Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/1taXUDcoKkrQ-dr580_7U9lAPFs.roa
File: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (raw, json)
Hash identifier: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=
Subject key identifier: D6:D6:97:50:37:28:2A:4A:D0:F9:DA:F9:F3:4F:FB:53:D9:40:3C:5B
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 019426D985496E7340BEF47A724F5D19814E
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/1taXUDcoKkrQ-dr580_7U9lAPFs.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42764
IP address blocks: 185.43.16.0/23 maxlen: 23
185.43.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:85:49:6e:73:40:be:f4:7a:72:4f:5d:19:81:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d6975037282a4ad0f9daf9f34ffb53d9403c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:84:d4:ce:4b:e7:ef:e7:a7:54:c4:1f:54:
96:d5:99:79:d1:1e:5d:fc:35:88:1a:e0:09:4d:43:
bc:c3:81:6a:24:41:ad:1e:df:59:42:65:de:cc:a9:
d4:2f:56:4d:b9:f9:89:a1:5b:23:cd:47:0b:dc:d9:
87:77:9f:0e:84:80:4a:dd:c6:ed:c2:c1:43:87:4d:
82:82:96:2e:f1:ea:36:be:00:72:de:10:1f:cb:b1:
1b:a0:9c:24:b6:e0:0a:4d:78:73:08:56:fd:43:17:
cf:d4:51:91:b5:e6:b5:69:ed:1e:aa:a0:36:0c:8c:
03:db:a6:fa:13:14:eb:4d:2a:b9:c5:0d:05:54:9a:
63:fb:75:d4:33:f5:01:4c:a1:28:77:16:0a:82:2a:
90:9c:20:8d:b3:38:1d:1c:5a:a1:69:ec:74:64:be:
92:c8:d1:25:75:01:5f:c6:65:03:7e:5d:81:45:5a:
75:5d:99:a7:4d:39:c7:cd:0d:12:22:44:65:4a:9f:
e2:6e:6b:f1:78:a5:85:e5:38:9b:8e:e8:5a:2e:9e:
68:e0:f7:90:b3:46:8e:4d:4f:2c:59:b9:0d:5e:29:
ea:5c:a0:4f:d8:e0:3b:d6:57:30:be:77:1e:d0:52:
7a:1e:c0:08:f3:07:85:b5:70:b5:4c:32:d0:98:16:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:97:50:37:28:2A:4A:D0:F9:DA:F9:F3:4F:FB:53:D9:40:3C:5B
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/1taXUDcoKkrQ-dr580_7U9lAPFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.16.0-185.43.18.255
Signature Algorithm: sha256WithRSAEncryption
2f:5a:46:95:54:96:27:a7:ae:17:48:cc:60:28:fc:5d:b0:9a:
a8:54:37:2f:3d:11:f0:f1:3d:74:e6:1f:18:9f:d7:94:3d:3a:
0d:e8:81:52:40:54:88:5c:d7:0f:06:30:3d:71:93:89:a7:81:
d9:98:9c:24:1b:c7:14:a1:d2:b3:15:de:17:c4:aa:af:c2:87:
22:45:3c:e7:92:41:c5:04:e1:b1:f3:f7:90:16:9b:8d:86:56:
39:26:a7:1d:01:94:bf:7d:dd:5f:cd:68:22:9a:06:d3:e8:b4:
0b:36:d2:f1:4a:a1:32:5f:40:29:0c:68:ed:fa:68:2f:c7:c2:
38:ca:55:37:c1:54:67:9e:7f:b8:7d:1b:62:9e:ef:46:68:3f:
d3:58:81:7f:46:34:a3:2b:c6:88:02:e0:e3:6d:3f:aa:5e:44:
76:41:24:c5:81:02:ed:89:41:08:2c:f0:b4:02:4e:3b:3a:98:
63:a3:91:a3:ee:c5:02:7c:3a:8d:07:41:04:68:ad:53:10:14:
7a:5d:1b:1b:b6:64:dc:27:02:c6:8e:ab:5a:6d:87:cc:af:0f:
86:e9:34:14:25:f1:38:f8:7d:76:a3:07:6a:8e:73:9d:ef:50:
5b:48:50:18:0c:e2:96:e6:c0:8a:ab:34:b1:5b:6b:e2:92:9a:
52:c7:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:37 2025 by rpki-client