Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/561vyQubUBVe_MLgzSiqqYxU6_Y.roa
File: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (raw, json)
Hash identifier: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=
Subject key identifier: E7:AD:6F:C9:0B:9B:50:15:5E:FC:C2:E0:CD:28:AA:A9:8C:54:EB:F6
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 0194266B749C32FB9E6AFC02E00E85D4412C
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/561vyQubUBVe_MLgzSiqqYxU6_Y.roa
Signing time: Thu 02 Jan 2025 09:49:23 +0000
ROA not before: Thu 02 Jan 2025 09:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24806
IP address blocks: 185.33.144.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:74:9c:32:fb:9e:6a:fc:02:e0:0e:85:d4:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Jan 2 09:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7ad6fc90b9b50155efcc2e0cd28aaa98c54ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:9b:62:57:23:b8:20:e8:a9:c0:d0:7b:99:
f3:80:8f:40:94:77:55:73:01:3d:0b:6f:47:ec:1d:
6f:03:c7:31:aa:96:2e:82:69:6b:b6:e9:b7:ba:d8:
15:31:c4:25:3c:57:54:4d:14:63:98:1a:42:7e:af:
0c:9a:2e:a1:b2:d9:01:65:3a:17:0a:b8:0d:01:b0:
43:21:2f:2a:d4:e9:e2:24:18:2a:cb:82:bb:7f:40:
fc:1b:43:20:9d:84:1e:94:63:e8:43:cf:7f:ed:ac:
d4:cb:a4:e4:2f:09:7b:6c:e3:31:72:c6:aa:e1:fa:
15:e5:bb:fb:93:2e:42:51:ab:dc:52:3f:ad:b7:dd:
a4:b0:39:15:40:f4:ce:51:82:1a:19:95:79:3c:43:
15:9e:e1:c4:94:01:49:7b:9a:71:54:b8:70:e3:0e:
06:4e:09:d7:ae:62:b1:12:6f:24:da:7b:c8:ff:73:
92:1b:7c:3e:67:a6:0b:75:23:ff:d9:b2:9b:c1:54:
0d:87:99:e2:3e:20:6d:c1:b6:34:ce:3a:a7:24:27:
b1:3a:71:72:13:c8:ea:0b:a4:84:1c:fa:86:39:04:
fd:44:04:46:7b:9d:93:48:6d:e8:85:91:62:8f:a9:
ab:58:b1:73:ea:62:9f:f8:80:cc:1d:91:da:02:7d:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:6F:C9:0B:9B:50:15:5E:FC:C2:E0:CD:28:AA:A9:8C:54:EB:F6
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/561vyQubUBVe_MLgzSiqqYxU6_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.144.0/22
Signature Algorithm: sha256WithRSAEncryption
92:ce:29:bc:83:d7:11:d1:bb:77:3e:4f:8e:21:cc:0f:05:e8:
0f:24:d5:49:84:19:57:15:ec:31:68:50:30:4b:88:1e:72:58:
df:47:f5:0d:0a:ea:3a:6f:0e:7f:10:fd:4c:93:3c:c5:c3:5c:
41:62:73:3b:81:33:33:18:8e:ae:f7:7f:68:23:7c:c1:5f:f5:
c5:0c:b4:97:37:f4:28:35:e3:22:ff:04:2b:4d:d2:31:b1:27:
f3:95:79:ad:c4:be:e9:16:b7:b6:74:f1:1f:05:23:5f:ba:5a:
a8:c8:39:6f:e4:97:c9:2e:73:c6:c8:74:bd:58:dd:13:cf:52:
e5:b5:e1:1e:e8:76:be:90:47:24:e4:cc:38:45:74:48:45:ef:
3b:90:08:fb:c4:30:78:66:5f:87:64:6c:74:67:a7:3d:96:f7:
71:fd:fa:0c:ed:42:21:6f:9d:cf:e5:c0:ec:9b:96:5a:0a:74:
db:9e:d0:fc:b6:91:13:8a:4e:01:70:de:57:9c:47:5f:e2:ae:
24:7e:4b:f3:d9:60:0d:5a:51:a7:06:af:b6:7f:11:d2:e9:7b:
25:c4:bd:d1:86:44:0b:02:b3:1c:06:c0:1f:15:d7:bc:56:92:
62:c8:f8:f5:a6:75:51:eb:1b:67:f5:e7:06:03:72:b4:c2:0f:
30:f8:33:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:02:56 2025 by rpki-client