Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa
File: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (raw, json)
Hash identifier: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=
Subject key identifier: 5F:F3:C4:CD:0E:21:DB:E1:19:B5:7C:06:17:5C:91:B0:EF:D1:64:16
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 0194236A1107C45259569BE6D5076D0FE7A1
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42807
IP address blocks: 185.121.126.0/24 maxlen: 24
185.121.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:11:07:c4:52:59:56:9b:e6:d5:07:6d:0f:e7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ff3c4cd0e21dbe119b57c06175c91b0efd16416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:92:1d:49:d1:2c:16:86:b1:64:26:c7:5d:
78:92:70:dc:c2:9d:77:dc:84:08:85:40:60:a9:23:
d2:94:9b:b7:8b:b6:49:e5:f9:e1:27:c8:36:d6:1d:
be:6e:25:ad:d3:ef:4d:30:e3:3d:e5:80:31:30:73:
1a:5f:7e:b7:7f:87:32:4b:af:82:c7:f7:2d:a4:69:
c8:d8:ba:39:49:21:af:50:ed:b2:af:20:93:38:25:
38:9b:d1:04:0a:bd:36:ec:a6:50:0a:d5:a9:81:00:
2f:6f:cb:79:f9:91:ad:80:d1:08:25:40:8c:9d:88:
fe:20:2a:ff:e6:c5:0d:f2:ca:7b:fe:39:35:bc:b0:
6c:e5:7b:59:3b:df:3a:e0:61:e2:17:6c:eb:4d:c7:
33:21:6b:c9:54:01:c5:65:5d:7c:1c:63:df:50:c4:
ad:b8:56:b9:5d:bd:69:09:70:ee:0e:5a:8b:5a:17:
f1:3e:dc:17:b7:cc:a8:55:2a:b3:4d:16:44:14:46:
fa:fa:9a:de:88:c1:5f:47:cf:7b:ac:40:e2:38:71:
d3:1a:b3:af:e4:65:5d:e9:49:9c:88:1a:24:b1:f4:
88:12:6a:96:54:91:9e:c9:61:e0:0d:14:da:45:4f:
5a:12:16:f8:ed:81:8b:98:04:59:1d:6e:66:43:5a:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F3:C4:CD:0E:21:DB:E1:19:B5:7C:06:17:5C:91:B0:EF:D1:64:16
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.126.0/23
Signature Algorithm: sha256WithRSAEncryption
01:38:fb:8f:29:ac:b1:95:8f:38:e8:a1:51:0a:cc:ca:af:8f:
24:c8:bd:3f:93:24:c1:07:c8:49:95:b8:fb:63:6c:63:c3:d9:
ce:18:fd:2f:ee:1f:9c:77:c8:63:f6:53:05:6a:b8:a0:30:97:
81:55:c4:c7:39:d0:15:c3:57:a6:5a:78:da:02:fb:ff:de:45:
f5:c7:62:af:63:73:0a:65:78:a7:18:37:a9:1b:a8:30:17:27:
e4:26:68:a3:33:29:ec:dd:2e:29:2c:ed:45:b5:cd:eb:e1:88:
95:83:55:1e:81:66:1b:2f:35:8a:0f:dd:fa:55:80:1b:d8:7a:
62:02:73:99:cf:2d:2d:0b:66:7e:e1:7e:2b:f8:26:1f:db:13:
5c:75:e6:0a:1d:68:b9:82:dc:ef:32:88:2d:92:e0:2d:c7:43:
35:a2:b2:58:b2:32:5e:8a:f3:3c:a0:f5:cb:b7:28:dd:37:c0:
4d:27:45:c7:c4:ae:2f:fb:cd:71:0e:b1:28:3a:13:20:d9:ef:
d9:b2:75:21:58:ee:b0:2d:49:fc:f8:5a:9a:00:d7:cd:78:b7:
60:21:1b:ef:c8:56:6a:4a:00:1c:f9:7f:66:a7:40:8c:56:61:
ff:c2:68:6e:86:7c:46:06:80:d8:80:7f:eb:34:7d:c1:e9:da:
7f:53:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:34 2025 by rpki-client