Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/dV2OtRjSyQPY4YCyr9lFdLU27E8.roa
File: dV2OtRjSyQPY4YCyr9lFdLU27E8.roa (raw, json)
Hash identifier: eomTnqbffaVsgF38WkF2EttPiM+DiZupJiWYxVCsPt8=
Subject key identifier: 75:5D:8E:B5:18:D2:C9:03:D8:E1:80:B2:AF:D9:45:74:B5:36:EC:4F
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 0194236A16A6C8CB0EF5D335049D4C136E08
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/dV2OtRjSyQPY4YCyr9lFdLU27E8.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47264
IP address blocks: 185.75.240.0/24 maxlen: 24
2a05:5500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:16:a6:c8:cb:0e:f5:d3:35:04:9d:4c:13:6e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=755d8eb518d2c903d8e180b2afd94574b536ec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:00:59:50:ef:39:31:fc:84:a8:b1:4b:05:
d8:3a:4f:bf:c3:dc:3c:dc:01:41:d6:52:dd:df:47:
e0:91:1b:3a:27:1d:c6:bc:07:98:e8:92:98:85:7b:
a3:1f:f2:67:a3:80:35:a8:2f:26:2a:46:48:ff:50:
be:59:60:2d:3c:f3:e8:b3:90:fa:b2:0b:a6:5d:7c:
dc:86:5d:5c:75:ce:94:2f:83:c3:5f:9c:09:97:4b:
81:04:97:c4:b5:78:89:d6:fc:5c:23:95:e1:fb:81:
de:3e:47:27:43:35:8d:3b:58:aa:2c:ca:86:ad:af:
a6:21:f3:35:f7:b2:46:4b:bf:84:41:cb:cd:b8:4f:
9d:96:c9:f1:65:07:33:1f:a3:c2:7b:4d:fc:cb:38:
86:b0:20:f0:f2:3a:5e:c1:df:4a:63:13:41:39:2d:
30:40:5c:16:40:67:28:84:8d:ae:5d:de:15:ab:ae:
d1:5d:31:43:eb:2e:26:b8:59:a1:28:62:1c:b6:2a:
3e:c0:38:15:b4:37:e1:a5:b9:25:81:67:4c:f0:fe:
04:e9:5a:6b:85:69:f3:9d:af:40:0e:ff:bf:0e:a4:
5e:1b:e8:d7:0c:35:fc:5c:5e:ed:60:2c:88:05:6d:
63:91:43:7d:ac:ec:99:50:c8:95:ee:02:85:ea:fb:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5D:8E:B5:18:D2:C9:03:D8:E1:80:B2:AF:D9:45:74:B5:36:EC:4F
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/dV2OtRjSyQPY4YCyr9lFdLU27E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.240.0/24
IPv6:
2a05:5500::/32
Signature Algorithm: sha256WithRSAEncryption
0b:3b:64:86:48:a3:8b:70:6f:e4:ab:55:b8:dc:89:b8:ef:51:
00:1f:ba:00:ac:75:42:63:c0:b7:53:c9:ad:da:5f:88:2e:ef:
72:35:f1:54:2c:a0:aa:85:d5:e2:58:4b:9b:eb:7d:bf:fd:44:
e2:fb:bb:49:e3:3c:67:81:8b:fd:36:e1:86:4b:6a:8a:9e:7f:
07:f7:68:70:d5:c6:f3:37:14:28:d2:56:cf:e3:47:d5:1c:3a:
00:f9:74:f2:08:8a:b5:4b:2d:65:78:68:82:35:ac:20:ae:c8:
d2:c8:0f:29:b0:25:5d:d2:54:c7:09:7f:7c:55:cc:8a:99:ee:
cc:42:21:20:4f:d2:e1:27:46:4b:c7:a5:69:ba:a5:e9:fe:4c:
5c:26:e3:97:14:10:5b:8d:13:79:a6:d2:78:e4:e2:17:23:86:
73:c7:7d:19:a1:ab:e9:de:e8:e2:05:0a:3c:64:7f:82:57:86:
1a:96:f3:80:22:1c:1f:24:cb:51:f6:aa:40:96:9f:c7:c5:7b:
5a:8f:c5:69:a2:d0:b2:c9:b1:9c:c5:b3:f1:3f:4e:a7:0a:53:
dd:46:36:f8:21:8e:39:14:26:58:89:04:05:f0:28:c7:a3:4e:
46:7b:21:d1:b1:e9:01:dd:99:fd:f4:ba:6f:1e:02:0f:3e:60:
ab:18:6f:d8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjahamyMsO9dM1BJ1ME24IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjQ2OTFjMzE4OTJjYzk5MWFkNGU5YTk2NzExNDc3NTll
NDE3YWIwHhcNMjUwMTAxMTk0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTVkOGViNTE4ZDJjOTAzZDhlMTgwYjJhZmQ5NDU3NGI1MzZlYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK4AWVDvOTH8hKixSwXYOk+/w9w8
3AFB1lLd30fgkRs6Jx3GvAeY6JKYhXujH/Jno4A1qC8mKkZI/1C+WWAtPPPos5D6
sgumXXzchl1cdc6UL4PDX5wJl0uBBJfEtXiJ1vxcI5Xh+4HePkcnQzWNO1iqLMqG
ra+mIfM197JGS7+EQcvNuE+dlsnxZQczH6PCe038yziGsCDw8jpewd9KYxNBOS0w
QFwWQGcohI2uXd4Vq67RXTFD6y4muFmhKGIctio+wDgVtDfhpbklgWdM8P4E6Vpr
hWnzna9ADv+/DqReG+jXDDX8XF7tYCyIBW1jkUN9rOyZUMiV7gKF6vvdCQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHVdjrUY0skD2OGAsq/ZRXS1NuxPMB8GA1UdIwQY
MBaAFO1kaRwxiSzJka1OmpZxFHdZ5BerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjIt
N2M3ZGIyMTIzMGEzLzEvZFYyT3RSalN5UVBZNFlDeXI5bEZkTFUyN0U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjItN2M3ZGIyMTIzMGEz
LzEvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUvwMA0E
AgACMAcDBQAqBVUAMA0GCSqGSIb3DQEBCwUAA4IBAQALO2SGSKOLcG/kq1W43Im4
71EAH7oArHVCY8C3U8mt2l+ILu9yNfFULKCqhdXiWEub632//UTi+7tJ4zxngYv9
NuGGS2qKnn8H92hw1cbzNxQo0lbP40fVHDoA+XTyCIq1Sy1leGiCNawgrsjSyA8p
sCVd0lTHCX98VcyKme7MQiEgT9LhJ0ZLx6VpuqXp/kxcJuOXFBBbjRN5ptJ45OIX
I4Zzx30Zoavp3ujiBQo8ZH+CV4YalvOAIhwfJMtR9qpAlp/HxXtaj8VpotCyybGc
xbPxP06nClPdRjb4IY45FCZYiQQF8CjHo05GeyHRsekB3Zn99LpvHgIPPmCrGG/Y
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:13 2025 by rpki-client