Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa
File: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (raw, json)
Hash identifier: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=
Subject key identifier: 98:2A:AE:16:1D:97:05:69:20:F9:83:A9:98:D6:F7:F9:6F:CB:43:FA
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019421B1EC9B93E4F495861DCFC47753FAEB
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206581
IP address blocks: 185.168.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ec:9b:93:e4:f4:95:86:1d:cf:c4:77:53:fa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=982aae161d97056920f983a998d6f7f96fcb43fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:48:16:e4:1c:4c:d4:65:56:9a:0f:a1:74:
93:5e:3d:0e:21:5b:56:4a:06:1d:61:7a:58:92:f3:
58:ba:8c:4d:7c:8b:53:85:2c:4e:3c:f2:e6:c6:a3:
1e:8a:a9:8f:de:bf:52:e4:e1:80:f7:a8:dd:e0:b4:
f0:13:b6:5d:39:b8:ce:e1:90:b7:4a:db:98:71:7e:
b0:e1:bd:66:42:2e:1c:c4:41:32:47:0c:01:a6:12:
e7:d5:46:f2:96:c1:30:c4:36:2e:f2:f3:b4:3d:e6:
32:31:d4:9a:1d:73:b9:cf:33:94:61:93:71:74:5b:
30:6d:a9:02:14:5b:78:8c:a2:7f:4b:a5:16:38:56:
8d:05:e2:d7:fe:c8:c9:60:11:8a:88:61:42:31:c8:
31:85:e8:17:88:60:3c:b1:93:09:90:a4:1c:6b:47:
ec:aa:d6:1a:3a:6d:a5:12:2e:1b:f8:91:d1:4c:87:
30:8d:66:e2:cf:4c:5e:89:54:09:f5:d3:fa:e9:fc:
33:86:ee:40:50:7d:9f:16:4d:fd:6c:90:5f:43:67:
29:a9:e0:36:d7:77:3b:eb:ae:7d:b0:e1:c7:07:a9:
0f:8f:2d:4c:40:f1:8a:5c:f8:8a:7e:a0:17:11:67:
b5:98:d8:91:c6:03:cf:9c:46:80:9c:3c:f0:10:ac:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:AE:16:1D:97:05:69:20:F9:83:A9:98:D6:F7:F9:6F:CB:43:FA
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.127.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5f:0d:3d:57:36:74:5d:71:bb:fd:e3:06:8d:25:9e:d4:eb:
8f:0b:9d:d7:8c:a8:66:87:b3:b8:7e:d7:10:ac:bb:0b:df:8c:
c5:aa:16:f6:48:0d:bb:34:5f:84:53:19:4a:eb:18:02:10:48:
00:70:cf:d6:af:e3:2e:cd:a3:3b:85:50:92:7d:2e:bc:74:ab:
37:3a:6d:ef:18:94:8d:ad:f7:c4:16:b6:b0:41:2d:2c:1b:fd:
aa:ef:96:5d:25:9c:29:36:1f:dc:fb:34:40:72:2a:8d:01:f3:
88:15:f1:ea:a4:c9:55:49:37:30:da:d6:20:ce:f5:28:b9:33:
54:46:1a:17:13:81:cc:ee:96:2c:bf:14:56:a1:0b:12:c0:d7:
4e:68:30:43:dd:d9:9e:e7:52:84:d4:13:0c:69:a2:37:99:cb:
85:32:b0:bd:17:b0:7e:05:b5:fd:08:03:43:fc:69:11:69:f8:
e2:3a:7b:32:fe:3e:ab:01:99:a2:46:0d:8c:55:ae:c9:c6:b7:
aa:89:94:56:c7:ad:a2:96:6f:d6:f8:8c:40:af:38:f5:d3:80:
a0:d0:1f:28:43:8a:15:dd:91:0f:85:97:30:e2:28:fc:82:ad:
56:e9:d8:fc:55:7f:d8:8e:a9:22:63:f0:9a:b8:25:e6:87:67:
56:97:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:25:03 2025 by rpki-client