Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa
File: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (raw, json)
Hash identifier: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=
Subject key identifier: 3B:F1:32:6D:AD:A1:5A:22:75:1B:5C:A4:A3:98:CC:55:FF:87:8B:BE
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 0194244578D92B98FC5727C0C907841C0ECD
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:78:d9:2b:98:fc:57:27:c0:c9:07:84:1c:0e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bf1326dada15a22751b5ca4a398cc55ff878bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:d6:ae:4a:3d:c4:b5:f6:aa:7e:b7:11:0c:
59:6b:ef:77:ec:0d:4c:0c:20:77:46:da:8e:d5:4f:
2b:49:bb:7b:23:c0:e5:db:41:a4:50:f8:63:ac:6e:
2a:24:da:5b:d2:b2:e1:1f:43:2e:b5:5f:d1:8b:a7:
46:56:c7:46:19:01:ae:a2:57:7f:ba:7f:58:f7:a9:
67:d2:85:ad:a0:80:7a:59:6e:f9:14:0d:d8:61:c4:
cf:09:69:91:be:3c:df:fc:6b:d4:03:98:d1:00:2f:
d3:d5:f7:96:2b:56:ce:fd:aa:b8:5b:cd:3e:57:95:
63:ee:9b:0a:3e:c9:f4:0a:60:08:c0:24:65:8d:54:
04:38:1a:1e:ed:77:c4:53:ec:75:60:05:b5:e7:30:
da:fc:9c:52:90:fe:67:c9:b5:5d:7f:4b:34:9c:10:
d5:8c:e7:43:06:4c:62:68:ee:2d:3d:60:a5:d1:d1:
92:60:ec:52:58:19:11:d6:80:b4:59:1f:b8:ba:37:
0a:dd:ba:6a:0b:c0:72:b3:1d:f9:13:09:bd:18:fb:
e2:53:93:cf:d1:2a:bb:23:b4:8e:53:6c:60:71:db:
ca:f4:60:16:62:61:0f:e0:ca:7a:47:56:b0:2a:a1:
87:67:de:9b:81:1c:bb:5a:81:69:3e:3a:2e:e0:a3:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:32:6D:AD:A1:5A:22:75:1B:5C:A4:A3:98:CC:55:FF:87:8B:BE
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b9:d2:79:c8:28:38:01:d9:85:78:0b:da:cf:a9:08:65:6e:
1a:d0:c6:90:d4:50:e1:2f:b4:05:89:0a:b1:4b:5e:72:05:72:
a1:41:41:44:5b:a2:39:53:df:25:2f:a8:9d:72:1e:f9:1a:eb:
e1:3d:d0:27:6b:05:4f:4e:d7:bd:07:bc:81:df:bf:dd:80:16:
63:01:b1:c2:cf:11:97:fa:90:b5:07:49:07:66:18:37:80:2b:
42:52:bc:f3:0b:40:12:9e:69:18:c4:b6:ea:99:ae:79:e2:a7:
9b:68:a4:63:6d:50:6d:fc:77:5f:2b:1e:23:5c:96:dc:a0:ea:
c9:ff:bd:99:1e:92:5f:58:01:73:77:20:64:79:0a:44:e9:4e:
52:f0:06:17:80:ed:08:9b:3f:d7:c6:af:2c:ed:fb:1a:b4:cc:
13:2b:38:00:34:38:51:7e:0a:59:12:82:20:c6:9f:b2:eb:09:
4e:f4:18:20:50:86:8d:a9:e9:1d:41:75:e8:9a:78:b5:c1:5e:
c7:0c:9a:96:2c:83:61:d8:fd:4a:9f:09:89:cc:86:4f:2b:6b:
12:d6:26:5c:6d:78:86:fe:cc:a0:10:d3:a5:2c:35:eb:e8:b0:
a4:bc:73:e0:5d:7f:41:c6:f7:ca:06:5e:64:4c:c6:f1:fb:df:
56:dc:53:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:23 2025 by rpki-client