Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/Q0ZblCsN6JQUnX3udQDuap6c2-I.roa
File: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (raw, json)
Hash identifier: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=
Subject key identifier: 43:46:5B:94:2B:0D:E8:94:14:9D:7D:EE:75:00:EE:6A:9E:9C:DB:E2
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 01942144185C88D807572EC3B7451ED08221
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/Q0ZblCsN6JQUnX3udQDuap6c2-I.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210731
IP address blocks: 185.129.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:18:5c:88:d8:07:57:2e:c3:b7:45:1e:d0:82:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43465b942b0de894149d7dee7500ee6a9e9cdbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:9d:17:35:8e:de:0e:55:6a:72:9a:76:3b:
ca:82:7e:4b:ed:e4:64:e8:78:7b:40:34:84:1b:f6:
94:1e:7b:42:11:bb:66:d0:69:7c:ae:30:e0:26:6b:
2e:a6:14:ab:33:e9:df:75:33:1c:d3:3e:3d:df:5b:
04:41:35:29:72:87:f5:47:92:54:7b:03:af:8c:fb:
db:20:bd:95:7c:ea:ea:d4:12:7d:fb:2b:8f:8c:62:
92:dc:d6:ff:75:21:83:9e:b2:18:bf:f8:67:9a:8e:
b2:ba:c7:a0:96:cb:14:b6:d0:ef:17:7b:c7:63:97:
0d:c2:5b:a2:45:fe:17:c4:3d:c7:f6:db:64:8c:2a:
ac:f6:39:a3:de:d9:82:46:73:db:59:05:bb:77:8d:
b8:8c:80:fb:35:81:0e:1f:e9:4f:27:7e:8f:7d:f9:
1b:1b:60:f2:67:ed:e1:71:08:c6:14:7a:5f:2c:ca:
56:a7:75:98:75:f4:44:5f:61:57:fd:27:30:c6:3d:
4c:de:bb:0f:fe:d1:65:ad:66:b6:cc:18:bf:d1:c7:
c1:45:9b:7d:f5:77:19:c3:11:58:cf:26:b7:86:c5:
8b:c8:63:66:95:22:6a:92:e2:25:fd:8d:15:6e:32:
b4:8e:a2:5c:2a:fe:b2:3a:c0:84:49:e6:e3:96:5d:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:46:5B:94:2B:0D:E8:94:14:9D:7D:EE:75:00:EE:6A:9E:9C:DB:E2
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/Q0ZblCsN6JQUnX3udQDuap6c2-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b4:27:65:e1:53:8c:2e:5c:6f:b5:e9:4d:f0:9e:f5:38:4f:
1f:a8:74:fb:7d:d1:84:0d:5f:ba:41:d3:ca:38:a9:d1:15:cf:
d8:33:89:80:b9:bd:57:ed:7d:b4:be:bf:12:c5:bc:ea:b3:e9:
71:9b:fc:b7:ef:1b:51:96:88:37:f8:ed:7f:99:ba:d5:35:2a:
83:b9:05:99:0e:ef:3c:3d:b0:af:41:fa:6f:33:4b:6e:b1:e7:
f7:db:4b:bf:48:5b:81:d8:1f:5d:45:ba:0d:4b:8a:6b:09:68:
cf:a1:54:a5:a8:61:f6:3c:96:23:e3:13:f7:6c:d9:41:55:70:
c9:cb:67:2c:89:78:15:3d:86:ae:3a:73:0e:fa:8c:15:99:c5:
7f:db:88:aa:c4:b2:eb:fd:03:2c:a4:91:d5:4b:08:a1:54:30:
ce:f9:8a:50:43:19:3e:23:c5:dd:72:e6:77:eb:57:59:e4:8e:
9a:79:e3:0b:92:61:90:64:df:52:eb:c2:b1:4d:d4:33:98:99:
1f:42:24:07:91:21:24:62:4b:4f:15:c2:51:a7:75:c3:87:6c:
c5:fd:8e:45:2f:fe:f6:fa:b2:70:e1:73:a2:60:c3:c0:d3:96:
8b:6d:f6:fa:5c:4a:b5:6c:51:49:4a:7e:80:b6:1b:af:92:c0:
97:cc:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:26:29 2025 by rpki-client