Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/eNlel1MAB3K5WxBRNCKfgs3BdiI.roa
File: eNlel1MAB3K5WxBRNCKfgs3BdiI.roa (raw, json)
Hash identifier: J8qyn9oJWXH1QJm5AWUSC8ek/XZr0zQF4wP05jZOXaY=
Subject key identifier: 78:D9:5E:97:53:00:07:72:B9:5B:10:51:34:22:9F:82:CD:C1:76:22
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01942C0E774EAEDAA81FA076CDB8D61EED5C
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/eNlel1MAB3K5WxBRNCKfgs3BdiI.roa
Signing time: Fri 03 Jan 2025 12:05:33 +0000
ROA not before: Fri 03 Jan 2025 12:05:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21215
IP address blocks: 185.81.60.0/22 maxlen: 22
2a03:dd80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:0e:77:4e:ae:da:a8:1f:a0:76:cd:b8:d6:1e:ed:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jan 3 12:05:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d95e9753000772b95b105134229f82cdc17622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ae:bb:57:aa:c3:24:2d:b3:98:e5:01:b9:e4:
8c:67:49:e7:29:13:af:56:69:2d:b2:0e:b6:59:b0:
bc:1f:c7:43:7f:7b:81:12:c0:7f:08:17:24:d5:ca:
78:94:48:5e:03:95:80:ba:09:e6:b3:c5:a9:0f:40:
f4:88:05:48:a7:cb:1a:76:86:cd:1c:54:83:48:6f:
40:40:0f:cc:e1:44:50:b6:08:15:ef:01:68:9c:cd:
92:56:04:b8:86:a3:87:cf:1c:5b:8e:96:47:3f:d9:
41:31:a9:d5:8e:03:d1:31:e9:10:f9:f9:e1:9b:5a:
72:af:01:42:b1:f2:15:8b:d9:14:9d:1b:12:3f:69:
cb:44:b8:65:53:d5:2c:8b:5c:e6:03:94:60:f7:9b:
72:b6:12:2b:db:61:f6:2f:c5:0d:f5:1f:36:cf:8f:
f9:a9:52:ab:7e:3b:dc:17:57:c9:61:a2:c9:cb:5c:
25:16:a5:a2:48:8b:fe:51:f1:32:4a:ae:6e:a4:72:
be:27:05:ac:51:6c:01:99:ba:b8:15:13:da:29:e2:
67:6c:42:b2:f5:1b:0d:e4:7f:46:d2:d8:2f:d6:83:
0c:3b:a6:c6:70:7c:8f:0c:57:7f:0b:15:54:79:e2:
71:5a:b2:b7:29:5d:4f:60:fe:25:e8:51:74:97:00:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D9:5E:97:53:00:07:72:B9:5B:10:51:34:22:9F:82:CD:C1:76:22
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/eNlel1MAB3K5WxBRNCKfgs3BdiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.60.0/22
IPv6:
2a03:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
36:97:29:2c:c2:3f:88:d8:04:7d:21:96:1b:68:99:49:3f:9c:
2f:00:12:95:c7:60:4d:68:a4:1e:04:0c:08:62:d7:b7:74:27:
f3:f2:5b:44:3b:c6:8c:bf:6a:9f:b9:37:bd:c8:3e:7f:11:e5:
7a:12:e6:ff:6b:ea:49:24:5a:6c:c0:4c:43:f3:9e:e4:89:93:
78:6f:1e:0f:ae:92:ed:17:18:ff:bd:a2:49:4d:c0:08:e2:57:
8b:f3:20:a0:39:d1:ef:95:92:08:93:16:4c:d5:04:be:20:b0:
b2:8e:75:25:7a:36:4c:73:bf:ce:c6:0d:e3:d8:f0:34:a1:0f:
5a:51:c1:82:6d:bf:72:45:c8:09:58:98:5e:1e:a4:fc:48:f0:
e6:eb:e5:58:8d:94:fe:66:34:96:8e:23:2c:67:04:85:85:dc:
ba:04:36:d5:55:5d:69:28:76:85:a7:96:79:48:ef:34:ce:93:
96:fd:f8:cf:65:4c:f0:55:26:8b:11:cc:91:17:99:83:79:32:
7b:09:06:01:d4:0d:b4:ce:8d:7d:5a:74:a7:7a:3f:84:0f:fb:
60:e5:56:91:7c:4f:72:45:15:5b:b7:6e:d7:fc:0a:27:f9:34:
06:d1:82:23:d1:a1:0c:ac:e4:70:2e:b3:1f:17:a6:02:90:97:
91:89:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:16:57 2025 by rpki-client