Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa
File: R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa (raw, json)
Hash identifier: LseYWFgGf5p0B/ygA2vm5MY1yPEkvBvDwKu8LwSap5c=
Subject key identifier: 47:DA:99:F0:D7:78:03:28:AE:99:00:98:6A:05:C9:23:57:1D:8C:99
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 01942521671C4A61C37BE3C7ABEBBB7E5F92
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.135.128.0/24 maxlen: 24
195.191.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:67:1c:4a:61:c3:7b:e3:c7:ab:eb:bb:7e:5f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47da99f0d7780328ae9900986a05c923571d8c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:a2:a4:72:a5:fa:dc:86:57:dd:5a:05:90:
91:0f:23:94:4f:6d:b3:f2:02:e7:e2:c3:e9:20:5b:
e8:20:5a:22:c5:20:54:3d:06:24:c3:52:3c:19:f0:
50:fe:e8:bb:f2:4c:23:a3:3d:a8:30:73:fd:77:d8:
0c:03:d3:36:c6:9e:17:d0:33:bd:d8:73:c8:aa:1a:
a5:79:0d:55:8a:2d:7b:61:08:ba:99:0d:46:98:3c:
96:e9:01:78:3d:c1:47:dd:4b:b3:79:83:da:bf:bf:
ee:f6:fa:c9:e8:ff:2f:62:06:c1:ac:74:8f:bf:7c:
9d:78:0e:80:e0:a5:ac:68:08:dc:bd:fb:c8:ec:3f:
94:dd:c2:4d:45:4d:b1:b0:43:bc:2c:69:40:81:2b:
6d:3d:f2:12:ce:7d:d2:31:88:18:2e:b7:a1:2a:26:
b0:54:9b:29:a5:59:95:06:25:6d:53:c8:51:31:26:
cb:9c:d2:0a:2c:74:06:59:00:8e:3c:25:ab:b8:bb:
f1:63:86:23:cf:9a:31:08:90:bc:8a:bc:ee:74:a8:
4d:ae:78:5c:56:c7:79:4d:16:1f:59:1b:d5:bd:38:
05:04:0e:e3:5d:33:c2:a2:82:b0:bb:11:fa:c2:33:
d8:1e:ef:af:62:d1:a0:4a:18:0f:c5:89:7f:08:65:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:99:F0:D7:78:03:28:AE:99:00:98:6A:05:C9:23:57:1D:8C:99
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.128.0/24
195.191.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ba:4f:1f:72:21:1e:74:ef:12:d2:7b:a1:b8:74:6e:28:62:
b0:56:f0:b4:1a:00:6b:a9:98:2e:a6:be:29:71:41:13:e9:e4:
d0:85:dd:26:df:57:58:ea:c1:07:99:59:d8:04:e4:90:7d:8a:
7b:d9:65:3a:61:ad:cb:f8:d2:7e:3d:8f:c9:4c:e9:8e:dc:56:
a6:6e:5c:c1:97:06:84:57:2a:a7:80:e4:b4:a4:07:27:ea:59:
5f:7c:71:cf:77:1a:4a:9f:5e:3b:26:5d:2d:c1:32:3a:a8:d1:
6c:05:cc:06:38:9a:a3:0b:9d:15:29:4f:b5:81:e7:82:bc:c1:
61:60:61:e5:da:a3:fb:b9:fb:be:e7:f4:ea:14:a3:36:66:e8:
46:b2:73:09:f1:ba:97:a2:90:7a:8f:59:a8:71:a4:e5:09:11:
be:ff:19:d2:2b:35:7c:7d:b2:29:74:de:a6:03:47:79:fc:0d:
f9:5f:74:ee:4e:44:65:1f:af:7f:31:5b:6a:8c:f1:aa:56:41:
b3:e2:ca:fa:af:bb:ab:f3:8e:53:13:ad:94:47:67:af:62:42:
c6:ce:82:3a:ac:5e:e5:72:41:02:f0:58:13:16:71:46:35:9a:
7d:42:c1:9d:01:9a:bd:81:24:ce:e6:48:2c:24:71:b1:9e:00:
f2:9e:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:32 2025 by rpki-client