Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/d24hcpvufBaQCH0AT3eyB2irC5Q.roa
File: d24hcpvufBaQCH0AT3eyB2irC5Q.roa (raw, json)
Hash identifier: M+PAmsh5lroGoGNELrG+cFrgaEUIFZBuxcJ32Xq2rnQ=
Subject key identifier: 77:6E:21:72:9B:EE:7C:16:90:08:7D:00:4F:77:B2:07:68:AB:0B:94
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23B16B0AA4A69AE1A19710B6F39DD
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/d24hcpvufBaQCH0AT3eyB2irC5Q.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200918
IP address blocks: 185.30.160.0/23 maxlen: 23
185.32.182.0/23 maxlen: 23
185.91.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3b:16:b0:aa:4a:69:ae:1a:19:71:0b:6f:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=776e21729bee7c1690087d004f77b20768ab0b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:23:4f:23:67:f3:67:a2:95:30:de:f3:3d:
57:61:12:12:6c:d7:99:f5:49:9e:58:f9:6f:58:89:
67:0c:f0:f6:07:5f:89:4a:cc:dc:06:d3:20:b9:f8:
db:31:f8:89:4c:3f:c2:e7:1a:1b:ff:ac:4c:ad:c8:
24:f1:26:1d:c5:8b:aa:78:54:f0:04:9f:1b:ac:5f:
3a:90:bd:6c:a0:6e:c7:f7:5c:64:3f:90:98:c3:a3:
a2:16:d0:f9:33:60:05:87:83:8e:81:ab:f2:ac:6a:
3d:6e:73:b5:33:34:86:bc:f2:7c:0a:d4:e2:cf:b9:
80:d8:1c:7d:fc:e5:ec:18:91:2a:52:f2:72:84:3a:
dd:91:0a:36:13:a7:5e:f0:2a:50:4f:d1:13:b6:de:
53:5a:49:bc:36:c3:bb:66:b0:49:27:d9:f1:be:60:
c9:04:37:2b:bd:2e:05:7e:15:b1:4b:e7:f5:62:cd:
6d:e3:55:e3:9b:08:5c:db:04:8e:64:1d:91:9a:1b:
02:15:d1:2f:da:20:45:f5:a1:9d:f1:e8:cd:17:71:
b3:99:ce:47:be:9d:1f:81:22:a8:3e:73:1e:f3:0a:
88:c2:b5:02:7c:0d:b1:76:e2:60:9c:42:80:a0:ed:
44:60:a6:71:45:a0:8d:61:2d:85:e6:cf:b1:93:6e:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:21:72:9B:EE:7C:16:90:08:7D:00:4F:77:B2:07:68:AB:0B:94
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/d24hcpvufBaQCH0AT3eyB2irC5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.160.0/23
185.32.182.0/23
185.91.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:0c:59:17:80:f7:a0:01:e2:43:9c:64:5b:9a:00:9c:0e:e1:
e0:45:8c:65:a1:df:e2:2d:5e:21:f2:a3:2a:d6:a2:ee:42:8d:
6c:96:9e:97:44:44:a1:fb:31:2d:e4:b4:97:a0:ac:ed:df:33:
18:dd:c7:43:a7:10:17:27:ef:53:51:01:3a:2d:72:63:67:f4:
86:20:bb:72:56:aa:d1:35:0c:f9:36:75:fa:70:14:2b:29:3f:
b8:fe:ff:f9:6a:26:64:3e:27:9d:8f:e1:a3:1b:e1:a0:d6:66:
16:19:51:5f:85:69:99:aa:5e:0f:e1:b3:b3:1e:e6:b4:f5:ac:
1d:b0:4a:33:cc:dd:ca:13:20:73:9b:0e:16:d0:2c:15:57:1f:
5e:04:5e:41:0d:3a:16:7a:9d:7f:c1:01:ae:49:f9:56:9e:6d:
b9:b0:93:0d:10:19:65:eb:b7:49:a9:8a:68:c2:38:88:7e:d7:
36:9d:ea:8d:bc:09:78:e4:9b:72:bb:9d:cc:49:f4:85:0a:56:
c2:b7:db:32:7b:15:4b:a2:fa:e5:79:e1:f3:12:f0:a2:8e:f2:
0c:43:a0:64:21:ce:bc:6f:35:9d:09:32:9a:b3:8f:b9:de:16:
9d:bb:73:db:d7:8f:3d:3d:d5:66:cd:42:b6:5b:ce:bc:94:b6:
8c:d8:23:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:11 2025 by rpki-client