Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/rIq_k7twwBEbcOVYDic1qJC6tII.roa
File: rIq_k7twwBEbcOVYDic1qJC6tII.roa (raw, json)
Hash identifier: Tg0LY1U/RM7mfyNDRaQJFL93vVjMEcfzKcJNDGxepYs=
Subject key identifier: AC:8A:BF:93:BB:70:C0:11:1B:70:E5:58:0E:27:35:A8:90:BA:B4:82
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 0194266B6EA0994CAD8AD3342B9F60A7442D
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/rIq_k7twwBEbcOVYDic1qJC6tII.roa
Signing time: Thu 02 Jan 2025 09:49:22 +0000
ROA not before: Thu 02 Jan 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57866
IP address blocks: 185.114.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6e:a0:99:4c:ad:8a:d3:34:2b:9f:60:a7:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac8abf93bb70c0111b70e5580e2735a890bab482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:97:7c:a4:03:3a:c6:cb:8e:7b:a3:32:d7:
26:12:40:d2:5d:bf:6d:c8:79:26:4d:d4:6d:ad:17:
64:d0:06:f9:2f:55:00:6c:4e:c0:a7:05:f1:ff:ae:
85:dd:e4:7f:45:26:a4:77:4d:34:82:22:0d:eb:11:
dc:87:e2:cf:9c:35:dc:9e:6c:14:5e:0f:74:de:37:
65:d2:27:dc:65:63:05:e8:c9:09:63:5a:3e:63:36:
85:df:0a:d0:be:7e:b0:13:44:10:1c:f6:44:81:9e:
a6:0d:9d:95:4d:a3:18:99:24:ec:50:b4:c2:5a:2e:
d9:7b:cd:7e:eb:a7:23:fb:68:60:d9:96:90:d4:9c:
01:a9:1b:12:2d:d4:b8:ed:86:84:d2:27:3c:6f:f2:
73:4e:94:c9:c1:73:d2:e3:72:5d:b7:8a:88:4d:3b:
d0:96:f9:4b:6b:eb:b0:4d:e1:9c:f9:21:53:b8:7a:
01:ba:a9:b2:b0:57:97:13:6f:c6:58:a3:a7:e1:ce:
6b:5b:c8:8f:1e:bf:d9:01:78:bf:6c:8f:df:35:ec:
56:e7:2f:eb:56:17:40:f5:28:15:3a:1f:1a:b6:44:
2c:40:8b:c7:66:c5:a9:ba:4e:70:4b:31:51:36:5e:
0b:2e:1e:9d:d6:29:e5:0b:a8:a1:1a:b7:d0:9a:42:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:BF:93:BB:70:C0:11:1B:70:E5:58:0E:27:35:A8:90:BA:B4:82
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/rIq_k7twwBEbcOVYDic1qJC6tII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2b:20:96:c9:f9:8b:38:84:d2:74:a9:f5:02:e6:0a:bf:48:
b5:a7:bc:20:69:bc:58:91:47:da:e1:78:2b:dc:de:18:06:68:
2f:32:53:e3:aa:70:e6:2c:c7:e7:82:99:0b:6c:6a:6f:93:81:
3c:73:94:44:15:4c:e7:f6:4d:6d:11:b8:f4:60:4b:6b:f0:41:
f0:c4:ba:75:c0:1c:21:e6:d4:d4:2c:74:15:18:9d:e3:2c:4e:
3d:db:52:bd:61:49:35:c7:8e:76:f9:3a:5e:e9:9c:65:3e:7c:
67:62:b6:ea:c9:07:a2:e9:46:26:48:2c:d0:dd:2c:5e:ae:a6:
3b:92:f3:92:a0:b6:d5:71:7f:bc:d1:b6:cc:11:5e:82:cd:be:
c5:38:e0:1a:bf:61:75:3d:3f:33:d6:b5:5e:53:d3:07:db:08:
5c:ed:68:cf:46:3b:cb:03:c9:30:78:19:cc:e4:ed:47:89:ae:
8f:d8:f9:c8:95:a5:20:e6:35:9b:30:d0:4e:59:ba:ea:29:09:
cb:e5:95:79:4e:3c:6d:26:c2:58:23:d5:17:ab:f8:4e:db:ca:
8a:ec:26:f7:5a:15:98:84:b3:8a:33:9f:90:6d:16:f1:18:b5:
bc:14:08:da:c2:f3:fb:04:04:58:21:a3:4c:d6:d3:d6:8b:05:
d4:39:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:18 2025 by rpki-client