Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/a6yjRQPaEVSmn2Af_50hlyGwo-8.roa
File: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (raw, json)
Hash identifier: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=
Subject key identifier: 6B:AC:A3:45:03:DA:11:54:A6:9F:60:1F:FF:9D:21:97:21:B0:A3:EF
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 0194266BD24D5DFCD9A5854E1E2CED1242C2
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/a6yjRQPaEVSmn2Af_50hlyGwo-8.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 185.101.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d2:4d:5d:fc:d9:a5:85:4e:1e:2c:ed:12:42:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6baca34503da1154a69f601fff9d219721b0a3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:ef:c7:a8:3c:5e:53:d6:8f:7a:03:9f:f7:
f4:ea:92:e6:fc:8c:a7:37:fb:2b:5d:5d:8f:ad:b6:
2b:ff:fd:7d:52:56:5c:32:8a:e5:3b:14:b2:97:0a:
63:20:b5:c0:ea:b6:4b:50:77:42:67:0e:f7:85:eb:
b4:d4:3b:43:0b:2a:68:b4:bb:ac:4f:c7:bd:01:46:
aa:ea:d2:80:84:83:78:65:34:4e:bc:25:94:cd:09:
c1:86:c5:64:ab:0c:f7:5c:1c:0c:44:0f:a0:0f:c2:
4e:db:cd:1e:1a:8d:1d:f2:d5:d5:39:46:ef:3d:22:
9a:e8:84:65:fb:fe:95:61:fc:77:5b:26:98:f4:d1:
74:ad:3a:e1:09:50:a5:d6:6f:c4:e5:e7:93:23:c4:
4b:db:97:66:6e:a0:42:8e:3a:3a:3e:6b:b8:92:9f:
de:f3:59:da:a5:3c:3d:5e:6c:bc:d6:0d:be:fa:0d:
9d:7e:36:83:75:d7:6b:ea:74:2b:38:4d:f9:a1:df:
de:4f:1e:f9:f1:fe:45:79:f3:71:e0:bb:3d:77:ef:
24:5e:a7:4a:7d:57:4b:a1:40:87:a1:5d:b9:00:80:
44:02:ef:19:b5:ab:4f:b6:31:06:fe:0a:66:c6:ad:
56:d0:36:90:95:83:dc:c8:26:30:cc:01:4f:a3:0b:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AC:A3:45:03:DA:11:54:A6:9F:60:1F:FF:9D:21:97:21:B0:A3:EF
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/a6yjRQPaEVSmn2Af_50hlyGwo-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fe:d4:7d:32:56:de:04:2d:98:c2:4b:90:89:0e:40:e1:02:
8a:26:f1:e2:e4:55:5a:cb:d0:bd:c5:b8:16:7e:26:d7:8f:b0:
c3:41:9d:ac:76:62:bf:85:10:dd:b0:b5:aa:86:94:76:38:c3:
c1:d7:2b:fc:99:40:89:98:0b:4e:9a:0b:5f:49:30:ae:d8:67:
5f:76:7f:c1:3c:7f:cf:a2:fd:f3:8a:dd:21:1c:f0:03:60:5f:
93:43:1d:71:43:bf:96:36:7b:9e:b5:2d:04:01:9d:15:fc:ab:
93:72:52:50:89:53:70:83:cd:35:8a:66:85:46:17:c9:7c:49:
4e:ed:bb:e3:d5:fa:e4:4b:eb:23:1b:62:29:a0:bf:fa:84:89:
29:19:d9:1a:5a:66:9e:b2:a5:fd:d9:e1:72:1f:3e:a7:cb:d3:
72:28:9e:d7:7e:5b:2d:a7:0c:b2:37:98:32:ff:a6:4b:f8:c8:
5d:a8:14:bb:d2:09:61:5c:39:ff:54:d0:a4:20:2b:6c:1b:bd:
b4:06:41:87:c0:4d:92:0e:b2:bc:c2:e5:41:b4:9c:82:d9:13:
56:5b:54:02:f6:61:a6:e2:bc:5a:03:80:fb:3a:6a:0c:6f:86:
29:6c:a7:a5:39:7f:6b:bb:a8:89:e8:b2:5c:aa:14:ea:11:93:
7b:b5:4f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:01:15 2025 by rpki-client