Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OU-4iQw8hIKGjyy0SKn0w_azpiQ.roa
File: OU-4iQw8hIKGjyy0SKn0w_azpiQ.roa (raw, json)
Hash identifier: 6j0+5nrw16K7La0MyR57rJAdT+pVJwlChUu6y6t0xAM=
Subject key identifier: 39:4F:B8:89:0C:3C:84:82:86:8F:2C:B4:48:A9:F4:C3:F6:B3:A6:24
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222049A45BD2D12A9E04EE4AC2763BE5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OU-4iQw8hIKGjyy0SKn0w_azpiQ.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 185.223.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:49:a4:5b:d2:d1:2a:9e:04:ee:4a:c2:76:3b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=394fb8890c3c8482868f2cb448a9f4c3f6b3a624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:cc:5e:af:8e:36:e5:0c:48:81:6b:d8:60:
87:f4:0e:4e:54:0f:db:f9:36:ec:8b:1b:09:37:a9:
cb:aa:af:a7:07:2c:05:f2:b3:d6:42:d0:30:b7:29:
59:e9:2e:47:f8:90:33:6c:72:20:92:b0:ac:f9:9b:
35:3f:f5:e3:cd:27:84:e0:09:41:5f:41:bc:74:88:
d1:32:8d:cc:23:d1:8b:2d:91:9f:4b:62:93:c2:ef:
ce:56:64:1b:89:dd:17:d7:3e:60:b2:1b:e3:e0:42:
91:ac:14:46:cd:6d:aa:d3:9d:85:0a:f6:84:c8:6e:
6d:f9:50:9a:86:92:96:d7:c3:80:71:df:8a:69:e1:
26:55:e4:e7:e0:02:6a:36:89:5b:d0:0f:13:01:90:
f6:3e:4b:17:c8:fc:bb:be:cc:1c:ec:6e:e2:05:e1:
dd:c4:96:50:f7:1e:27:2c:87:0a:d2:ae:69:3e:aa:
64:f0:09:6e:39:bf:fa:02:aa:63:0b:93:39:17:1d:
16:f2:5d:41:dc:4f:4d:80:8a:b5:09:b7:bb:44:8e:
3e:73:1a:71:e8:99:66:ce:52:61:46:9b:6d:c5:4a:
0c:24:49:c2:ab:57:2a:36:18:7e:95:a2:9a:2c:5a:
e7:fa:45:38:db:a9:04:89:10:9b:9a:aa:06:a4:9b:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4F:B8:89:0C:3C:84:82:86:8F:2C:B4:48:A9:F4:C3:F6:B3:A6:24
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OU-4iQw8hIKGjyy0SKn0w_azpiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
96:16:2d:f1:5c:44:32:3b:13:f6:ec:cc:ad:92:d3:39:7c:b0:
55:11:ff:cf:aa:2b:b0:5a:48:60:09:94:ef:30:e7:84:0c:4f:
7b:2f:19:a9:ae:42:a8:e5:ee:d9:e4:86:06:8a:f6:2f:e2:34:
e0:48:4a:b2:78:9f:15:da:6d:35:e9:7c:ae:2a:c3:0a:20:f3:
19:a5:1e:8c:72:a6:3b:24:69:62:15:b5:4c:c3:27:08:14:b7:
85:5e:1d:61:81:b5:6e:27:86:5f:06:0e:af:56:9f:cd:45:89:
65:8e:86:d5:fb:ee:cd:cf:b6:e6:bf:d6:80:98:50:45:c8:c3:
f8:60:68:95:eb:23:1c:8a:b6:ec:1e:5b:33:b3:98:27:e7:92:
2a:47:56:2c:1f:63:e3:dd:7e:be:36:75:dc:9e:d8:81:e1:ad:
3e:cd:f2:45:6c:2b:d5:47:ca:1d:c3:f9:cb:d9:9a:fe:fa:eb:
ef:dd:91:31:95:d2:77:6a:e0:c9:02:86:fd:8a:15:14:53:f4:
90:1a:c1:50:71:ae:c5:86:7c:91:09:31:03:8a:86:f0:31:0f:
81:06:90:2a:ed:ba:5f:16:d3:16:8f:70:35:d4:f1:4e:a8:6d:
81:98:4e:76:4d:7b:6d:08:f1:de:91:68:24:68:10:ab:09:f4:
d0:6d:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:26 2025 by rpki-client