Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/ABJeBSRerc6ln8Nq1O24UKU-kIQ.roa
File: ABJeBSRerc6ln8Nq1O24UKU-kIQ.roa (raw, json)
Hash identifier: wbHLDg1zgSa2lEkw/I9y9oawv8nZRjML/tbJECp7ZGQ=
Subject key identifier: 00:12:5E:05:24:5E:AD:CE:A5:9F:C3:6A:D4:ED:B8:50:A5:3E:90:84
Certificate issuer: /CN=690d8581c464c996bcf826bc25654a5504957f8d
Certificate serial: 01856F8B9D602EEB9F22EBF184E23592463F
Authority key identifier: 69:0D:85:81:C4:64:C9:96:BC:F8:26:BC:25:65:4A:55:04:95:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/ABJeBSRerc6ln8Nq1O24UKU-kIQ.roa
Signing time: Sun 01 Jan 2023 22:54:58 +0000
ROA not before: Sun 01 Jan 2023 22:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 185.170.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:9d:60:2e:eb:9f:22:eb:f1:84:e2:35:92:46:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690d8581c464c996bcf826bc25654a5504957f8d
Validity
Not Before: Jan 1 22:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00125e05245eadcea59fc36ad4edb850a53e9084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:fe:c5:f5:3f:b7:0d:fb:31:d5:f8:2d:90:
71:ea:43:89:69:5e:b0:e4:4e:4d:68:73:32:ec:c2:
b3:48:bf:e0:3b:3a:03:c2:83:bf:b5:a6:e8:00:49:
71:5b:a8:10:5d:b3:52:bc:d2:64:1b:a9:81:a5:59:
b2:c9:42:b3:66:15:33:51:bd:f1:4a:a6:ae:df:0a:
16:f3:bc:6a:6f:ad:90:da:ec:39:e7:b4:07:eb:9a:
a0:0f:0d:74:88:f2:cd:d4:70:f4:e5:83:02:25:64:
c5:bb:da:58:04:19:2b:0e:95:8e:47:b6:ef:54:65:
e5:47:26:4a:2b:c7:fa:92:f0:2f:98:7e:66:59:c5:
cf:d5:83:23:c5:2b:73:83:51:e6:1f:04:13:37:ca:
1a:82:1d:74:ff:ff:c4:ce:48:17:d1:d6:26:0c:38:
a6:b3:32:80:1e:a3:29:d2:27:b4:13:39:ec:85:e6:
c6:79:f1:1b:b1:a2:ce:ad:f2:c9:0a:01:2d:28:b6:
9b:2b:41:cf:05:9f:d2:88:f5:af:75:6a:02:a1:ad:
e0:eb:55:ab:37:5f:49:81:12:1b:05:f1:95:6a:7a:
70:f5:2c:cf:3e:e2:e4:34:af:c5:ec:9e:16:db:5e:
94:6f:7a:c1:98:9f:b7:cc:97:79:0f:dd:2f:11:d4:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:5E:05:24:5E:AD:CE:A5:9F:C3:6A:D4:ED:B8:50:A5:3E:90:84
X509v3 Authority Key Identifier:
keyid:69:0D:85:81:C4:64:C9:96:BC:F8:26:BC:25:65:4A:55:04:95:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/ABJeBSRerc6ln8Nq1O24UKU-kIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:49:88:ef:0d:0d:15:6d:e5:64:8e:5b:4a:c1:00:b3:15:40:
a5:45:95:6c:be:02:f5:f0:c9:a5:b3:b7:34:1a:26:32:60:f4:
da:b1:01:b7:fd:06:ef:9b:2c:62:c8:ef:d0:3f:4b:c1:7a:10:
75:0f:fb:1a:fc:c0:54:1a:e6:87:2c:74:0d:76:6f:1a:63:a9:
b3:9b:fe:fd:5d:db:62:99:70:c1:37:b0:ce:ab:f4:5a:0c:d3:
ea:9f:b8:9a:12:06:2f:53:95:30:00:f9:1c:00:eb:9a:9d:9a:
bc:7d:4d:84:77:96:d9:1f:c0:60:4b:d7:a3:26:c3:d4:10:35:
51:65:dd:ee:37:f0:62:bb:1b:61:fb:1f:f9:00:67:fa:fb:92:
e4:8a:dd:c8:d1:a5:bc:b6:48:93:cd:22:6f:af:f3:fa:1d:df:
77:7f:06:f7:8a:32:b6:6f:b7:b7:b1:6e:5d:86:ec:c6:e2:fb:
e1:c6:e1:29:55:e7:ea:83:fc:65:93:d8:11:86:9e:e8:4a:16:
7d:b1:b2:aa:32:d5:b8:74:e0:23:86:12:e2:cc:d1:39:01:28:
7e:32:a4:24:45:dc:83:2d:75:5b:07:62:98:e3:6b:95:89:88:
82:57:7a:63:8d:94:88:6c:cf:d0:be:23:55:39:74:12:99:9b:
04:cb:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:33:59 2025 by rpki-client