Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa
File: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (raw, json)
Hash identifier: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=
Subject key identifier: DA:15:76:12:F6:BE:62:AD:13:8F:A4:7F:CD:19:9A:DC:81:40:CF:95
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 01942220128EBF75AC68A3960C12B0D08328
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7545
IP address blocks: 185.27.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:12:8e:bf:75:ac:68:a3:96:0c:12:b0:d0:83:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da157612f6be62ad138fa47fcd199adc8140cf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:20:bf:b5:c8:23:a0:37:39:d9:6e:d8:71:
52:f9:b9:91:91:28:90:5b:85:52:84:63:a3:1c:0e:
04:c8:bd:19:93:00:7d:e0:90:49:56:14:3d:34:9f:
f0:e6:69:9c:c6:d6:15:f0:14:9e:60:2c:46:d7:a0:
c3:f0:7c:b8:39:8c:9e:64:ae:7f:eb:04:6a:b3:d9:
08:d9:a2:c2:ed:8d:bb:a7:d6:9d:7d:78:8c:f7:5d:
d1:1d:aa:1f:d6:0b:cf:62:f8:e2:cb:f8:6f:85:ed:
1a:7e:c5:77:66:b0:44:22:ff:17:79:2f:e2:33:90:
5e:79:ad:e2:bc:05:86:85:a5:f5:ac:98:f4:3f:70:
c4:d6:ed:bf:72:8b:a1:18:ea:a1:77:05:b8:8c:e1:
1a:5b:c8:7a:4c:f3:c2:0f:b5:00:52:2a:f5:70:fc:
54:a8:e6:60:ca:b1:1f:06:91:fa:eb:4c:7e:1a:4f:
b2:23:ef:bf:a7:35:ee:08:4a:9a:af:9c:9a:fe:ca:
54:4b:d8:b3:d4:7a:86:42:04:79:aa:6e:51:c0:1e:
cc:f8:6a:64:e2:96:70:69:22:9f:74:4b:76:0b:ff:
63:f3:2a:73:ac:39:bc:16:74:1a:9c:50:00:b5:82:
68:e6:71:59:08:24:30:56:7a:4d:c8:49:b8:29:4c:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:76:12:F6:BE:62:AD:13:8F:A4:7F:CD:19:9A:DC:81:40:CF:95
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.228.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3a:6c:dc:18:35:08:28:70:b3:a7:ce:6e:c0:cd:82:3e:ba:
15:a0:2f:f2:e9:de:bb:18:02:b5:79:de:7f:9d:12:33:a3:7c:
5c:d3:92:5f:c5:65:62:5d:eb:64:0b:87:a1:dc:65:2b:0d:f8:
e1:3d:b6:f8:53:58:7e:45:3f:b3:4d:c4:e7:46:41:3d:55:2a:
1d:dc:a7:40:b6:e2:8e:39:3c:c5:a3:13:ef:d0:25:ae:35:a3:
96:b1:35:b8:d8:73:5e:44:98:a1:90:12:aa:92:e2:ff:86:79:
ac:30:79:c7:30:e4:4d:66:3b:32:ca:46:91:11:54:db:9b:67:
ae:09:53:8f:76:a0:4a:a4:6d:7f:ef:d0:ce:95:3d:77:80:5b:
e6:64:e8:53:9a:6b:7e:68:19:d3:bb:79:a1:7f:e0:1e:65:20:
ce:d9:52:ad:cb:fb:7c:9e:d5:bd:f0:73:4a:9b:d1:d4:7a:5d:
08:68:54:1c:11:cb:1e:b8:4b:18:7a:a2:1e:5c:2c:c5:d7:84:
1a:1a:3d:24:9d:02:c0:67:dc:1e:fe:d8:4a:76:ff:e2:18:b3:
ce:fa:cc:38:ae:fa:29:a9:55:cc:f3:e3:d0:2b:dd:00:28:54:
ac:57:81:f3:10:c2:31:f8:28:d9:2a:20:5d:58:f8:d1:9a:e6:
c2:7c:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:52:37 2025 by rpki-client