Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/AIDt6CWoVr9jIIt_ujc62HoYRJ4.roa
File: AIDt6CWoVr9jIIt_ujc62HoYRJ4.roa (raw, json)
Hash identifier: A+hTsbyaE6tTKJYIPPdu0Kx30wfj2E6e3KM/UOa3qeI=
Subject key identifier: 00:80:ED:E8:25:A8:56:BF:63:20:8B:7F:BA:37:3A:D8:7A:18:44:9E
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 0194BD2501D3FD526CCABF2201FE3539CFBE
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/AIDt6CWoVr9jIIt_ujc62HoYRJ4.roa
Signing time: Fri 31 Jan 2025 16:15:06 +0000
ROA not before: Fri 31 Jan 2025 16:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208802
IP address blocks: 185.85.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:25:01:d3:fd:52:6c:ca:bf:22:01:fe:35:39:cf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: Jan 31 16:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0080ede825a856bf63208b7fba373ad87a18449e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:fc:00:13:e6:4a:38:95:6d:a7:18:67:a6:
4d:81:17:2e:b7:53:61:14:d5:c7:70:38:01:c0:d6:
d0:5e:e0:c3:11:30:f7:13:b0:d4:41:51:23:2d:cf:
94:bf:c2:50:95:ff:17:7a:7e:8a:74:51:66:93:77:
02:3d:a5:68:b6:26:50:37:27:8a:1f:b3:70:2c:e6:
b6:3b:19:35:92:65:43:33:14:cc:f4:36:ae:67:47:
68:4c:85:66:f7:4f:6f:ec:2c:ac:b7:a8:54:d6:fb:
6a:08:0f:e9:43:fc:25:a0:05:e5:1f:e7:89:85:a4:
21:d8:12:64:cd:87:b3:a7:4e:2f:e8:8e:29:be:59:
3d:72:29:78:92:e1:a3:af:a4:51:be:86:af:e3:fc:
0d:8e:fa:50:e7:25:10:ff:d6:2a:34:93:0d:d9:af:
9f:98:cf:81:0c:4e:00:48:b1:bb:ad:0f:b6:4b:ce:
2d:87:75:cc:63:d9:1d:63:a5:c4:9f:2e:a9:57:d5:
f7:21:ff:4d:1b:36:3f:50:e0:b3:d6:9b:45:7b:b1:
85:58:e9:b2:57:2f:4e:aa:bd:74:9e:de:21:6d:1e:
80:da:53:b4:ca:6c:a4:24:6e:4d:2a:a5:b1:ee:75:
be:93:30:5f:97:1b:13:ff:e4:4c:31:63:96:71:38:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:80:ED:E8:25:A8:56:BF:63:20:8B:7F:BA:37:3A:D8:7A:18:44:9E
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/AIDt6CWoVr9jIIt_ujc62HoYRJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.184.0/22
Signature Algorithm: sha256WithRSAEncryption
69:d1:aa:56:31:7e:94:87:d8:c8:b3:bb:18:bc:ce:f2:fb:76:
6d:97:bb:92:e5:2c:40:3b:cf:3e:fa:14:bd:79:1c:e0:ac:ba:
a6:71:b9:72:19:c3:5b:89:4a:ac:7d:a7:14:a5:89:dd:69:01:
08:f4:95:e4:76:5f:5e:02:50:f0:8b:53:44:3b:53:5b:94:be:
04:1c:0b:48:d8:33:d9:24:9f:11:75:6a:79:fc:78:33:e9:27:
3a:1e:fb:cc:2d:6d:5b:36:6d:80:aa:a7:5d:4a:4a:1d:11:20:
f4:a7:ad:fc:6e:92:e0:2c:15:65:46:fa:80:5b:f9:09:21:05:
cb:e3:9f:03:3e:64:a9:b7:82:15:57:d2:49:13:80:ae:e8:1d:
da:ba:24:45:5d:0b:f9:ed:11:82:5b:7f:68:e8:d0:79:21:db:
fb:49:5c:f1:34:12:bc:be:3a:5e:3f:51:54:3b:b8:1a:c8:de:
48:b8:11:74:2e:b6:c4:ec:8a:f7:79:4f:a3:62:be:a3:4f:93:
ad:f3:ca:17:27:6f:b2:0d:7d:db:4d:f9:87:ed:3e:1a:63:43:
7e:57:9a:2f:85:92:a5:31:a3:9a:d1:f0:3e:8b:c0:5a:8b:8c:
ff:74:93:ac:ba:a5:00:42:ad:1a:a7:02:58:28:c1:98:ac:77:
96:6b:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:51 2025 by rpki-client