Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1XqJu7W-iW1CL-rVX39M_c5lReU.roa
File: 1XqJu7W-iW1CL-rVX39M_c5lReU.roa (raw, json)
Hash identifier: Zf72JO1wwpzn79sgiZn9/VhdwkhPnqshQGPWlA5leq4=
Subject key identifier: D5:7A:89:BB:B5:BE:89:6D:42:2F:EA:D5:5F:7F:4C:FD:CE:65:45:E5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A3CD32205E38649C3453E3E5637B7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1XqJu7W-iW1CL-rVX39M_c5lReU.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41653
IP address blocks: 185.119.254.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3c:d3:22:05:e3:86:49:c3:45:3e:3e:56:37:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d57a89bbb5be896d422fead55f7f4cfdce6545e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:bb:96:7b:0d:1a:29:23:47:d1:c2:ea:ba:
95:bf:c0:22:c1:ac:01:ba:5d:0d:ac:a6:91:75:79:
a0:48:79:bd:cd:e9:d6:5e:04:ce:f9:46:d1:c8:e0:
c5:21:a9:ac:83:4a:d4:7c:24:d6:78:59:ee:00:9b:
f0:42:c1:59:ec:73:66:a1:32:e1:4b:c1:db:b6:e5:
8e:28:68:54:13:c0:cc:bb:36:c2:78:14:fb:c8:27:
96:4d:9a:c6:31:ee:52:93:ea:ad:ba:81:6d:dc:35:
c6:91:1a:ab:40:00:a3:99:45:4e:ab:36:91:b8:0d:
c8:c1:b6:15:e9:42:e8:21:81:06:bf:8e:6f:a2:fe:
f0:e4:d0:23:10:a8:f5:d6:48:00:c9:e5:f4:b3:c1:
35:bc:ea:1a:d9:b7:2a:b5:78:3a:f1:d2:91:e2:4a:
52:f8:11:f9:f2:45:5c:ee:fb:87:2b:7e:50:be:8c:
a9:a5:15:fe:ee:76:62:14:9f:07:e1:28:47:a9:d1:
94:7e:c4:4e:54:34:78:e5:b6:4a:9e:bf:42:b3:f6:
03:f2:b1:fb:5c:9a:aa:98:32:12:9a:fd:57:f5:01:
38:3a:29:e1:ba:62:d9:ef:dd:2b:db:cb:52:b0:da:
be:62:06:ce:c0:e8:f7:05:3d:71:f4:95:9b:36:c9:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:89:BB:B5:BE:89:6D:42:2F:EA:D5:5F:7F:4C:FD:CE:65:45:E5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1XqJu7W-iW1CL-rVX39M_c5lReU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.254.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8a:bc:0a:34:76:04:6e:31:b0:a5:4a:34:bb:ed:fc:78:85:
d7:37:16:4b:e1:d6:6a:d0:ff:fd:a9:50:e8:1f:e8:34:50:29:
47:34:db:18:6a:03:a4:96:be:07:b6:1e:97:1c:bb:fa:62:62:
e4:e0:56:77:10:52:9c:b6:da:5a:2c:79:65:08:86:6f:00:86:
3e:03:bc:97:06:1f:86:7d:05:9f:9d:20:47:19:3b:f5:a3:4d:
16:3e:7f:16:a2:0a:50:3a:37:f6:4c:68:cb:0e:90:ac:02:47:
cf:67:a0:55:12:02:64:84:11:86:93:ce:ee:f7:a0:dd:64:1c:
46:e6:16:e3:4d:44:34:de:c0:58:1a:6f:88:35:86:cc:4b:3f:
80:12:5b:df:ad:f6:f4:c9:d9:3f:86:01:b3:dd:ca:26:69:1a:
ec:2f:bb:93:75:7f:a3:6b:7d:14:10:40:ac:e8:d7:99:2a:34:
44:f5:e4:eb:91:48:bc:a6:f0:41:76:83:38:98:78:90:f7:44:
5d:12:c0:22:c8:78:df:a0:6a:f8:e4:ec:1b:2a:77:2c:f8:f7:
f4:bf:ef:64:32:b3:15:49:1d:43:06:c1:ad:3c:38:1a:2b:3c:
d9:99:dd:91:ed:28:9e:ad:99:5c:7e:9d:27:d4:82:15:a7:db:
5d:08:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:57 2025 by rpki-client