Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/aMqTYIPJtRefR0bitojO91iFNhw.roa
File: aMqTYIPJtRefR0bitojO91iFNhw.roa (raw, json)
Hash identifier: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=
Subject key identifier: 68:CA:93:60:83:C9:B5:17:9F:47:46:E2:B6:88:CE:F7:58:85:36:1C
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 01942144158E8A15C8A757B7B8B1576B44AB
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/aMqTYIPJtRefR0bitojO91iFNhw.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209566
IP address blocks: 194.62.129.0/24 maxlen: 24
2a0d:8c40:209::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:15:8e:8a:15:c8:a7:57:b7:b8:b1:57:6b:44:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68ca936083c9b5179f4746e2b688cef75885361c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:9c:49:2c:4b:9d:b6:95:0f:c5:f8:42:ff:
3b:75:22:5a:ff:40:83:d3:5d:e6:40:75:51:42:1e:
28:37:16:e7:b7:0d:56:4f:63:9f:66:14:34:fa:3b:
ac:a7:83:87:a7:67:a7:e1:e0:11:a9:9a:bd:e4:fa:
8c:a9:74:92:29:9a:c3:b6:28:d5:77:b8:68:b2:75:
ef:b3:ed:d9:dc:60:1e:d2:ed:1b:f1:81:a7:df:7a:
95:a2:0b:b8:4f:40:20:67:4b:1c:be:31:67:d6:4e:
ba:6e:ed:a9:93:8a:db:b4:6b:89:09:e8:48:a3:c1:
d6:d1:1d:f4:2b:d3:be:c2:11:28:15:39:8c:74:dc:
36:cf:08:cd:96:2c:6e:30:e5:66:d8:b6:15:be:f2:
ad:c2:24:3e:f0:37:7e:f6:c2:60:9b:0f:fc:75:2f:
41:11:99:d7:d6:03:c8:84:d8:57:ec:9d:4c:4a:10:
d3:c8:9d:d2:4b:2d:73:fb:a4:3e:1b:58:6e:5b:62:
89:73:c9:d2:35:40:bb:be:08:d6:06:1a:e9:b7:b0:
ea:1d:ff:0b:ce:e9:e5:b0:50:28:b3:03:1d:88:fd:
93:64:74:31:13:fc:7b:a5:fd:9e:04:26:b1:d1:f8:
c5:29:8e:8b:d3:e8:b8:37:7b:bb:5c:0c:13:64:56:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:93:60:83:C9:B5:17:9F:47:46:E2:B6:88:CE:F7:58:85:36:1C
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/aMqTYIPJtRefR0bitojO91iFNhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.129.0/24
IPv6:
2a0d:8c40:209::/48
Signature Algorithm: sha256WithRSAEncryption
0e:41:49:38:7d:2c:36:30:0b:86:e7:17:ee:d4:7e:3e:6a:7b:
f5:ab:1c:00:c2:7e:d8:37:b5:e3:97:ba:8b:a0:a9:17:b2:99:
5e:86:ea:16:02:9a:b0:1c:74:b2:3b:91:9e:a7:c3:b4:93:9f:
f4:f2:14:ea:88:a1:ee:b5:c4:72:26:ff:84:0d:12:0f:f9:25:
22:78:b8:c2:b8:81:8d:61:7a:be:52:fb:70:e3:6a:f8:7a:ec:
2e:21:83:f2:33:dd:0c:8c:a4:d3:39:7a:3f:b3:e0:7b:f6:eb:
ca:5f:d5:31:e9:21:67:be:0e:9f:02:84:02:8c:57:ae:6b:45:
6c:6d:86:88:4b:cb:d2:3e:c1:5b:4d:fd:26:a5:ec:74:47:7a:
4e:40:5a:04:3c:94:9b:f5:df:42:74:99:30:6c:fe:97:15:0b:
b0:01:d9:89:14:d9:9d:a2:d4:43:41:b9:a1:ac:b6:d6:ea:51:
8b:7d:26:fe:db:c2:f7:ba:8c:2e:fc:1a:1a:31:4f:fc:53:08:
df:a0:dc:1f:57:c0:49:75:72:e3:0c:10:4c:76:b6:1f:7e:aa:
eb:b2:b9:6d:d8:2e:ed:28:62:0b:eb:f2:f6:dd:13:ad:d0:5a:
9d:7b:f6:6f:77:fd:a0:68:58:c2:e7:36:8e:8d:db:ce:4c:e7:
5f:b9:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:24:37 2025 by rpki-client