185.239.176.0/24 maxlen: 24
185.239.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:87:a0:33:b7:cc:84:c9:98:af:d4:51:1e:d1:93:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Feb 12 09:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcaea92b2e2bff2c67e8a2a375e74dea12902117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:f5:b8:cd:ac:0c:4d:fb:f9:ec:31:60:24:
e2:43:17:8f:7e:b0:26:86:74:15:1e:69:62:42:37:
5a:11:85:58:08:30:3e:1f:b4:36:cc:8f:ab:23:f3:
3f:bf:76:24:05:05:ae:c0:d8:cf:f7:ee:07:83:6e:
27:47:63:c9:ff:8f:b5:9f:e1:8b:47:d2:96:5d:25:
6d:f6:d2:f6:cc:44:19:b5:17:54:7c:be:c7:ff:2e:
e1:f0:cd:37:71:59:9f:5e:72:f2:d5:cc:f5:22:f9:
66:3f:d5:cd:71:44:c2:f0:e6:ee:fd:8e:d9:66:f1:
3a:71:72:1c:22:f1:58:7d:b4:df:31:8a:30:09:26:
24:05:70:ca:3d:64:84:e6:11:5f:fd:f7:4b:02:fd:
20:10:b3:44:cd:a4:45:d4:de:1a:4d:95:38:dc:71:
af:68:0d:aa:92:85:f6:e9:af:40:c7:90:33:1e:0e:
0b:f8:af:8f:e4:ff:f4:b2:3c:41:c1:07:64:db:6d:
76:97:ea:c9:5a:53:89:b6:1d:77:88:18:cf:ec:1c:
67:a9:da:20:68:9f:e4:99:c3:01:c0:fd:8f:13:d4:
a7:3d:7e:99:5b:24:98:49:e8:a4:ef:fa:d8:04:75:
d8:8a:70:74:88:f6:72:ad:3d:12:79:3d:31:1f:23:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:A9:2B:2E:2B:FF:2C:67:E8:A2:A3:75:E7:4D:EA:12:90:21:17
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/_K6pKy4r_yxn6KKjdedN6hKQIRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.176.0/24
185.239.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e8:44:32:01:18:51:30:3a:8b:db:54:d6:5b:f3:c1:7e:f9:
04:f5:00:52:47:93:4d:d3:c8:90:93:d4:ab:8d:13:0b:63:ee:
10:ba:33:f0:5a:fc:ab:d2:d2:e8:99:9f:d1:71:a2:60:1e:95:
8c:84:ed:88:dc:b0:0b:95:2c:fa:7e:0e:bc:b7:c3:16:a7:9e:
e0:08:ee:15:11:7f:a0:e9:0a:80:7c:11:b9:8c:47:c4:97:e9:
6f:40:ea:07:ba:94:a4:53:84:e8:8f:ef:2c:d7:70:b3:a1:f0:
da:9c:93:b3:7e:bd:f7:67:30:e6:ea:67:ab:bf:f5:27:d9:e8:
35:5a:5f:ca:f2:da:f2:8a:f8:cc:b3:9d:d3:4e:1d:03:d6:74:
c3:a7:98:ac:30:26:d6:fa:f9:37:ef:a5:91:67:77:fc:62:a5:
a6:c7:5e:e6:8d:c6:af:21:a9:63:4a:f4:af:69:de:4e:a8:27:
82:12:41:7d:f9:38:19:07:fa:25:51:aa:ba:c4:65:b1:0f:21:
3d:7d:38:01:96:66:08:70:a5:e6:ab:36:7f:d4:9c:42:a7:18:
c9:02:7e:28:18:51:c4:33:8f:12:66:c7:5a:11:be:88:2e:9d:
72:76:a8:77:7d:e0:e6:4a:a9:0a:c7:1c:f7:48:8b:9f:6e:52:
bf:47:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:44 2025 by rpki-client