Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VaNhpsS1nwEgQIjKt7mfbAo8Wu0.roa
File: VaNhpsS1nwEgQIjKt7mfbAo8Wu0.roa (raw, json)
Hash identifier: 76xotw06MQiQMl37XvUkufIyGESaewfemD1zsseCo9Y=
Subject key identifier: 55:A3:61:A6:C4:B5:9F:01:20:40:88:CA:B7:B9:9F:6C:0A:3C:5A:ED
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A3D66DECEC63FCA480025DBA21980
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VaNhpsS1nwEgQIjKt7mfbAo8Wu0.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42495
IP address blocks: 185.115.241.0/24 maxlen: 24
2a06:7242::/43 maxlen: 43
2a06:7242::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3d:66:de:ce:c6:3f:ca:48:00:25:db:a2:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55a361a6c4b59f01204088cab7b99f6c0a3c5aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:f7:1d:e2:6e:ea:32:96:86:4a:f6:70:44:
a1:99:a4:b9:e9:95:5c:90:7a:1a:25:10:ab:15:c7:
5e:32:77:a7:15:cb:0c:e0:4d:d4:2f:5c:28:a8:c3:
9f:53:a6:09:37:ff:bf:81:62:38:46:3a:a4:b4:08:
03:53:e6:8f:4f:41:2c:cb:2e:83:b7:88:ef:17:51:
56:ce:fc:c3:69:52:f6:a3:db:fb:8c:d9:2e:da:54:
72:86:7f:cf:60:e6:08:cb:36:db:28:98:17:eb:18:
80:50:4e:c2:40:6f:89:7b:8b:f9:ef:ea:df:29:dc:
45:10:b1:3b:76:8e:f2:53:b4:df:1e:07:da:d8:8c:
83:18:25:e1:c5:55:bd:07:0e:89:f2:91:42:f8:f6:
24:2b:40:af:ee:c9:40:18:4b:6f:0c:c7:dc:62:58:
b3:be:7d:21:53:59:dc:56:54:b3:c0:cc:65:3d:2d:
6e:21:94:0f:56:ef:e4:96:29:01:74:b5:58:40:44:
26:af:cb:d5:74:b4:9b:83:c0:54:1b:4e:27:17:e7:
b9:d3:39:cb:be:fe:8a:5d:ca:e6:f8:55:27:60:aa:
c1:a6:42:8d:fc:da:17:c8:c3:0e:f1:e5:7e:51:31:
fe:2b:2a:8e:9f:98:c7:95:3c:95:fd:f1:68:35:1d:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:61:A6:C4:B5:9F:01:20:40:88:CA:B7:B9:9F:6C:0A:3C:5A:ED
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VaNhpsS1nwEgQIjKt7mfbAo8Wu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.241.0/24
IPv6:
2a06:7242::/43
Signature Algorithm: sha256WithRSAEncryption
a4:23:ab:6a:26:fd:79:6b:10:08:1d:e9:84:f8:a7:04:90:d0:
ea:12:48:63:90:84:fd:6e:c4:73:cb:b0:ba:b5:4f:84:10:09:
b8:32:77:b6:4e:bf:82:b1:44:8d:d8:ad:72:bc:c9:34:d5:41:
b4:3b:91:66:d7:7b:cd:fd:2d:ad:02:a1:71:24:86:39:cc:ae:
24:75:2f:00:34:4a:0e:6f:cd:b7:d3:80:ec:ec:cf:cc:de:c4:
aa:40:25:ca:c4:86:55:91:97:e1:c9:48:22:4f:43:11:c7:39:
45:da:6d:8b:6f:99:e0:4d:d3:ab:b1:34:c4:5e:f5:e0:7d:53:
f2:8b:49:41:fd:ab:f9:bf:f2:44:2d:c6:f7:06:6e:9e:6b:2e:
94:bd:5e:f0:d5:05:63:18:00:f9:8c:34:36:43:11:a5:1b:a1:
59:42:95:d0:a5:92:78:7e:4b:52:b9:4f:ae:6f:95:a8:a7:fc:
9e:3f:80:42:92:34:74:86:b2:ba:46:d7:0b:a3:a1:74:78:ae:
c2:28:b7:d3:33:6b:b3:4e:e5:bc:11:5c:93:c1:2c:70:12:51:
80:bd:43:16:79:ab:30:7a:34:70:f2:e4:93:1e:d7:8c:49:91:
76:0e:89:be:99:b6:59:6a:20:d1:7c:c0:7c:58:a1:f9:d7:1c:
e6:24:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:41 2025 by rpki-client