Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/exSqcqToVirE26kLGdF-HPjamps.roa
File: exSqcqToVirE26kLGdF-HPjamps.roa (raw, json)
Hash identifier: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=
Subject key identifier: 7B:14:AA:72:A4:E8:56:2A:C4:DB:A9:0B:19:D1:7E:1C:F8:DA:9A:9B
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019424B3A82CC4DF5E67AE660D3B7AF647E4
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/exSqcqToVirE26kLGdF-HPjamps.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48760
IP address blocks: 185.84.136.0/22 maxlen: 24
195.62.12.0/23 maxlen: 24
2a07:1cc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a8:2c:c4:df:5e:67:ae:66:0d:3b:7a:f6:47:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b14aa72a4e8562ac4dba90b19d17e1cf8da9a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:63:55:bd:27:0c:9e:13:65:26:17:24:f9:
37:12:34:e8:2f:38:db:66:9a:ab:47:4e:ab:15:cd:
1f:0e:39:b5:24:35:72:68:56:ef:b7:2d:b6:d8:09:
74:0e:e9:13:ad:7d:b3:e1:30:dd:a6:00:4e:fe:05:
97:1e:1b:d1:72:d7:b9:51:ed:8f:44:5e:5b:d5:41:
21:c5:b2:8a:9a:bf:d6:ac:4d:e0:c4:f7:7a:ba:14:
04:b1:ef:2f:c3:1f:a2:e1:6f:f1:a9:cf:c0:da:35:
8e:a3:71:b3:d8:c2:8e:82:e2:7e:a5:5b:5f:f1:f1:
84:a3:99:98:44:ba:6d:ad:33:1f:6b:77:e9:34:73:
4e:3a:22:93:81:ef:2e:93:bb:70:14:f4:71:19:8f:
dd:7f:e2:89:d7:74:b4:ce:ec:81:9c:63:c5:0a:60:
9e:ba:54:d5:f0:6d:4b:b3:58:dd:fe:65:f1:0b:52:
af:e1:20:14:d8:b0:ed:09:47:56:e0:00:7b:49:ad:
51:20:a7:07:f1:01:17:70:f3:47:49:32:ab:5c:1c:
04:a4:1c:e1:25:a2:64:34:0f:a4:a8:b0:54:b5:8b:
f1:f6:18:7f:ec:74:0a:ce:c4:0f:dc:5a:bc:41:02:
b6:cc:95:97:ce:30:3c:d9:d9:17:59:d3:ff:a6:98:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:14:AA:72:A4:E8:56:2A:C4:DB:A9:0B:19:D1:7E:1C:F8:DA:9A:9B
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/exSqcqToVirE26kLGdF-HPjamps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.136.0/22
195.62.12.0/23
IPv6:
2a07:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
42:04:a6:2c:35:01:d8:c4:23:6c:ad:0f:e3:dc:49:01:8e:91:
3a:b5:40:2c:3e:a1:e7:4a:7e:df:6a:13:8e:1d:c5:f8:2c:35:
e9:67:fd:ea:8b:70:c7:f6:62:4e:92:b7:dc:29:99:fe:c7:43:
49:59:ec:0e:18:4b:91:80:80:63:d4:48:a6:f0:67:8b:76:ab:
13:65:b1:a1:36:cd:29:b0:5a:45:57:98:24:3a:a4:10:32:07:
80:fe:84:90:4c:bc:b3:f6:30:26:81:0e:aa:eb:f9:44:d0:4d:
0a:e2:07:a5:bc:23:71:d6:d5:49:3c:b2:0d:65:e8:cd:de:00:
30:14:9b:0d:e0:fe:35:fe:ef:36:48:c5:20:8b:53:f8:ce:61:
b3:4f:cd:73:f4:03:5c:c2:2b:89:77:4b:18:73:31:61:4a:c4:
79:93:c3:13:2d:25:5a:68:67:73:7f:63:80:f6:be:41:0f:8c:
da:7a:fa:e9:ab:00:77:23:1b:7e:02:c5:2b:ee:7f:3c:19:4a:
bd:82:7f:fc:49:f1:66:f0:1b:76:5e:2f:39:88:13:5a:cd:2f:
d9:d0:3f:c6:44:1e:ce:58:d0:a9:cf:c2:16:c8:12:50:df:83:
0b:98:1a:c2:a5:4c:c7:17:ce:4c:35:f1:4e:6e:ee:88:81:45:
07:02:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:40 2025 by rpki-client