Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/azULULrYKufUw_b5KR5eT2eHJmA.roa
File: azULULrYKufUw_b5KR5eT2eHJmA.roa (raw, json)
Hash identifier: cpndNDC6VLKcWTm7Q1y0x9q6xwHPnhxzCK3JHVzO+f8=
Subject key identifier: 6B:35:0B:50:BA:D8:2A:E7:D4:C3:F6:F9:29:1E:5E:4F:67:87:26:60
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019474681822F31AD3156EB05722AD1BFD2C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/azULULrYKufUw_b5KR5eT2eHJmA.roa
Signing time: Fri 17 Jan 2025 13:16:06 +0000
ROA not before: Fri 17 Jan 2025 13:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.138.210.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:68:18:22:f3:1a:d3:15:6e:b0:57:22:ad:1b:fd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 17 13:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b350b50bad82ae7d4c3f6f9291e5e4f67872660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:57:44:f6:1d:81:06:15:23:8c:70:f3:fc:
59:40:7a:9c:b7:42:91:48:99:71:13:e5:96:7e:d5:
12:55:ab:a6:81:99:2d:10:8f:f3:33:51:78:e3:b0:
d9:cb:9c:a4:e7:78:99:94:10:eb:cf:4c:e5:d5:e5:
fe:cd:b3:25:ba:20:bc:eb:79:d1:21:26:99:d9:15:
cd:d4:32:d9:17:75:2e:28:94:3f:79:78:6b:a7:eb:
e7:7b:c2:d8:65:16:b9:83:8c:e9:ba:24:bd:3a:c1:
14:48:00:ac:89:54:b9:3d:6b:4a:3c:c3:73:0b:d8:
e9:51:3c:a6:35:0e:6b:23:19:d3:d3:13:24:97:ce:
c2:4c:49:e4:2e:8e:1b:f1:37:e1:1e:fc:10:c6:52:
2e:93:47:1a:39:1a:52:3a:bf:34:c3:ff:bf:f6:f2:
56:3e:98:b6:6c:4b:67:85:8a:f2:68:f7:2f:58:66:
16:34:e5:6e:b6:5b:fd:b0:d1:ce:a4:1e:a3:5e:36:
47:91:4c:96:bd:24:c8:8c:d6:d8:ab:f5:c8:3f:7b:
4c:46:76:b6:7b:8e:7f:21:ab:58:5d:86:60:dd:74:
5b:c4:d1:a2:62:c7:68:d6:f0:ee:35:ac:d6:ea:2a:
e6:7b:58:0e:0a:35:12:43:4c:88:aa:a7:3a:99:e3:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:35:0B:50:BA:D8:2A:E7:D4:C3:F6:F9:29:1E:5E:4F:67:87:26:60
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/azULULrYKufUw_b5KR5eT2eHJmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
185.117.21.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ab:50:0e:1d:25:71:71:ec:91:f5:35:bf:d8:47:1c:1e:a3:
f4:b1:ab:9f:8a:26:17:cf:42:9d:07:6a:6b:21:3d:10:5b:af:
43:5f:91:3f:9c:18:73:c2:98:8b:20:a6:fd:30:a8:58:ad:75:
37:3e:d4:da:0f:f0:5b:12:26:fa:7f:c8:0f:8a:78:d5:88:2c:
6d:34:dc:77:07:30:8e:16:1f:1d:ec:ed:62:e2:bb:66:c4:6a:
4b:20:4e:c7:eb:d4:00:66:ad:51:44:77:6b:27:39:2a:a4:d0:
2e:8c:05:57:a5:8d:2c:8e:90:29:f3:7f:5d:69:6a:2b:dc:7d:
6f:c0:29:56:7f:0e:b0:11:4d:f2:68:52:9f:3d:a4:84:37:49:
78:44:53:cc:7d:5b:0b:64:8e:4a:68:5f:00:e5:9b:2b:16:df:
b2:e7:af:32:e0:27:81:20:3c:07:14:0b:9a:84:97:9b:25:08:
95:07:6a:94:64:85:39:35:b8:6e:b1:78:9f:59:d1:31:f2:54:
57:df:25:7b:45:83:62:1e:80:81:48:98:17:70:93:52:72:96:
4f:0b:37:9f:18:d6:fa:30:cd:8d:f0:f3:71:16:1e:11:0f:a9:
e1:ee:f7:59:d7:8b:e2:0e:2e:df:f4:6d:87:7f:35:0d:ae:fd:
5c:97:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:26 2025 by rpki-client