Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa
File: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (raw, json)
Hash identifier: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=
Subject key identifier: 6A:39:33:B8:41:FC:16:75:F3:0F:AC:BD:5A:A8:13:92:F7:00:C9:64
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 019423690F853AB79C00385EB203C7C0284A
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa
Signing time: Wed 01 Jan 2025 19:47:55 +0000
ROA not before: Wed 01 Jan 2025 19:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48253
IP address blocks: 185.142.36.0/24 maxlen: 24
185.142.37.0/24 maxlen: 24
185.142.38.0/24 maxlen: 24
185.142.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0f:85:3a:b7:9c:00:38:5e:b2:03:c7:c0:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Jan 1 19:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a3933b841fc1675f30facbd5aa81392f700c964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:79:06:05:64:66:48:17:6b:85:82:c3:cc:
48:28:e0:e4:80:5f:b3:a6:64:b0:8f:30:51:1d:fd:
6b:fe:c8:0d:27:cc:8f:a9:90:24:e2:64:2b:73:0d:
5f:af:82:83:55:d9:e6:ee:3a:8d:a2:7d:df:45:38:
d9:27:65:d0:4d:85:e5:bb:8a:6b:23:08:fc:ef:ae:
17:ed:2b:03:89:2b:f3:ac:b6:ed:49:32:5d:a3:26:
7d:a8:be:f7:b0:dd:06:e7:a5:35:7d:59:1f:ee:da:
af:c8:2f:e2:86:38:4d:97:26:2b:80:cc:a1:ec:85:
e8:2f:d3:2a:29:dd:0c:de:53:06:f5:68:9f:2c:c1:
f9:42:96:cd:d0:0e:24:e5:72:33:79:6e:e3:c3:26:
c8:02:d0:bf:55:d0:4e:80:65:d9:e0:75:28:7c:4b:
48:85:da:af:0e:81:0b:9a:26:a6:cb:54:8b:a1:a5:
5d:8b:f9:2d:ca:99:ef:9d:8c:c1:51:aa:ea:60:cc:
4c:e5:24:73:52:b2:c2:df:e2:4f:f0:c5:08:2f:40:
f8:90:77:f2:a6:56:bc:32:48:db:3e:b2:d7:84:a1:
1a:5b:ec:af:7e:bc:50:d4:9b:6e:cd:09:d4:08:81:
3d:bd:01:ff:de:a3:1c:28:b3:4f:a9:50:a2:4c:53:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:33:B8:41:FC:16:75:F3:0F:AC:BD:5A:A8:13:92:F7:00:C9:64
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.36.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5a:97:d7:2b:3d:02:dd:8f:46:7a:53:69:89:76:3f:8e:0c:
3b:9e:73:80:46:cf:6c:ce:a4:4c:db:36:b2:c7:1d:7e:ed:f3:
fb:ad:b3:94:77:4d:c0:98:f0:f8:29:35:59:1c:33:d5:76:4e:
ea:48:aa:77:8d:64:5c:08:2c:0a:0a:ef:bb:2f:ef:74:47:38:
46:c9:f6:2c:d8:bc:31:de:52:66:c5:5d:59:d8:4d:ea:1c:04:
01:cf:89:54:3a:54:0d:56:e6:2d:36:94:6a:74:fa:97:77:73:
d5:47:af:e1:c7:20:3b:a7:fe:c0:02:bd:89:86:d8:19:f6:e2:
fd:29:f9:03:35:b3:40:0a:b5:d5:51:20:27:79:0c:e5:fc:ee:
8a:6a:64:2f:60:de:1d:dd:dc:51:d7:32:24:8a:73:c4:36:9b:
c0:45:70:ee:45:db:98:cc:1f:10:75:bb:0c:c3:b0:66:3d:9e:
9c:b5:d2:32:3c:1b:4a:9b:aa:f2:3f:3b:85:c3:cc:b4:91:fd:
a2:fb:69:b5:27:2f:fe:cb:a6:8e:6e:63:10:db:f0:e9:08:05:
0c:7c:c7:2d:b3:ac:90:eb:8e:dd:26:e2:61:b6:ee:96:09:85:
eb:54:58:d6:87:72:91:37:16:68:3e:88:80:a5:ac:bb:4f:af:
79:0b:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:18 2025 by rpki-client