Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/68QeHj6JI2_T8Kr8hKctEhMPtbw.roa
File: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (raw, json)
Hash identifier: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=
Subject key identifier: EB:C4:1E:1E:3E:89:23:6F:D3:F0:AA:FC:84:A7:2D:12:13:0F:B5:BC
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 0194258F50AA3C03D12DE3AAA9B0E03652AA
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/68QeHj6JI2_T8Kr8hKctEhMPtbw.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212726
IP address blocks: 185.242.12.0/24 maxlen: 24
185.242.13.0/24 maxlen: 24
185.242.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:50:aa:3c:03:d1:2d:e3:aa:a9:b0:e0:36:52:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebc41e1e3e89236fd3f0aafc84a72d12130fb5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:0f:fc:16:7d:40:a3:86:b8:b7:f3:ae:71:
f0:d9:d8:45:5d:be:b9:8f:8d:3d:de:c5:a8:87:f1:
26:be:ed:38:cc:64:02:94:42:47:95:69:72:1f:a2:
a5:6c:09:49:00:71:c1:b7:dc:3e:23:b1:05:e0:e1:
dc:91:87:92:69:54:61:0b:2d:47:63:dd:4f:22:89:
45:6d:be:e3:40:ac:e6:1c:a4:81:35:f6:eb:0f:70:
ec:12:60:c9:9e:94:6d:2b:c2:1f:6e:38:c7:70:fa:
17:0e:1e:e6:ce:d7:e2:51:2c:3c:bc:06:ff:50:cc:
a5:53:17:84:b9:41:20:09:e9:4d:51:11:be:92:59:
5a:e5:0f:fb:86:31:ef:ce:5c:1f:04:09:92:91:d3:
1e:70:51:e3:53:57:6a:20:05:60:1b:47:ef:51:d7:
e0:0a:a6:98:6c:18:8e:3c:c0:df:8c:e0:76:4e:1a:
28:3f:f0:62:8d:17:67:e2:7a:f8:88:ec:92:54:22:
e2:e7:12:78:53:68:bd:00:73:bd:9d:1e:8a:a0:99:
86:dc:2c:99:b4:ae:93:82:f9:81:d1:35:3a:89:bf:
d5:55:44:f2:51:14:f7:c1:8b:b4:ea:a2:c3:c9:97:
3a:49:62:31:27:3b:98:41:ab:3f:26:a1:29:41:10:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C4:1E:1E:3E:89:23:6F:D3:F0:AA:FC:84:A7:2D:12:13:0F:B5:BC
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/68QeHj6JI2_T8Kr8hKctEhMPtbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.12.0-185.242.14.255
Signature Algorithm: sha256WithRSAEncryption
3b:ab:02:5a:87:c4:24:69:cb:46:56:5e:44:15:bc:04:7f:6d:
6b:bf:e1:e7:c6:97:0b:85:e1:e6:10:fc:8f:f6:4b:13:0b:f3:
8f:04:ae:08:35:9e:2a:f8:60:b9:1a:e2:dd:c3:1e:f6:62:8b:
06:e0:6f:12:d2:cc:5b:f9:08:1a:76:f2:bd:9d:05:21:dc:8e:
51:e9:46:13:42:75:d1:6f:5f:96:b6:cf:14:46:eb:fd:68:4c:
2f:57:39:8b:98:29:2e:ef:ac:3b:34:d1:5a:e6:ad:d0:ee:9c:
ec:e9:88:d6:0d:81:49:66:dc:83:86:f7:df:71:ce:70:06:83:
c9:e1:96:f0:79:56:58:d1:e0:43:28:95:13:9c:66:7d:b0:2e:
9f:ce:3a:b4:ec:8a:7f:7e:5a:d0:96:73:ca:96:52:59:35:69:
e8:64:85:0e:21:f2:a5:13:08:c4:54:7e:d5:11:88:b6:e0:04:
ef:44:78:67:d0:60:ab:c3:09:ce:84:31:e5:e4:df:7e:03:a0:
6a:5c:d3:b7:ad:6c:ca:30:38:f5:28:48:1e:0b:2c:4f:f5:62:
39:87:8f:de:88:62:88:40:65:b5:8d:4c:0a:28:ef:bc:dc:c5:
f4:f0:1a:a9:78:80:c7:72:ba:71:62:16:22:07:9a:5a:56:27:
31:0e:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:37 2025 by rpki-client