Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/BZ6xhJfrN5RhRf6aXwKr795wQzI.roa
File: BZ6xhJfrN5RhRf6aXwKr795wQzI.roa (raw, json)
Hash identifier: Sf+y1lLm8gMUQKO4zkjlgPHIcjW4+YLH23G2t7sxkBg=
Subject key identifier: 05:9E:B1:84:97:EB:37:94:61:45:FE:9A:5F:02:AB:EF:DE:70:43:32
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 0194244484674DD379123BE692C647519906
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/BZ6xhJfrN5RhRf6aXwKr795wQzI.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 185.234.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:84:67:4d:d3:79:12:3b:e6:92:c6:47:51:99:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=059eb18497eb37946145fe9a5f02abefde704332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:59:8b:b8:16:df:e9:f5:50:8f:22:60:4f:
42:69:95:4d:42:8b:2f:77:38:2f:be:fc:75:ff:ce:
73:82:e8:db:d7:62:ea:dc:84:1b:c9:5d:aa:8c:41:
f9:00:c1:fb:ed:90:d3:39:f6:16:f6:2f:65:67:51:
7b:70:67:08:6c:6b:d0:fe:fb:24:89:5a:b3:38:7c:
4b:87:01:47:ff:a0:5c:c5:61:7c:bd:89:a0:9e:d1:
63:3a:f4:cd:1c:a1:7f:ad:57:f5:31:62:1f:fe:0d:
d6:89:51:3d:3b:19:67:20:25:f9:34:5d:b0:99:ae:
d2:e9:4d:5f:b0:87:58:8c:74:92:8b:46:6a:ed:ad:
48:02:3a:e8:97:82:36:72:58:48:dd:c3:2b:e7:67:
3e:62:da:b2:8a:c4:0b:e1:08:57:f8:bf:7c:f1:12:
07:24:3d:a0:09:1c:44:4b:56:7f:18:2b:9b:0f:ca:
20:61:28:5e:60:21:07:5d:6a:b5:d8:78:47:60:ea:
b9:af:aa:cd:d9:d5:f0:ae:de:9c:7b:50:ed:92:dd:
87:05:1f:bd:3e:a5:7e:f5:4b:ac:d7:0d:23:cf:17:
75:5d:1c:e9:08:d8:14:76:85:bc:da:46:b5:45:65:
68:e9:62:62:d0:0e:07:d5:4e:fd:15:9e:2f:4f:e5:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9E:B1:84:97:EB:37:94:61:45:FE:9A:5F:02:AB:EF:DE:70:43:32
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/BZ6xhJfrN5RhRf6aXwKr795wQzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
89:44:b3:d3:1d:95:42:77:a4:cc:22:73:e7:78:98:fb:b7:9d:
16:51:f8:73:64:82:ef:5f:c8:6a:0b:e7:f7:56:30:78:a3:75:
30:66:bb:f9:2f:9c:ad:50:f8:91:8f:f5:79:52:2a:02:e1:9b:
00:fd:16:8a:d4:6d:cc:7e:a2:9c:73:2d:c9:36:ac:8b:b9:e8:
a0:0a:57:1e:6d:6a:b1:0e:56:1d:47:e0:6a:e6:f6:d6:68:d1:
d7:87:d5:24:4d:19:ac:fd:81:4e:1e:50:2c:cf:fb:3f:7d:85:
de:7e:e9:8a:4f:f2:b9:27:f9:64:c5:8b:b2:df:44:0e:cc:30:
fe:b1:ca:78:70:87:84:fc:56:42:c5:77:68:b1:53:c2:43:fd:
9d:98:37:cc:06:f8:69:07:65:82:26:af:cc:87:86:5d:6a:a4:
ec:65:dd:29:8b:18:15:f9:bc:74:e7:c3:78:55:b4:7c:c5:98:
61:fd:e1:b7:9b:1e:ab:96:0f:40:99:d7:5c:40:62:1e:2c:8f:
df:54:f5:9f:58:0b:09:86:79:b7:b1:79:5a:c3:c8:17:ac:05:
5a:09:65:3e:d6:c9:34:99:03:d3:59:96:07:8b:01:40:c6:40:
1a:9e:67:5f:a2:34:82:c6:d9:c6:fb:1a:3d:96:32:0f:13:a7:
5b:d7:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:20 2025 by rpki-client