Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/CK8AO5cGK3UQexwKT4OQnvAc618.roa
File: CK8AO5cGK3UQexwKT4OQnvAc618.roa (raw, json)
Hash identifier: FFxKHiRId03ta3Wbr3GQyhjQH1qxb15B+KbsuejkB8s=
Subject key identifier: 08:AF:00:3B:97:06:2B:75:10:7B:1C:0A:4F:83:90:9E:F0:1C:EB:5F
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 019425FC7E406184FEF42AB9FB35F227D9C4
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/CK8AO5cGK3UQexwKT4OQnvAc618.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207074
IP address blocks: 185.166.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7e:40:61:84:fe:f4:2a:b9:fb:35:f2:27:d9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08af003b97062b75107b1c0a4f83909ef01ceb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:31:ec:8b:09:aa:94:66:70:9e:83:52:dc:
35:19:79:40:0d:54:2d:38:da:53:86:7d:68:f6:74:
b3:c3:da:e8:57:f0:54:83:14:3c:76:f8:d0:21:33:
70:96:fb:33:58:89:18:60:4f:9a:52:03:9f:15:f0:
93:cf:33:a8:df:db:5f:a1:fb:4b:c3:69:42:19:15:
45:b9:e5:90:d9:b3:3a:f7:e8:f8:db:6e:7a:d7:80:
3d:2f:b1:b1:ef:14:d9:ad:8c:d4:c2:1c:67:56:0b:
36:50:45:19:1e:13:57:3e:31:c2:ea:65:8a:bb:50:
fb:d6:9b:f9:ad:9d:b0:0a:57:44:72:9d:ee:40:ca:
f4:95:64:98:7b:3a:ba:a5:ec:c5:f2:f2:57:71:3c:
3e:72:23:28:9e:f4:91:b6:ba:62:42:57:b6:bb:02:
7b:c4:c5:8c:9e:0d:e0:8c:f4:10:17:69:4d:ea:09:
59:a6:3f:a2:f3:89:10:06:57:9f:d1:d0:2c:0a:58:
44:7c:34:97:28:cb:f8:ef:bf:a0:64:3e:a7:ab:53:
7b:ef:db:9b:e1:11:a3:0a:47:3e:3f:f9:c5:41:14:
e6:b1:c0:ed:68:0b:77:84:9d:ca:31:df:95:3a:c8:
8e:a3:2a:cd:94:78:ca:a6:31:6f:2e:49:54:f7:2e:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AF:00:3B:97:06:2B:75:10:7B:1C:0A:4F:83:90:9E:F0:1C:EB:5F
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/CK8AO5cGK3UQexwKT4OQnvAc618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.148.0/24
Signature Algorithm: sha256WithRSAEncryption
42:37:52:85:ce:b7:5f:56:82:7b:92:69:fe:9c:c1:dd:24:8b:
1e:92:79:ae:1e:e7:18:9a:76:fa:50:c1:2b:f9:f9:39:78:f7:
69:89:4b:76:f8:34:37:68:81:7c:ac:22:34:54:11:f9:82:46:
d7:27:23:d8:5b:cd:ec:75:e2:f7:d9:cf:56:29:e7:71:2a:ec:
40:d5:ed:12:05:f3:26:31:77:34:61:1f:ba:8d:8d:d1:77:83:
15:02:9e:71:1a:33:be:8d:04:a7:39:33:c0:9f:c3:67:e5:0e:
ff:80:40:72:c4:37:9d:ad:c4:84:59:12:0d:d3:bc:d7:f5:fb:
68:f1:05:f4:0f:61:c7:d0:bd:c0:26:52:14:1d:7e:a5:b1:d4:
f0:bb:ea:4d:a0:6d:73:df:9c:78:e2:77:2b:ce:cb:e8:07:be:
25:dd:1d:77:d1:a8:14:7a:dc:d8:25:97:8b:b5:ee:10:d2:79:
89:80:d8:6f:86:f4:c3:51:d0:91:91:85:f7:39:0f:12:01:e8:
15:6d:0f:c1:70:3a:28:72:2c:cf:63:d3:7f:e0:7b:9d:7c:fb:
f6:59:b3:e3:01:f5:d4:a1:d1:9e:e8:0d:c0:a6:14:84:b6:04:
37:27:77:cc:89:6e:1e:e3:1a:25:92:bf:dc:0e:87:a5:66:9c:
ba:64:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:34 2025 by rpki-client