Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa
File: p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa (raw, json)
Hash identifier: iKYw9dWKEOaAlzn5AmL4rdC2+rWU6FDA6bFijDgxb2w=
Subject key identifier: A7:F8:87:37:0C:2A:87:66:DE:D0:E8:D3:E4:94:08:50:7A:78:52:FB
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019421B25BC80700B0D5F6AEEEF90805B30D
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210542
IP address blocks: 185.126.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5b:c8:07:00:b0:d5:f6:ae:ee:f9:08:05:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f887370c2a8766ded0e8d3e49408507a7852fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:17:fc:5a:20:b0:29:7d:4f:c6:e6:3c:3f:
a4:33:24:7f:9a:12:83:48:ca:2e:c3:fd:75:25:15:
25:8a:8b:3a:52:95:37:de:72:98:1b:1f:c3:6b:96:
ad:b5:39:45:4b:97:b3:45:db:f0:33:2b:c8:bb:9a:
f8:37:44:48:eb:c6:f0:74:63:40:a2:eb:bd:c6:37:
a4:cf:88:0a:a7:c6:47:d1:21:2a:81:72:f0:5c:9d:
f0:69:ca:8e:6b:29:86:aa:d3:19:f6:8a:5f:62:88:
2b:6b:d6:0a:c5:aa:9d:5e:d5:d5:05:05:72:8a:74:
b2:24:68:0a:f8:9a:44:89:0d:b4:cb:2e:e1:21:dc:
d1:9b:c7:95:7a:d6:5c:50:55:1f:6c:28:00:58:86:
74:5a:4f:bf:78:60:e4:5e:f5:06:ea:00:31:ac:f3:
5b:96:4b:05:19:73:40:29:df:25:14:ea:87:63:bb:
fb:6b:45:c5:22:e0:04:2c:05:a9:b3:2c:7d:4d:54:
50:c2:38:8d:ab:2e:80:fb:ba:81:f6:ad:00:00:70:
96:1a:f2:4c:a5:9d:0a:2b:f5:e9:72:cf:08:48:0c:
34:31:27:bc:52:e4:a8:d4:53:ec:22:3c:88:87:10:
04:41:b0:a5:0c:59:b2:1a:9a:28:cb:da:44:99:7c:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:87:37:0C:2A:87:66:DE:D0:E8:D3:E4:94:08:50:7A:78:52:FB
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.134.0/23
Signature Algorithm: sha256WithRSAEncryption
19:33:8d:2c:86:1b:0d:76:71:fc:13:5e:ed:d7:51:4a:9f:4b:
02:97:99:71:c9:6e:1e:65:c8:9e:e7:32:18:42:a2:20:01:2d:
f5:79:23:04:8e:90:ce:b7:59:e5:f4:1d:e4:2c:a2:4e:44:d2:
ed:1a:74:6f:93:fa:d7:18:a0:15:11:e7:ed:23:79:c3:44:d1:
bf:a8:9f:50:bc:52:8f:eb:a6:51:7a:27:fb:c9:bb:d1:c0:f3:
51:c7:3a:ae:60:3e:7a:24:41:86:a7:1d:fb:0b:20:8f:90:79:
fc:a0:6e:4f:4a:89:53:6c:cb:c0:4a:61:13:a0:9d:b4:4d:3d:
84:13:c0:18:71:1a:00:55:97:c5:ab:b8:49:3b:62:19:f9:4f:
c0:8a:62:a5:ea:6b:6f:41:d3:b4:95:0d:b3:b3:1a:7d:26:97:
76:39:a9:73:64:94:5b:85:9c:38:81:8a:52:d7:ff:3f:83:d8:
1b:25:72:9f:47:b0:26:f0:7a:75:18:b9:cd:57:b4:cd:87:9e:
3b:01:95:19:80:8b:48:a2:fb:9d:56:92:26:86:96:0b:1c:25:
05:00:d7:ff:f6:cc:09:b3:3a:ce:2c:84:99:4c:3b:c4:a3:49:
bb:7d:fd:fb:c8:b0:1d:df:fa:fd:3b:62:e2:5f:90:3e:fe:63:
84:a9:12:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:00:44 2025 by rpki-client