Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9EsFTJPfhrHzuggwv3Tacy86NPc.roa
File: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (raw, json)
Hash identifier: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=
Subject key identifier: F4:4B:05:4C:93:DF:86:B1:F3:BA:08:30:BF:74:DA:73:2F:3A:34:F7
Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial: 0194266A3E4D5A064111748F69778DC9AC51
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9EsFTJPfhrHzuggwv3Tacy86NPc.roa
Signing time: Thu 02 Jan 2025 09:48:04 +0000
ROA not before: Thu 02 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4224
IP address blocks: 185.220.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:3e:4d:5a:06:41:11:74:8f:69:77:8d:c9:ac:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Validity
Not Before: Jan 2 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f44b054c93df86b1f3ba0830bf74da732f3a34f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:95:e3:00:69:4a:98:07:f6:a3:4c:f9:6d:
dd:5e:79:ce:a2:c7:c5:4b:3b:dd:73:62:9c:98:d3:
9a:a3:03:be:c8:01:ce:15:4f:1c:37:32:37:e7:58:
fa:51:47:82:75:44:e7:16:2f:1f:90:a8:13:4b:9d:
48:fa:8b:5c:1f:80:e4:04:c4:28:35:08:a7:ee:0a:
21:30:b8:a1:b1:62:63:36:55:c6:d1:73:fa:c9:78:
72:4d:ff:95:d1:f2:e1:e7:5f:8a:6d:23:20:5e:b7:
39:d4:69:13:e0:9b:a2:b1:f1:53:57:64:f9:8a:55:
93:6e:81:df:0b:60:c6:e0:57:e6:64:3d:1c:15:cf:
91:f4:8d:77:44:d1:07:d6:0e:ed:ec:f2:91:0b:51:
64:2a:83:cd:3c:99:08:bc:b8:52:5c:b4:6d:67:8d:
0e:c1:a4:c1:40:0a:8e:02:cb:b8:ed:81:13:d9:e3:
96:41:6c:3b:2b:3a:70:83:a7:2b:7e:1e:fc:6f:12:
23:22:96:d8:ce:2e:d8:1d:02:7d:74:91:28:c1:50:
a6:ca:8d:93:ea:46:b3:c0:53:cd:8a:fa:29:7d:6b:
66:7b:19:e2:b9:c4:a3:39:8a:5e:40:83:de:30:fc:
e9:d5:6b:51:74:e1:f9:ca:27:ed:79:3a:d2:21:c5:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:05:4C:93:DF:86:B1:F3:BA:08:30:BF:74:DA:73:2F:3A:34:F7
X509v3 Authority Key Identifier:
keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9EsFTJPfhrHzuggwv3Tacy86NPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.103.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:12:ec:39:39:2e:c8:6a:6d:cc:5e:5b:b8:b8:6d:77:b4:78:
d3:c3:9e:d5:07:f3:ca:62:db:21:53:45:24:3c:bb:e6:00:c7:
76:ae:0a:95:4b:06:b5:4d:e4:ab:1b:45:dc:d6:4c:5a:c4:05:
df:20:20:8d:af:1b:f3:ce:86:d8:e2:e7:ac:ab:9d:19:aa:fb:
9e:ad:32:7e:68:49:03:6a:c6:81:36:22:29:f6:3a:66:5d:7e:
f2:42:5e:53:4e:28:df:5b:be:50:c0:11:22:e8:20:d3:9d:f2:
8f:64:46:56:65:35:e2:0c:01:96:ac:20:16:27:9a:22:13:17:
1c:a2:22:97:95:3b:82:a1:42:d4:6f:78:f7:ee:ba:8d:87:b5:
e6:16:cd:0a:ff:40:64:2e:18:d3:56:34:77:90:89:56:7c:ea:
4a:c1:4f:3e:bd:75:9c:13:d3:bb:24:32:44:b5:66:da:31:c8:
b6:50:81:0b:47:ce:c6:e1:e2:66:a9:c2:49:18:0a:0f:4b:54:
6b:a9:1f:c4:90:5f:5e:b0:ce:8a:5e:ac:ff:bd:16:10:e4:3e:
d6:0b:c5:ac:6f:23:02:81:1f:9a:84:7b:21:b3:28:6b:e2:7f:
f7:d5:f3:ac:4c:3a:15:e4:1d:c6:d0:42:62:5f:e6:79:45:ac:
c4:93:5d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:44 2025 by rpki-client