Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/xe6f0-R3uUZBnoLs0S7n6Iepim8.roa
File: xe6f0-R3uUZBnoLs0S7n6Iepim8.roa (raw, json)
Hash identifier: HOV8Vg5bEFKecupNdQdTB6clHVPzjq+LxD7iw25nWc8=
Subject key identifier: C5:EE:9F:D3:E4:77:B9:46:41:9E:82:EC:D1:2E:E7:E8:87:A9:8A:6F
Certificate issuer: /CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
Certificate serial: 019423D730C0EA5AD72FF49FE5FEF9BD8297
Authority key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/xe6f0-R3uUZBnoLs0S7n6Iepim8.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59834
IP address blocks: 185.69.148.0/24 maxlen: 24
185.69.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:30:c0:ea:5a:d7:2f:f4:9f:e5:fe:f9:bd:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5ee9fd3e477b946419e82ecd12ee7e887a98a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:59:97:bd:b2:ff:61:64:4f:65:a7:66:63:
6e:bd:8a:ee:38:5c:08:9c:8f:07:80:08:19:db:c4:
67:81:54:9b:c2:06:03:4b:a4:eb:1e:57:9c:12:38:
37:38:f1:57:67:f8:6a:db:48:37:8b:eb:cc:9b:17:
46:58:4b:cd:9f:14:22:7d:c6:1c:c8:3b:20:b1:85:
ab:ee:db:4b:a5:f9:72:83:09:f9:fa:d2:22:91:23:
cc:73:27:bb:e9:93:2f:c3:9c:e2:33:6d:86:a4:f1:
ba:46:2b:23:3c:55:3f:48:7f:ab:a4:03:77:4f:69:
41:67:3e:ae:0c:87:b4:4a:f2:8f:ab:5a:64:c3:77:
6a:a0:34:5c:06:4a:49:a6:e5:75:2c:c4:61:f0:ce:
90:f2:c7:80:33:cb:c2:08:0d:b1:c8:1b:2a:a2:dd:
f7:d2:26:fe:a8:e2:5f:de:0b:5b:22:66:f9:af:eb:
eb:2c:1e:58:8c:7b:b0:bd:cd:93:9d:ac:78:b8:99:
ad:2c:69:a1:fc:4a:b0:e5:b9:18:e8:ea:fb:7a:cc:
74:e3:8c:3e:76:e1:3f:b2:78:9e:67:15:06:c4:0d:
10:68:88:83:ca:3b:bd:0d:fe:03:c1:43:f3:f0:21:
62:9d:cc:a8:b3:3d:ef:12:ba:a6:c0:e1:b7:1c:63:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EE:9F:D3:E4:77:B9:46:41:9E:82:EC:D1:2E:E7:E8:87:A9:8A:6F
X509v3 Authority Key Identifier:
keyid:6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/xe6f0-R3uUZBnoLs0S7n6Iepim8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.148.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:3d:bf:0a:b2:ab:a4:28:94:71:08:a1:53:2a:2f:24:e1:00:
4d:b6:62:10:f0:d3:0e:56:2d:ab:4f:2a:6d:d8:8b:6e:eb:e0:
e8:c9:d2:15:23:db:6d:54:d8:e9:1f:67:11:4b:b0:ef:91:32:
5c:43:97:69:64:18:74:bd:ca:6b:1c:84:ea:9f:b8:fd:e6:27:
55:11:ef:de:75:88:f5:76:fa:52:44:dd:5b:fe:90:f4:ff:23:
4d:bf:de:76:fa:59:64:b1:d1:01:be:a9:6c:cb:67:d4:63:db:
f0:f6:87:54:40:aa:32:f5:0a:d4:cb:4f:67:d7:de:3a:c8:83:
03:ab:c7:7b:27:ae:63:89:af:54:94:d0:11:c4:86:c8:5c:f5:
e0:bd:e2:9a:64:13:a5:af:b7:65:0a:ca:b0:f6:62:de:ae:a1:
d8:c4:80:43:fd:6b:64:60:94:8a:fe:6f:b8:f2:9e:24:ab:40:
34:5e:e3:99:97:ad:af:91:af:cc:8a:4b:de:47:e1:ae:29:c8:
52:dc:fb:25:51:8e:8b:e8:60:54:9a:54:1a:c4:69:65:f2:18:
77:8f:83:44:e7:72:dd:81:de:ba:94:b7:d5:ea:85:23:c3:ae:
21:36:fb:ae:aa:44:62:84:d0:3b:1c:ee:d8:df:e1:9c:5e:e1:
87:77:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:25 2025 by rpki-client