Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jrkw2eu9l-H9WSdQOVOuv_8g3JM.roa
File: jrkw2eu9l-H9WSdQOVOuv_8g3JM.roa (raw, json)
Hash identifier: 9ilFwqxtGZvjcmmjrhQHqjxtD6qxwPHZrQZz24MzOB8=
Subject key identifier: 8E:B9:30:D9:EB:BD:97:E1:FD:59:27:50:39:53:AE:BF:FF:20:DC:93
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A3EB6B79DAEB254570621F0DB3615
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jrkw2eu9l-H9WSdQOVOuv_8g3JM.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43308
IP address blocks: 185.182.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3e:b6:b7:9d:ae:b2:54:57:06:21:f0:db:36:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eb930d9ebbd97e1fd5927503953aebfff20dc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:ed:8e:cd:0e:d5:04:bb:8e:80:59:7a:28:
47:46:68:3a:41:24:0f:3f:e0:04:91:2b:e7:c2:29:
fe:ef:b3:eb:4f:81:b2:e8:bf:7a:1e:fe:2c:c2:e8:
66:e5:6b:60:22:17:29:41:e9:07:0e:6e:6b:8d:56:
d0:8d:46:62:6a:1a:85:eb:7a:f3:f8:22:59:4f:3a:
d6:63:2f:9e:15:e2:98:97:99:dc:58:8d:5d:03:30:
88:ff:a1:e3:67:41:42:d9:9d:84:b9:40:32:20:62:
aa:4f:f6:76:e7:7c:e3:c4:df:3e:07:26:ea:eb:49:
b2:35:2b:1d:45:27:40:dd:36:36:a8:f8:91:45:f8:
47:12:ab:d4:c3:71:0a:4c:28:bf:f4:3d:a2:78:e2:
13:d9:bd:c4:9c:be:3b:8f:e0:bb:b9:62:74:f3:c4:
d1:ec:6b:07:ca:f5:8a:5e:a8:36:03:29:07:1b:41:
7b:12:1a:d5:be:89:c5:42:5a:ab:97:42:fa:7b:d0:
44:69:61:e5:bf:e7:a7:61:99:e2:c7:ab:6d:47:c7:
9c:47:17:9f:f9:42:d1:73:6d:b1:99:c0:02:81:ae:
70:f9:68:6b:24:d5:8d:82:a1:e5:af:ea:3e:cc:37:
67:0f:c4:4e:d6:82:aa:f0:7d:70:15:c2:e0:03:87:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B9:30:D9:EB:BD:97:E1:FD:59:27:50:39:53:AE:BF:FF:20:DC:93
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jrkw2eu9l-H9WSdQOVOuv_8g3JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:98:fc:64:0e:04:ca:a7:86:c1:12:a5:5c:6f:ab:61:90:7e:
7d:54:5c:8f:c3:fe:76:a4:34:b1:c4:ba:f1:e1:7f:d8:04:94:
43:f5:53:52:99:f6:6b:b2:cc:c3:ee:75:48:f1:c9:05:a9:17:
8d:a2:6d:fb:bc:d5:85:03:47:91:0d:b7:ca:90:fc:ee:c4:be:
91:d5:1a:40:12:51:9b:f4:e3:e7:d5:93:8d:dd:a8:5d:fb:16:
f0:6b:41:55:42:27:96:41:89:31:cd:09:b7:5e:70:13:b5:60:
18:34:24:48:b2:2c:49:29:56:f0:f7:2b:13:1b:e8:ca:f4:73:
c3:50:44:5c:0b:d0:be:a0:c3:2f:5e:61:56:05:6e:48:2d:70:
1c:b2:13:9a:5e:cc:82:72:fc:22:d5:d4:00:ce:23:e0:6e:e6:
1c:cb:8b:1b:85:2c:64:99:4c:26:27:28:7a:ec:1b:d5:4b:f4:
7e:09:68:44:7b:5d:3e:05:9b:f3:43:78:da:da:2a:0e:4b:f5:
a6:ee:36:cd:ad:b3:0e:a7:83:6d:2f:ba:b1:cd:ea:47:ea:e6:
91:d0:3e:5a:f9:86:3b:ce:f5:87:32:99:51:20:f8:d2:f3:aa:
80:04:54:c2:29:45:5b:04:eb:77:af:14:56:01:77:90:70:1d:
8b:6b:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:55:57 2025 by rpki-client