Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa
File: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (raw, json)
Hash identifier: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=
Subject key identifier: 90:BF:F6:82:FB:54:00:55:17:DF:EC:DB:30:3E:40:7D:D6:E4:90:57
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 019420683DF6A622CCB17D96820573A2CCA2
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60540
IP address blocks: 185.155.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3d:f6:a6:22:cc:b1:7d:96:82:05:73:a2:cc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90bff682fb54005517dfecdb303e407dd6e49057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:7f:07:43:96:c2:09:99:04:03:0f:13:25:
d2:cb:34:3f:fb:3d:f4:f1:a1:d9:70:18:72:84:b0:
c1:d3:47:5d:21:14:a2:4e:bb:bc:e0:27:33:e7:29:
e2:73:d8:1f:f7:45:02:cc:a1:c6:78:1d:82:2c:f2:
23:76:41:74:b1:bd:0d:20:72:1f:03:ee:55:32:74:
13:9b:74:f8:7e:b5:09:51:66:77:e1:0b:15:94:16:
44:ed:c7:87:0c:51:e1:b0:a6:e0:c3:b1:06:32:ff:
55:07:f9:e4:be:01:25:48:15:30:e6:62:6a:c8:4a:
5f:6e:2b:a6:a4:30:70:b1:58:a1:c8:1b:5d:67:3c:
d2:3d:9b:c2:ab:96:87:2a:3d:fb:77:9d:22:7f:c2:
43:46:0b:2e:56:93:39:1b:3a:3f:06:ea:e0:45:d8:
78:3c:4a:4c:7d:a5:97:dd:68:d4:4c:74:e9:9c:c6:
6f:1a:cb:5e:ce:96:0d:95:34:42:eb:c2:0c:a7:21:
67:e2:7f:b1:fe:34:0c:f7:ed:8f:f5:bd:71:d6:77:
3f:03:8c:2c:c4:03:df:f7:b0:40:2c:82:a9:f2:71:
e0:ab:9e:82:61:05:cf:a2:19:3c:19:76:18:59:52:
e6:66:0d:34:1a:af:54:80:98:01:fd:1c:0d:f1:dd:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:F6:82:FB:54:00:55:17:DF:EC:DB:30:3E:40:7D:D6:E4:90:57
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.157.0/24
Signature Algorithm: sha256WithRSAEncryption
11:18:11:a9:10:65:2c:3b:26:a5:fe:49:68:7d:99:71:03:5d:
50:74:78:72:1c:58:97:37:12:ae:3a:d1:6f:10:12:e7:8c:d5:
df:79:50:fa:b9:6c:84:3d:88:52:19:4b:10:c8:8a:7b:ef:5f:
56:ab:89:38:50:b0:74:67:de:f4:c8:de:3e:9f:28:8a:d5:ab:
19:4a:10:5d:6f:e3:fe:f6:ae:80:2b:79:95:d1:f4:80:5a:04:
42:d2:91:ed:5d:8d:a4:75:1b:73:e9:2f:d5:86:14:3d:97:4a:
0d:cb:1e:ab:17:4e:29:ae:42:8b:af:12:8c:9c:3a:f0:9b:95:
09:61:8f:60:38:24:2c:54:d7:e9:1e:a2:4b:61:59:58:f5:7e:
ed:0b:ac:79:f6:9d:34:66:92:9f:2c:d8:4d:b2:09:2a:21:98:
e5:39:f6:77:60:53:21:64:40:84:c3:38:5e:2e:81:6b:b2:9d:
33:8b:64:f3:b9:ba:8b:4b:10:46:20:11:84:d7:66:a0:a3:89:
aa:b0:6d:07:36:ee:ad:a2:ac:ac:a5:e4:cb:2e:a2:48:0f:4c:
43:0a:af:b6:ee:de:27:1d:af:62:92:54:83:89:04:c5:a3:07:
ec:71:08:87:01:30:6c:98:6d:e9:b9:29:e9:6c:79:03:c6:1c:
6b:99:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:55 2025 by rpki-client