Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/TRIkg-QwPxodaMNyhJudZJsULfg.roa
File: TRIkg-QwPxodaMNyhJudZJsULfg.roa (raw, json)
Hash identifier: ufMh2ZHdT1rvdo6TTuMqjAAVY8O4a0cCsUjxcMvHh8A=
Subject key identifier: 4D:12:24:83:E4:30:3F:1A:1D:68:C3:72:84:9B:9D:64:9B:14:2D:F8
Certificate issuer: /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Certificate serial: 01941F8C5C320C6AFD674422DEFCA9B58AAE
Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/TRIkg-QwPxodaMNyhJudZJsULfg.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.61.0/24 maxlen: 32
2001:7f8:9d::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:32:0c:6a:fd:67:44:22:de:fc:a9:b5:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d122483e4303f1a1d68c372849b9d649b142df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:87:c2:25:29:25:ad:ed:b2:7e:90:cd:4d:
c6:24:49:d3:71:dd:4a:f9:0e:2b:70:45:c0:a7:08:
30:e5:9d:df:df:d7:27:04:29:10:cf:48:86:a3:65:
6f:9d:43:5c:cb:5a:39:15:f0:0d:cd:20:8c:bc:3c:
4b:a7:0c:09:0c:91:d7:81:57:15:ed:8e:30:2b:7e:
01:a5:19:d6:d9:77:af:52:80:0e:f0:72:4e:c1:cd:
af:d4:60:97:8a:bc:57:17:ce:ff:83:b8:28:57:69:
6f:1f:53:c2:5c:15:4e:25:89:36:ad:76:3c:09:85:
8c:88:48:12:ec:93:6c:8b:9f:a9:98:f7:7c:6e:9f:
9b:74:4d:2e:eb:9f:84:9c:74:e8:68:ce:94:43:b1:
b1:8d:c2:4b:b5:9a:37:dd:a7:6f:e2:00:3b:0a:f3:
92:cf:33:ca:29:1e:79:21:f4:df:ff:0f:d4:0c:6c:
4f:78:68:61:28:03:4c:6d:51:d4:20:38:7c:d2:06:
a9:3b:54:3d:71:13:d6:31:d2:b3:08:87:96:fc:ce:
82:3b:68:ef:0d:8b:06:dc:7c:76:55:98:93:22:0b:
7e:6a:ac:ff:c2:6f:81:51:e4:14:5a:77:5b:b1:37:
1c:e8:9c:0f:90:98:c8:ee:01:9e:3d:40:10:bf:30:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:24:83:E4:30:3F:1A:1D:68:C3:72:84:9B:9D:64:9B:14:2D:F8
X509v3 Authority Key Identifier:
keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/TRIkg-QwPxodaMNyhJudZJsULfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.61.0/24
IPv6:
2001:7f8:9d::/48
Signature Algorithm: sha256WithRSAEncryption
50:33:c3:f7:78:91:ce:07:9d:f0:a3:c2:a3:d7:c2:5e:7d:d0:
7b:79:8f:31:ce:73:1f:b2:f1:e1:44:05:46:99:77:54:1f:99:
4b:9e:1c:dc:4d:91:76:19:68:cf:da:cd:d3:75:e0:47:a3:5c:
e1:ad:39:ba:c5:43:96:05:86:96:80:c8:51:a7:ce:9b:a2:d2:
00:26:b3:4d:9f:6e:98:07:93:52:b3:71:35:ae:55:de:85:2a:
b2:59:ba:ce:e4:90:a1:85:88:15:5d:18:99:d8:76:fe:3d:06:
9f:8d:6b:c9:2d:e9:62:5d:5a:6d:bf:7c:9e:82:8e:d4:ac:29:
b8:14:a6:77:80:1a:88:f0:af:f7:3b:e2:c2:26:58:7e:d9:45:
1a:eb:bc:aa:7d:48:d7:34:e7:3d:ad:59:7e:f0:7b:d7:22:74:
49:19:f6:7a:b9:a3:c1:42:59:ae:b9:c7:64:7d:a4:47:84:d0:
58:69:20:bf:fe:3e:61:42:a6:27:6c:9a:bd:b7:74:a5:10:10:
02:9e:24:f2:9d:5b:61:be:bf:53:e3:d5:c0:fa:f0:72:97:b6:
77:3a:4a:92:2d:f0:9b:9f:96:27:46:c1:2c:23:4b:85:9f:70:
06:1f:c0:d1:7f:b7:c6:83:2e:34:cf:ad:82:c4:0c:b0:78:09:
3c:ed:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:48 2025 by rpki-client