Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/028b9d-0461-44ea-b44b-48dd9291281c/1/6PFppRLh0VhRsNc_oFCq8gZKfqY.roa
File: 6PFppRLh0VhRsNc_oFCq8gZKfqY.roa (raw, json)
Hash identifier: TUTCgynANxeq5+JNdkLL7L6xp/fU1BckpMVTL/b5lyo=
Subject key identifier: E8:F1:69:A5:12:E1:D1:58:51:B0:D7:3F:A0:50:AA:F2:06:4A:7E:A6
Certificate issuer: /CN=0a1b5c044dcd48e1db7a619b44904a98435d85b8
Certificate serial: 01AA77D5
Authority key identifier: 0A:1B:5C:04:4D:CD:48:E1:DB:7A:61:9B:44:90:4A:98:43:5D:85:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChtcBE3NSOHbemGbRJBKmENdhbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/028b9d-0461-44ea-b44b-48dd9291281c/1/6PFppRLh0VhRsNc_oFCq8gZKfqY.roa
Signing time: Sat 01 Jan 2022 15:55:27 +0000
ROA not before: Sat 01 Jan 2022 15:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.124.4.0/22 maxlen: 24
185.207.144.0/22 maxlen: 24
185.225.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27949013 (0x1aa77d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1b5c044dcd48e1db7a619b44904a98435d85b8
Validity
Not Before: Jan 1 15:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8f169a512e1d15851b0d73fa050aaf2064a7ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:16:5f:39:4d:61:8a:44:12:4d:4a:67:44:
93:99:0f:aa:c9:1d:44:c6:90:9e:0e:7e:a6:4e:99:
8f:92:a8:32:51:62:1b:7f:9f:30:d6:b5:d4:ec:72:
68:17:ca:ab:6e:2f:0b:19:a0:80:80:cc:4e:aa:6b:
0a:6e:4c:85:7b:4b:79:03:4e:f1:74:48:4b:68:1d:
c6:10:5b:5d:4a:a0:76:b4:dc:23:b8:33:38:3d:76:
91:84:44:e1:a4:60:92:a8:a2:e6:63:9f:76:3b:b0:
e6:95:88:0f:88:0f:9d:a4:5d:d5:e4:2d:ed:a8:02:
7a:16:d2:d4:84:d4:c1:db:cf:01:04:33:04:f7:15:
31:2b:49:42:22:11:41:25:4c:4b:f2:55:52:45:b9:
bc:4f:62:7e:c3:e8:83:a0:8a:b8:80:2e:ed:5d:52:
38:ab:de:df:c0:cb:d8:00:89:ea:19:05:70:fa:8e:
db:f4:34:f8:14:6c:51:c3:f0:52:89:ec:fb:c0:e7:
ab:37:88:5c:59:b3:b4:69:3b:bb:b3:89:ae:75:73:
d9:98:a7:90:2e:b2:64:fd:e9:78:3f:65:a9:6d:c8:
37:44:db:58:d4:8a:d8:7e:28:01:24:d8:d2:d6:23:
e3:00:78:b9:a4:5b:99:36:a2:9c:7a:5c:75:f4:57:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F1:69:A5:12:E1:D1:58:51:B0:D7:3F:A0:50:AA:F2:06:4A:7E:A6
X509v3 Authority Key Identifier:
keyid:0A:1B:5C:04:4D:CD:48:E1:DB:7A:61:9B:44:90:4A:98:43:5D:85:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChtcBE3NSOHbemGbRJBKmENdhbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/028b9d-0461-44ea-b44b-48dd9291281c/1/6PFppRLh0VhRsNc_oFCq8gZKfqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/028b9d-0461-44ea-b44b-48dd9291281c/1/ChtcBE3NSOHbemGbRJBKmENdhbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.4.0/22
185.207.144.0/22
185.225.11.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4e:0c:41:f5:d7:b1:e1:aa:38:ad:a2:e5:eb:a2:a1:b7:cf:
60:dd:36:e7:31:86:b8:f1:5a:cb:df:26:12:bc:08:1d:ee:53:
58:bd:99:24:8a:79:4a:d1:36:65:22:e2:c9:bc:3e:65:80:6a:
38:d0:b6:14:68:62:89:59:03:d0:b6:c1:fb:67:28:b0:99:01:
99:9a:26:b1:a0:cd:6d:5f:9f:5e:44:be:94:c1:e1:5b:30:ce:
01:37:08:d0:7e:f7:c5:b4:2d:72:70:dd:ad:3d:49:4e:e5:07:
c9:f5:61:61:87:a9:11:10:ad:14:67:2e:93:01:67:12:25:cc:
0e:ab:52:07:f8:9f:cc:82:45:b6:99:47:b0:39:99:d6:13:d1:
cd:33:28:75:52:67:14:eb:ed:66:e7:81:73:f6:02:c1:14:01:
97:a0:c7:d7:7f:67:00:60:50:5d:f0:2b:a2:81:3e:14:90:d8:
28:11:52:a4:20:83:94:9f:22:07:9e:b0:17:93:af:d3:5b:69:
57:06:b2:33:7a:d7:d4:d0:8e:8b:51:ef:fe:6b:14:ca:4a:20:
d7:97:8a:4c:a6:a5:0c:a8:d8:a4:f2:a2:9b:61:5a:bb:b2:31:
4f:17:cf:8f:d7:da:25:03:59:ff:77:83:6e:b1:14:45:ab:3c:
29:25:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:58:53 2025 by rpki-client