Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/1HhNu8sG2l0hcVfkxopBJPM0AJA.roa
File: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (raw, json)
Hash identifier: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=
Subject key identifier: D4:78:4D:BB:CB:06:DA:5D:21:71:57:E4:C6:8A:41:24:F3:34:00:90
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0194236978FFCDDE5A3524BE93F4F19CA925
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/1HhNu8sG2l0hcVfkxopBJPM0AJA.roa
Signing time: Wed 01 Jan 2025 19:48:22 +0000
ROA not before: Wed 01 Jan 2025 19:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.44.176.0/24 maxlen: 24
185.44.177.0/24 maxlen: 24
209.127.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:78:ff:cd:de:5a:35:24:be:93:f4:f1:9c:a9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jan 1 19:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4784dbbcb06da5d217157e4c68a4124f3340090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:d2:41:46:22:d9:f2:72:be:4c:50:82:dd:
da:30:21:4a:fb:f7:9e:50:c4:1e:46:0d:20:45:63:
2c:bc:cf:38:d7:ab:2a:b4:23:66:4e:74:47:dd:34:
8a:46:01:a8:80:a1:c2:48:f2:4c:3d:78:07:b3:c8:
a8:85:b3:99:02:3a:45:f6:97:b6:eb:b2:c0:23:71:
86:5d:b9:89:ad:8c:9b:72:81:de:dc:b4:14:7f:a4:
28:d7:b1:e8:29:79:95:72:6f:65:b5:4d:55:b2:48:
90:75:80:a3:76:24:9f:60:3d:ec:0e:2b:3b:8b:3c:
19:66:ba:75:c1:69:31:80:6e:db:a3:72:fe:2a:68:
f4:e2:37:89:17:ef:73:43:51:4c:1d:fb:30:e2:39:
47:f1:0a:38:26:9f:49:c7:d7:42:67:ff:cf:0d:dc:
b9:6c:f2:5e:f7:70:82:59:41:91:d6:e9:63:78:c9:
3c:df:7a:31:51:20:d5:ef:1c:5c:b9:64:93:cd:e1:
9c:4a:a4:55:af:4b:d9:0e:bc:c0:b5:27:42:f1:c8:
bb:a7:90:88:c5:31:a0:d5:d6:54:47:59:4b:5f:13:
44:8d:2b:0a:10:d6:4a:76:da:e1:79:31:eb:a2:0d:
9d:7a:77:23:b7:f3:a5:8b:61:7b:0e:11:75:0c:7c:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:4D:BB:CB:06:DA:5D:21:71:57:E4:C6:8A:41:24:F3:34:00:90
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/1HhNu8sG2l0hcVfkxopBJPM0AJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.176.0/23
209.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a1:31:50:0e:ea:62:e9:6d:f7:e4:3b:b6:dc:74:96:fb:17:
bc:2b:be:37:05:f8:46:7d:1d:63:b9:af:8b:af:e5:36:5e:5d:
fc:48:79:2c:4e:ab:f7:fa:c9:b2:e2:f7:2b:6c:cb:45:57:df:
eb:4b:11:21:eb:8b:a2:c2:37:40:78:5a:73:e9:f2:81:e8:37:
03:fe:bc:e2:8a:60:6e:2c:1b:c6:f5:39:78:64:e5:70:5e:67:
bd:d3:72:bc:d5:aa:9e:8e:03:e2:df:fa:ef:ad:ff:75:0b:1a:
71:43:e8:a4:9a:77:66:7d:f6:af:92:ba:34:1f:e6:2b:2d:4f:
ae:94:ea:18:f4:84:09:a2:34:e7:d1:f2:29:3c:97:46:68:50:
ec:91:e2:6c:85:92:de:fb:12:90:43:c5:b6:f2:7b:83:0a:87:
be:49:e1:95:32:21:59:63:0b:b9:d3:d2:eb:32:a5:8c:9e:c9:
33:d6:26:ba:9a:3a:ff:bb:97:f3:07:87:b7:48:72:49:20:90:
ac:d6:42:40:c5:1e:dd:d5:64:fc:aa:dc:a9:62:53:ce:e1:be:
f4:7f:ed:a2:4b:ed:f4:be:ae:34:82:e4:87:17:61:d0:63:93:
a8:0e:2c:fb:7d:30:2e:3f:56:1b:e6:dd:27:62:f0:ac:60:d0:
9a:aa:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:27:27 2025 by rpki-client