Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/ldOIJNls1bq-T2BRZ0ZQwFEAMqk.roa
File: ldOIJNls1bq-T2BRZ0ZQwFEAMqk.roa (raw, json)
Hash identifier: 9VbKwDQ4+1eUdOh9fTL39aUAMMsaCr3VxvhdPP7i/iE=
Subject key identifier: 95:D3:88:24:D9:6C:D5:BA:BE:4F:60:51:67:46:50:C0:51:00:32:A9
Certificate issuer: /CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Certificate serial: 018CB5251FE479D323945A75C700C702CAE5
Authority key identifier: 97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/ldOIJNls1bq-T2BRZ0ZQwFEAMqk.roa
Signing time: Fri 29 Dec 2023 10:35:58 +0000
ROA not before: Fri 29 Dec 2023 10:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49434
IP address blocks: 185.157.246.0/23 maxlen: 24
2a09:ca00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:25:1f:e4:79:d3:23:94:5a:75:c7:00:c7:02:ca:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Validity
Not Before: Dec 29 10:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95d38824d96cd5babe4f6051674650c0510032a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:47:71:31:95:ea:6e:b0:4b:52:0b:d3:b1:
e8:0e:89:68:25:2a:21:1a:a7:ad:47:77:66:6e:d2:
42:fb:ac:c3:3a:83:db:67:fd:27:56:6f:68:6f:fd:
0a:aa:66:c9:0b:7c:e7:89:4b:57:60:32:ad:16:e3:
df:c3:90:6b:45:2f:2e:94:42:bc:ae:4b:d4:43:96:
d2:c5:ab:58:9b:a6:aa:99:11:db:8d:3d:a7:fb:7d:
4a:a0:33:88:fe:b1:7a:f4:e4:c4:81:ae:c7:43:06:
b6:ee:ad:b9:76:a0:21:96:d7:2e:ca:ea:77:18:8e:
cd:e5:7c:63:26:9d:60:5a:bc:af:b7:02:da:17:75:
4d:a6:1c:69:7d:7c:56:96:b0:b7:b2:d0:85:d2:3f:
d1:28:b2:af:2b:e7:74:74:8c:62:d6:99:1d:2e:25:
19:ca:24:3a:3d:12:5c:87:e5:e3:ee:6b:66:89:4b:
fc:2c:2a:b2:a3:b5:01:6c:07:bb:d3:21:7d:17:3c:
c2:3e:3d:ac:77:93:55:7a:8c:43:ea:6a:11:98:1d:
90:6b:5e:20:b0:20:57:31:97:5b:b4:72:c2:7c:18:
24:98:e2:40:63:fe:10:6d:50:04:0a:ae:43:5f:a8:
f2:47:34:f3:ae:e2:83:3e:6c:3d:ff:66:13:5d:2b:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:88:24:D9:6C:D5:BA:BE:4F:60:51:67:46:50:C0:51:00:32:A9
X509v3 Authority Key Identifier:
keyid:97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/ldOIJNls1bq-T2BRZ0ZQwFEAMqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.246.0/23
IPv6:
2a09:ca00::/29
Signature Algorithm: sha256WithRSAEncryption
c9:c6:d4:0b:ec:19:a7:ab:55:2c:b3:d3:96:ac:8d:39:66:81:
96:db:e2:d8:c7:ab:f1:fb:7e:e8:93:91:b0:64:43:1f:a7:28:
18:1a:e2:93:aa:b1:be:ce:e5:24:be:d9:56:ca:42:5f:9b:f8:
ac:24:a3:d4:01:82:40:ce:49:3b:2a:f5:a4:52:41:7c:d9:9c:
bd:6d:fd:21:e9:6e:0b:b0:5a:6a:5b:20:fa:6c:ac:eb:72:13:
07:85:cd:8d:68:91:38:f7:1c:7f:96:85:38:0d:94:fd:9c:f5:
a0:4e:9a:04:3e:1b:dc:5c:1f:45:de:fd:1d:4e:e0:45:71:21:
3d:55:cc:1b:f8:0a:2b:af:c0:5d:98:5b:eb:c1:a8:7d:b3:c8:
ae:20:f4:9d:8f:ae:14:ad:f3:c3:f7:2f:88:cd:b1:d4:db:14:
ba:cf:fc:f8:32:3b:b4:80:7b:fe:91:4b:73:65:22:56:af:ee:
27:d3:a5:02:2f:51:d7:42:25:5f:f6:9f:c5:8c:77:1c:e6:dc:
ad:86:03:a9:a3:9b:3d:a8:04:99:00:5a:a3:85:d8:8b:54:4e:
38:e2:cf:54:ea:8e:e3:d7:c4:42:0d:05:56:20:75:9a:03:ae:
67:a6:3b:ac:80:39:75:bd:08:8f:00:e1:67:f7:31:7c:1e:f5:
69:f8:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:16:24 2025 by rpki-client