Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/6czTDwgbw_hG3rtX5EbRgdxWDCg.roa
File: 6czTDwgbw_hG3rtX5EbRgdxWDCg.roa (raw, json)
Hash identifier: O6dY+2pnFwnKeeBFsLsl5BJ8l9rfKrvyLFI9YgpRmUc=
Subject key identifier: E9:CC:D3:0F:08:1B:C3:F8:46:DE:BB:57:E4:46:D1:81:DC:56:0C:28
Certificate issuer: /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial: 01941FFA1CB3A96F35726337777589B017D5
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/6czTDwgbw_hG3rtX5EbRgdxWDCg.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211632
IP address blocks: 185.190.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:b3:a9:6f:35:72:63:37:77:75:89:b0:17:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9ccd30f081bc3f846debb57e446d181dc560c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:16:ce:e4:ca:10:49:34:87:af:0e:df:79:
92:76:63:e5:35:59:35:13:01:42:0e:50:e0:c3:1a:
d1:cb:cb:f8:e2:53:f7:a6:13:82:9e:47:bb:e9:46:
5a:cb:ad:55:e7:2c:1a:2f:ae:64:1a:19:e3:2c:b6:
ff:09:b7:e3:81:54:ac:37:66:66:e1:a4:fb:89:05:
29:9c:5d:5d:ba:cc:d7:64:60:37:6a:86:d3:56:95:
8a:3e:45:5f:8f:5b:a9:d0:d8:a5:b3:5f:03:28:15:
f3:8e:23:20:24:ec:c4:dd:0b:e7:24:78:78:66:0d:
6d:75:2b:46:4e:37:c2:27:25:15:eb:b3:d1:dc:38:
ee:e1:7e:e5:cc:04:4f:96:71:85:14:69:9f:70:48:
23:39:c9:c2:1a:1d:ed:50:66:d0:f9:8a:df:da:c3:
f9:66:44:8d:cc:89:17:01:9a:d1:42:cd:1a:df:82:
76:75:5e:88:59:fb:58:d2:33:dd:c5:c4:50:1b:3f:
b4:1d:d0:0c:de:78:1f:7b:89:89:1d:06:9c:cb:bf:
8f:a8:28:06:40:96:c6:f2:55:31:a4:fd:8c:68:18:
06:b7:50:75:ef:71:fa:48:f9:b5:56:70:01:bf:d2:
ef:32:a6:5a:e6:13:50:25:59:35:dd:4d:00:f1:b4:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CC:D3:0F:08:1B:C3:F8:46:DE:BB:57:E4:46:D1:81:DC:56:0C:28
X509v3 Authority Key Identifier:
keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/6czTDwgbw_hG3rtX5EbRgdxWDCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.24.0/24
Signature Algorithm: sha256WithRSAEncryption
32:32:26:bd:55:ea:bc:29:d5:3f:49:ef:67:59:3a:33:fa:42:
54:f0:bc:03:09:a3:38:af:de:d5:d9:9c:f3:65:b6:65:63:2b:
2f:b1:e2:a3:50:3a:e4:09:f9:ca:4d:5a:c0:93:03:8a:23:ba:
e1:94:e2:ae:0d:5b:6a:d3:8a:4b:70:d3:27:2a:c3:be:9b:53:
08:09:c3:c3:15:a2:9d:58:9b:c7:bd:1b:85:7f:83:4c:44:67:
26:53:51:4c:88:9b:5b:80:82:75:52:dd:d4:ac:f4:fe:90:a2:
a6:96:6c:c4:aa:98:16:5f:0b:7f:18:28:07:a0:9b:a1:19:df:
8b:a4:c3:42:42:a8:fa:35:76:58:70:a5:c3:07:6e:dc:ed:9d:
db:9a:89:d0:03:61:83:10:ac:16:11:a1:3e:cf:ee:90:2a:da:
ec:95:9f:3c:36:ba:33:13:5e:20:45:6a:b1:e6:62:a5:65:50:
8f:e1:df:11:4f:fb:06:11:3e:e2:0a:81:44:67:c8:34:54:83:
1d:a7:56:30:5b:35:4e:c1:f3:0f:ed:24:2e:19:e7:f9:95:ba:
45:65:ad:75:e7:b8:2a:f8:a6:9f:aa:01:24:c0:5f:7f:15:75:
3f:00:82:d7:f7:78:4d:8d:5a:13:83:ee:48:51:d9:9a:bd:3b:
87:5c:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:53 2025 by rpki-client