Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/1O6glI2J2K4CEfuTTXBO1vPcs9w.roa
File: 1O6glI2J2K4CEfuTTXBO1vPcs9w.roa (raw, json)
Hash identifier: lezbWuEr+xxfjQ7K9R9BpiVCkdmnmto7Hh0jNYxUOOU=
Subject key identifier: D4:EE:A0:94:8D:89:D8:AE:02:11:FB:93:4D:70:4E:D6:F3:DC:B3:DC
Certificate issuer: /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial: 019425FDCF91A884FD5EBF25029E1B6A6A5C
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/1O6glI2J2K4CEfuTTXBO1vPcs9w.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216017
IP address blocks: 185.169.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cf:91:a8:84:fd:5e:bf:25:02:9e:1b:6a:6a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4eea0948d89d8ae0211fb934d704ed6f3dcb3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f9:06:eb:0f:28:b9:d7:a7:66:c1:b5:6c:af:
63:a7:f1:ae:03:63:bb:81:a4:23:72:56:e2:d9:ae:
48:0d:9c:de:72:42:08:12:42:fe:41:c0:43:55:2c:
06:54:bc:8f:b1:6d:8b:95:db:32:72:09:30:f4:bc:
9d:d4:5d:97:14:5c:3f:bd:28:f9:38:b7:d3:cc:cf:
91:7d:80:60:5e:d6:57:0d:e5:6d:6e:36:47:32:23:
6c:3c:da:ba:a1:d3:6a:a4:70:99:fa:47:bd:ce:6a:
23:ff:80:7b:ad:55:00:03:84:4f:dc:3b:fa:1e:37:
74:37:25:13:e1:a6:e6:c5:6a:0b:23:5c:71:a5:8c:
ae:d7:06:0b:a9:97:bc:11:46:5a:0d:35:16:2a:b7:
20:0a:69:f4:94:d5:fb:7b:49:ff:ca:51:a0:6c:3d:
0f:ea:0f:90:37:cd:ec:bb:18:30:23:55:47:b3:83:
d7:a5:91:bc:30:34:46:9e:ed:49:ec:af:f5:5e:ef:
8b:23:45:7d:84:34:78:55:30:db:3c:8d:17:d2:19:
e4:0f:cd:d7:30:1f:8f:03:f0:22:16:81:cd:96:9b:
d1:62:b1:5b:da:68:32:f0:3d:31:7d:69:77:62:9c:
2b:fc:79:19:c9:0b:58:a7:88:00:f2:62:6f:70:9c:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EE:A0:94:8D:89:D8:AE:02:11:FB:93:4D:70:4E:D6:F3:DC:B3:DC
X509v3 Authority Key Identifier:
keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/1O6glI2J2K4CEfuTTXBO1vPcs9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.191.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8e:92:48:14:44:7f:5f:66:b7:1f:b8:5c:c5:00:d5:7d:5a:
01:de:19:42:5e:9c:fe:39:d6:e7:b8:ba:24:c2:7f:1b:59:c9:
45:c1:13:1f:80:eb:2e:35:5c:b8:2b:17:13:ad:02:41:c7:f9:
84:52:37:11:97:61:60:de:4b:3f:e8:4d:1b:a9:e8:9a:59:0e:
18:30:82:45:f6:dc:95:47:57:a3:7a:df:1b:1c:41:25:84:a8:
ad:57:d9:59:70:d2:43:65:48:e2:9a:e1:90:19:2c:3f:cf:b2:
f3:64:bc:11:35:67:9e:29:cc:aa:10:f1:01:e8:9b:20:1a:da:
19:f9:58:24:45:22:93:4c:36:d9:c9:fd:79:11:8d:9d:55:55:
53:43:11:c0:9d:0c:d2:e1:e9:4d:a0:b7:5b:6d:31:10:33:93:
25:61:2a:50:10:c6:e5:3d:9f:78:bb:d1:65:72:0a:2a:e4:7c:
db:2d:86:b2:2d:44:cc:5d:e3:dc:37:60:36:da:61:93:ae:00:
91:ba:46:af:f1:07:c9:53:d0:85:26:ce:9c:73:f6:56:dc:5b:
10:32:85:d7:db:e9:32:1c:b7:01:1f:93:66:ba:90:54:1d:d5:
5c:ba:bd:01:af:b9:47:2d:7c:60:a3:74:d8:9f:72:79:a6:db:
7f:67:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:21 2025 by rpki-client