Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/baZe32PKXIeppnY8Yaja4T-a3tY.roa
File: baZe32PKXIeppnY8Yaja4T-a3tY.roa (raw, json)
Hash identifier: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=
Subject key identifier: 6D:A6:5E:DF:63:CA:5C:87:A9:A6:76:3C:61:A8:DA:E1:3F:9A:DE:D6
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 0194236A20B7713F74037113983FFF567301
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/baZe32PKXIeppnY8Yaja4T-a3tY.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62061
IP address blocks: 185.180.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:20:b7:71:3f:74:03:71:13:98:3f:ff:56:73:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6da65edf63ca5c87a9a6763c61a8dae13f9aded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5d:ac:b1:c0:12:f8:60:d8:3c:0d:4c:8f:fb:
62:ba:5f:2b:7d:14:ec:ea:a2:92:cb:11:f0:0d:85:
2b:11:be:44:ad:ac:e0:91:84:8b:a9:63:00:35:9f:
9d:d7:a5:f2:5c:a3:1c:db:33:39:a9:e2:a5:ce:65:
88:8e:ea:e1:db:44:75:7e:5d:6d:1e:b2:fd:1a:aa:
cf:75:61:67:b7:17:c5:09:4b:ef:47:2f:4c:88:92:
bd:9e:fd:d5:36:34:ef:26:41:e4:ac:73:b8:d8:01:
f7:9c:09:06:0d:df:95:fc:05:86:a6:2a:b2:c7:1e:
41:00:4f:86:8c:b2:54:52:85:52:7b:03:74:eb:a2:
59:1e:8f:c4:fb:42:11:e1:04:a0:5d:77:13:68:ce:
9f:bf:56:ca:a4:55:5f:e2:a9:63:34:a6:ec:bb:30:
25:25:56:e9:09:bc:ae:d7:60:6a:f3:ae:b7:8a:bb:
4e:cd:d6:00:05:c4:34:d7:ba:b5:7e:4b:19:67:5c:
6d:fa:cd:60:4f:37:31:1b:08:85:cc:47:cb:18:26:
bc:87:6e:83:1b:1d:ac:bd:f1:c1:00:05:74:47:0e:
22:37:6c:1a:9c:ab:5b:de:40:f1:f2:3a:9d:b6:df:
6e:34:0e:57:ef:62:e7:86:63:32:d1:42:a8:fe:29:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:5E:DF:63:CA:5C:87:A9:A6:76:3C:61:A8:DA:E1:3F:9A:DE:D6
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/baZe32PKXIeppnY8Yaja4T-a3tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2e:44:86:ae:91:2c:a2:ae:aa:84:18:ae:8f:dd:d8:d2:cd:
67:57:af:22:c0:4b:f2:eb:9d:36:f5:bd:6a:13:2e:a6:0f:41:
53:79:7f:a5:41:5b:f5:67:45:dd:33:8d:33:55:c9:ab:d7:29:
09:9d:32:62:32:61:d7:22:38:3c:29:19:6c:24:35:dd:ab:12:
f0:2d:f5:1a:b0:ef:cb:ec:fd:9e:0a:48:02:f6:31:dd:18:32:
0d:19:40:e4:aa:e2:e3:18:41:a6:33:24:ab:0e:96:5d:6b:26:
8a:37:2e:2f:a3:96:b2:1b:d3:f5:85:92:e5:1a:52:28:b5:6d:
68:42:f6:4e:4f:5d:e7:5f:64:2d:22:67:3e:c7:68:7f:9c:50:
13:0d:bb:a1:92:af:9a:f2:d7:93:a2:04:d7:2e:e9:b5:9b:7c:
76:58:ae:4d:e2:37:ac:8c:30:ad:29:e3:78:8f:35:f9:78:e3:
97:72:e4:fd:d7:86:56:12:e9:55:f4:33:5e:36:bb:d3:08:c7:
23:a7:c9:36:1b:93:77:bb:69:fe:de:3e:2d:c3:b1:ef:93:c3:
ad:5a:60:e3:24:b5:f8:5a:8b:ba:7f:c6:3b:89:fb:e8:45:b9:
af:0b:ff:db:0c:ec:a7:16:02:87:ee:04:91:d6:7f:e5:a4:d1:
d5:e5:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:57 2025 by rpki-client