Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/CvdXc9dAuoPgtz5B6HVq8TruKQ0.roa
File: CvdXc9dAuoPgtz5B6HVq8TruKQ0.roa (raw, json)
Hash identifier: vZb7fKK94eyPt6Z0PY3dDQip6IArUPuz51Ar7XUuuO8=
Subject key identifier: 0A:F7:57:73:D7:40:BA:83:E0:B7:3E:41:E8:75:6A:F1:3A:EE:29:0D
Certificate issuer: /CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Certificate serial: 01941F8C588924B45A6B0096A78B90046730
Authority key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/CvdXc9dAuoPgtz5B6HVq8TruKQ0.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43228
IP address blocks: 185.190.104.0/22 maxlen: 22
185.190.104.0/23 maxlen: 23
185.190.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:58:89:24:b4:5a:6b:00:96:a7:8b:90:04:67:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af75773d740ba83e0b73e41e8756af13aee290d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:bc:68:c8:56:1a:ad:6c:77:1c:87:13:84:
4a:9c:26:04:c3:e9:60:25:92:d2:1a:cd:0f:77:f0:
a3:57:db:ef:b5:3f:ab:ce:6f:e1:14:a6:79:ae:4e:
a6:01:cd:c4:64:a4:83:26:69:6d:47:e8:43:24:dc:
ab:34:30:f6:82:53:46:8d:8f:a8:a0:a5:e0:6e:b4:
46:59:cc:5d:01:80:fd:8a:a3:9d:92:fe:2d:34:8b:
97:1f:2e:f0:c0:ba:f8:ab:41:04:e7:12:b6:c0:9d:
21:48:d3:34:10:f5:f0:0e:37:f5:c4:b6:2c:0a:52:
26:cf:2c:7e:71:51:86:3f:68:db:f6:89:08:7e:26:
42:e3:57:69:9b:36:4c:59:67:42:ea:c4:53:7b:00:
39:b4:81:6a:67:95:03:55:7e:ab:b6:ca:8a:12:5f:
b2:e5:57:b4:bb:fa:58:0a:0f:4e:a3:1b:17:16:1b:
42:7d:fc:33:c0:cb:18:c1:40:88:a6:c1:ef:79:06:
28:d9:a6:4c:d2:07:49:fe:69:cb:73:5c:77:82:30:
84:81:e4:50:01:0d:27:45:0a:ce:e0:b4:13:fb:e0:
c3:59:fc:8c:3a:34:4f:8c:55:9a:2b:0b:90:25:ed:
de:23:04:46:14:b8:21:84:5b:b5:a2:c1:ea:06:70:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F7:57:73:D7:40:BA:83:E0:B7:3E:41:E8:75:6A:F1:3A:EE:29:0D
X509v3 Authority Key Identifier:
keyid:7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/CvdXc9dAuoPgtz5B6HVq8TruKQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:00:f0:d6:78:43:b5:55:65:72:e6:6a:f8:01:cb:46:47:e0:
8e:68:2f:91:7a:ea:29:6f:45:27:e5:50:51:df:5c:bb:9a:27:
b1:d2:75:15:be:e8:d2:95:b6:f3:0f:b8:7d:6f:e1:8e:10:9e:
c4:07:68:0e:04:01:4a:f7:ba:e8:c0:cb:1f:86:66:ba:63:41:
f2:55:70:fe:2b:ec:af:b5:73:bd:dc:71:55:4c:a8:53:ca:c2:
40:a6:cf:5d:26:75:f7:19:82:14:d3:4f:0a:c7:3c:94:dc:36:
f5:6f:bf:58:98:e4:b4:ce:1e:06:c1:5c:46:a0:1a:30:ce:49:
d5:d0:41:d5:40:31:6e:54:2a:fa:40:f6:1f:e4:14:75:a3:b4:
28:35:58:2e:9a:11:86:9c:4d:e6:04:f5:61:cc:4a:66:85:9b:
52:43:36:c1:a7:01:a4:47:74:a1:52:0c:d9:9d:7d:0c:f6:9a:
f9:6c:53:ab:13:25:1f:29:0c:82:6a:cd:49:f6:29:f8:f3:4a:
a5:1d:14:0d:6f:f6:eb:89:eb:f2:a6:c4:7f:62:5f:b3:96:60:
91:03:89:14:00:68:1d:85:36:a8:8d:bc:c9:2b:91:05:6a:dd:
2d:08:a9:9d:49:61:94:19:86:a8:7e:78:8b:97:97:d6:b6:44:
3a:f7:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:05 2025 by rpki-client