Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1W2X8UZgUZ1ZMiyd65ayj98OWZc.roa
File: 1W2X8UZgUZ1ZMiyd65ayj98OWZc.roa (raw, json)
Hash identifier: 4/ABOdgA5nMnmIPAmoGB83iKZt2vrAvZOjCF7OP8O1s=
Subject key identifier: D5:6D:97:F1:46:60:51:9D:59:32:2C:9D:EB:96:B2:8F:DF:0E:59:97
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422204524755FEAAB11622E8FBE96D471
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1W2X8UZgUZ1ZMiyd65ayj98OWZc.roa
Signing time: Wed 01 Jan 2025 13:48:47 +0000
ROA not before: Wed 01 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 185.194.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:45:24:75:5f:ea:ab:11:62:2e:8f:be:96:d4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d56d97f14660519d59322c9deb96b28fdf0e5997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:04:f3:3d:50:de:47:43:60:ae:2d:ad:62:
92:10:64:04:d4:bb:44:2b:ce:74:62:e6:36:c5:68:
ee:12:70:c9:11:91:55:a4:a1:27:ed:5a:cf:09:22:
4a:33:03:19:1d:33:f3:2c:5b:df:f6:ad:28:b4:91:
ec:a3:ce:8f:39:30:df:a4:86:af:83:f9:1e:31:4b:
c8:3e:bc:6a:fa:d7:8b:a4:47:80:5b:f9:7e:27:b5:
6e:df:1c:d4:28:24:b7:65:da:4d:83:e4:83:9b:82:
72:ff:bd:92:57:35:9c:c4:69:03:d5:b0:3d:2a:3e:
8a:4e:a9:bb:72:61:7a:c8:02:6d:1a:c0:5b:5b:d8:
a8:c2:a8:8c:ff:29:7e:2c:c5:4b:49:f4:73:6c:39:
1d:2e:5c:50:3b:54:6e:6a:ae:56:d4:87:c1:32:e1:
e2:c7:42:30:6e:9c:be:3a:f7:16:17:9b:7d:d8:0c:
f8:02:4f:77:f1:51:12:58:c3:e1:36:7a:ff:1d:ae:
89:22:cc:de:63:10:27:59:23:67:6b:f2:71:d6:79:
78:f9:3d:3d:76:63:44:69:3d:75:2e:a7:2c:58:e2:
14:5b:9d:da:42:d4:28:39:56:6d:a9:61:27:26:1f:
b6:ce:a7:88:fb:a4:08:22:49:17:52:9f:d0:94:92:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6D:97:F1:46:60:51:9D:59:32:2C:9D:EB:96:B2:8F:DF:0E:59:97
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1W2X8UZgUZ1ZMiyd65ayj98OWZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:45:1d:9d:ba:c5:07:17:33:69:4f:d7:12:bd:ff:33:53:f1:
a2:69:58:d2:78:82:55:89:0c:7c:41:42:f4:c1:0c:43:ec:cc:
6f:ac:40:bf:fe:d2:72:a9:3f:f3:47:a2:e4:95:c8:a0:ef:07:
92:da:e2:ec:2e:2c:87:5a:ce:36:9a:5c:26:ff:ca:69:54:f7:
56:67:f5:71:2a:89:a6:a1:b4:14:e3:11:fd:b1:76:57:82:f6:
33:53:5c:6a:cb:71:7c:06:2d:ec:dd:1e:6d:52:d9:2e:f1:b9:
21:fa:37:6d:83:c5:b0:17:2c:c4:66:ce:03:1b:90:a9:9f:06:
e5:b0:82:6f:0d:85:cd:e5:42:8f:2b:a3:b7:24:28:5b:24:2b:
76:61:26:b9:b3:f7:31:bd:d3:51:74:22:35:0d:82:2b:71:dc:
27:77:41:19:be:5a:51:cb:05:18:36:e5:f4:ff:c7:80:5e:39:
c5:0d:82:4d:96:84:6c:0c:44:bb:e0:5c:76:c3:47:04:3e:26:
42:5d:58:20:21:47:24:f4:1e:51:e1:05:fd:89:8d:48:00:13:
3e:ba:ae:79:ac:5f:c2:fb:10:ad:7a:d5:a6:2d:9b:9e:63:f1:
9d:70:f9:b5:31:c4:9c:2c:26:c6:bf:cf:16:1a:49:1c:0c:fc:
f7:e9:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:06 2025 by rpki-client