Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jRthgaBsglMmRWtdTjAzYvt9b_U.roa
File: jRthgaBsglMmRWtdTjAzYvt9b_U.roa (raw, json)
Hash identifier: j02f1QhzkDx+78aeFx/OQ0UunrMPqfq4s3JuoSFO2EI=
Subject key identifier: 8D:1B:61:81:A0:6C:82:53:26:45:6B:5D:4E:30:33:62:FB:7D:6F:F5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A41929968A715EA99AB7382A65176
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jRthgaBsglMmRWtdTjAzYvt9b_U.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48105
IP address blocks: 185.142.141.0/24 maxlen: 32
2a06:7a04::/43 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:41:92:99:68:a7:15:ea:99:ab:73:82:a6:51:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d1b6181a06c825326456b5d4e303362fb7d6ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:7e:95:cb:af:88:46:54:15:a1:f8:3b:07:
7f:5f:04:66:71:73:b1:21:57:e9:d0:c9:b7:69:40:
7a:f2:ec:e6:72:f8:fa:97:6c:7b:76:af:73:6a:4b:
11:1c:2d:81:4f:40:6c:9f:50:10:97:89:21:64:6e:
97:14:9a:77:0e:3f:a3:e2:06:31:0a:2a:0d:ec:83:
50:43:5f:6b:55:ae:12:af:db:60:ef:06:db:99:ac:
64:bb:56:01:50:a4:b4:27:02:35:47:4b:93:1f:92:
7c:e0:b7:59:26:d1:d8:bb:45:fa:f9:0d:98:e8:e9:
68:df:f4:b3:7e:64:84:a1:96:54:b8:24:7d:53:27:
60:39:a4:2a:a3:18:5d:d3:19:fb:18:ce:4c:11:96:
91:df:e2:ca:5c:ff:9a:af:7d:9f:bf:c6:a1:f8:e8:
bd:df:7b:09:98:b1:14:cc:45:1c:0e:66:8b:b7:62:
6d:07:c4:9e:3f:d7:db:e2:3b:d9:52:a3:79:37:2a:
0f:42:73:11:b6:e7:d4:bc:bc:ac:f0:4b:12:e6:af:
c1:7f:ed:b0:51:e4:5f:8b:66:23:63:13:d5:83:a8:
1e:6b:0e:16:7f:bf:3d:c6:bc:18:20:70:66:13:b7:
2c:50:5b:5d:4d:d5:dd:96:74:99:cf:b2:4f:64:2e:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1B:61:81:A0:6C:82:53:26:45:6B:5D:4E:30:33:62:FB:7D:6F:F5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jRthgaBsglMmRWtdTjAzYvt9b_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.141.0/24
IPv6:
2a06:7a04::/43
Signature Algorithm: sha256WithRSAEncryption
8c:82:21:6b:3f:2a:1e:20:12:f4:8d:e0:c0:6e:59:a3:f9:3f:
79:9f:99:f6:1a:1d:c3:13:e3:d6:7f:5e:d7:38:91:7c:20:cd:
c3:d7:e9:c5:df:2a:af:4b:b4:ff:6c:38:31:a0:1b:81:30:96:
15:67:07:7a:60:52:bd:35:28:95:8a:75:27:30:6e:e6:9b:a5:
bd:b7:f4:73:9c:34:99:69:3c:f5:d0:f5:a6:2a:0a:e1:3b:8e:
72:ff:9c:fa:a0:a2:69:a9:ed:85:37:78:80:cc:d7:23:26:8c:
8f:f5:ef:ee:28:95:de:7f:69:b6:33:72:53:97:d4:7d:36:45:
36:fc:52:e4:0c:66:22:ef:57:35:90:38:f2:14:18:ab:bf:05:
f6:15:72:a0:a8:21:c2:8f:5b:fe:cc:ad:5d:c9:fb:c0:75:ae:
9b:49:54:9d:5e:8c:b8:c6:4d:bf:94:46:b6:8a:ed:30:d6:17:
07:76:2e:09:7b:18:ca:53:40:87:69:da:9a:a8:8c:17:d8:39:
d3:23:02:7d:47:13:2f:64:31:e4:39:90:bc:8b:88:f0:0a:75:
54:77:66:3d:72:9c:32:eb:37:22:79:92:a6:d2:cb:25:76:ed:
59:46:aa:14:b4:33:85:6f:33:30:a5:0d:b2:99:05:7e:dc:72:
f8:95:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:36 2025 by rpki-client