Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa
File: 5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa (raw, json)
Hash identifier: Nyr6wmMl755m5pBB7dzD6+3NgxbHjvOEn2wkeXz+Yqw=
Subject key identifier: E6:CC:74:A9:1F:81:F7:2E:A6:18:38:11:6E:D4:8B:9F:0E:4A:1A:CC
Certificate issuer: /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial: 01942445402BA2BF930B529E8066DF233277
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64431
IP address blocks: 185.165.128.0/22 maxlen: 24
2a0a:600::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:40:2b:a2:bf:93:0b:52:9e:80:66:df:23:32:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6cc74a91f81f72ea61838116ed48b9f0e4a1acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:de:3f:4e:e0:d7:0f:10:9b:f1:eb:9b:7d:
46:c7:02:e9:6c:5f:79:29:29:1f:0c:f9:fa:da:b2:
19:7e:87:1e:90:98:be:99:d1:44:43:c8:85:d1:aa:
39:56:91:76:0a:82:39:28:de:1f:85:f2:9f:b8:f3:
a7:d6:ff:0c:f2:fb:46:68:e5:3f:5d:6c:e7:72:82:
10:0b:76:e1:74:ce:94:18:a3:7c:a3:08:ae:bd:1b:
2b:12:a2:b8:c2:8b:1d:85:d6:32:6a:05:f4:d5:cb:
8e:fd:1c:a2:e1:5f:ba:6d:53:46:2d:e8:6e:e5:0b:
bd:a4:31:c8:25:41:a1:73:86:3b:a5:3d:eb:ad:e2:
55:59:7e:ba:e9:c7:8d:f1:9e:cd:5b:63:52:82:de:
a0:d4:25:af:ed:f9:e8:91:80:31:31:ac:66:40:83:
ab:48:4a:88:4d:4d:34:79:cd:b7:6b:5a:a4:e4:97:
e3:05:43:f1:95:b9:49:c5:cb:7e:1f:34:eb:3b:93:
2d:0b:28:41:d4:2e:d6:40:eb:dd:ac:5a:9a:08:25:
68:10:7e:a3:99:4e:5e:44:7e:86:13:6d:86:71:ab:
50:e3:e9:f0:b5:fa:7f:ef:c7:93:a1:a7:a1:b9:b4:
28:f9:42:db:a0:61:e0:e0:65:9c:ad:38:6f:49:96:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:74:A9:1F:81:F7:2E:A6:18:38:11:6E:D4:8B:9F:0E:4A:1A:CC
X509v3 Authority Key Identifier:
keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.128.0/22
IPv6:
2a0a:600::/29
Signature Algorithm: sha256WithRSAEncryption
ba:44:ef:7f:73:4e:a9:57:e2:87:04:42:43:4c:3a:a8:91:16:
8f:a0:d8:05:be:07:78:75:da:86:82:f6:86:af:18:15:d6:c6:
0e:aa:5c:ad:66:1e:10:ae:34:0c:08:74:d2:59:6b:44:be:20:
3a:ab:9c:42:e6:45:cc:c8:43:75:77:ee:2f:f7:ac:3d:b7:ce:
16:dc:4a:38:f7:52:52:7b:69:53:ec:5d:b8:84:a2:50:ce:df:
5c:f6:46:e2:cb:2f:54:82:51:b5:29:94:21:c1:a9:7a:42:b4:
a7:0b:96:fc:27:0c:05:3d:80:6c:ae:a5:10:40:4c:b8:c4:98:
9b:8e:7d:2b:02:b8:b2:f5:68:34:37:53:cd:6b:33:74:8e:9c:
64:3e:6e:d3:3c:fd:3b:98:6f:dd:b3:07:49:d1:5c:ca:c9:8e:
14:22:5f:e5:99:0d:95:64:77:03:3a:c2:ce:5d:7c:f0:46:f2:
04:da:e2:ad:d2:ff:0a:04:3d:9e:15:84:67:8c:a5:dd:48:8c:
f0:5e:f9:fb:25:a0:32:7d:b4:28:76:fe:cd:dd:11:82:f3:75:
2a:b3:70:95:50:9e:8e:dc:5b:d2:c9:e7:87:eb:6c:26:a1:13:
6e:d1:e7:ca:53:86:ef:da:18:fd:c6:66:05:0f:c4:36:71:94:
9d:33:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:10:54 2025 by rpki-client