Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/16CgswubAdPMVdO4tgEfY5qKNrs.roa
File: 16CgswubAdPMVdO4tgEfY5qKNrs.roa (raw, json)
Hash identifier: n5RFNLHwGdJjAY6bUd3g0velwE7SisBVqsbQRj3nQN0=
Subject key identifier: D7:A0:A0:B3:0B:9B:01:D3:CC:55:D3:B8:B6:01:1F:63:9A:8A:36:BB
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 0194266B702BC779F3E9EE039F42929C7A99
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/16CgswubAdPMVdO4tgEfY5qKNrs.roa
Signing time: Thu 02 Jan 2025 09:49:22 +0000
ROA not before: Thu 02 Jan 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205185
IP address blocks: 185.114.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:70:2b:c7:79:f3:e9:ee:03:9f:42:92:9c:7a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7a0a0b30b9b01d3cc55d3b8b6011f639a8a36bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:f5:fa:73:4c:76:c1:57:41:3e:11:25:af:
36:2f:06:e9:0c:cc:26:66:8b:38:28:a4:ed:88:3d:
c8:29:4b:46:1e:c2:8c:32:24:93:23:0c:0c:6d:40:
e4:1f:ff:6f:08:0a:29:ee:3e:a5:5d:69:c0:81:44:
74:40:99:e8:30:3d:b6:d8:d4:19:e2:2d:00:82:db:
9a:f2:17:eb:e4:cf:98:aa:0c:ed:ba:20:b1:3d:51:
96:60:76:6b:f6:e7:9f:a3:4e:7d:4d:2a:d7:e6:62:
03:2c:c3:68:2a:0f:a2:f3:ad:fc:db:0e:e6:41:24:
1e:65:21:e6:d0:56:aa:12:62:55:99:23:df:9f:e5:
89:74:83:e2:1b:e5:a7:b6:eb:21:3a:cd:c8:5f:22:
50:02:a7:78:57:d1:36:92:e0:81:b1:3d:1b:eb:0b:
aa:0e:c0:9c:79:30:64:84:02:6c:08:c7:75:f6:13:
f9:90:91:79:ec:36:3f:6e:d6:00:44:67:33:4c:ca:
98:d5:78:64:f0:8b:eb:5b:52:e5:6c:e0:04:f6:d3:
29:09:ad:0a:8a:c7:fe:fe:69:c9:2f:4c:35:a4:f6:
39:30:a5:14:22:a3:85:3a:df:6c:79:15:24:15:be:
e8:2e:3b:11:03:22:4b:70:6b:4c:10:b6:78:36:0a:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A0:A0:B3:0B:9B:01:D3:CC:55:D3:B8:B6:01:1F:63:9A:8A:36:BB
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/16CgswubAdPMVdO4tgEfY5qKNrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7c:1e:59:d2:e1:fd:0f:70:96:90:d3:c2:5a:4f:4d:e5:82:
64:ea:39:d4:82:51:da:ac:b5:b4:a2:3a:f8:28:ca:91:85:13:
21:43:46:32:e3:b9:3e:ff:ea:b5:04:31:7a:d2:f2:14:87:f1:
fc:a3:10:2e:5d:3f:35:ee:d0:56:7d:23:5a:b6:09:8a:50:28:
4c:67:9d:b7:41:e2:67:d7:30:98:11:6d:49:fc:4a:3a:d1:bf:
99:e0:37:a6:fe:bb:3b:ba:78:35:23:36:00:a2:d4:35:3d:9a:
af:d6:12:9d:e5:8f:d1:a7:ea:ad:69:ab:5d:30:95:50:22:2b:
d6:bd:8e:cc:72:fa:98:96:41:7d:83:4d:61:55:3f:0e:1e:16:
60:6d:78:a5:94:ca:b9:e4:53:20:0d:aa:cb:89:0f:9b:11:dc:
31:4a:65:69:82:1b:58:a7:9d:eb:9f:2c:c0:8c:3e:bc:41:26:
c5:bd:6b:89:3f:a5:ad:0a:8e:a7:76:09:ea:7f:84:11:90:30:
2d:43:c9:dc:74:bf:40:a0:d9:43:73:29:10:71:05:73:7e:5e:
f0:d5:42:1e:7c:f4:ae:28:12:c2:93:c3:2f:c4:0b:ad:a7:3b:
ff:80:e9:08:ac:69:39:f9:04:e0:91:54:05:0e:bd:ad:c3:83:
29:3d:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:44 2025 by rpki-client