Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IAzqdn8T7YdNyO_1MwF05fnfhg0.roa
File: IAzqdn8T7YdNyO_1MwF05fnfhg0.roa (raw, json)
Hash identifier: RbUdJCkjAvUXn1j92a7Y8iwKWqkY2Nv32RhDVJcutnk=
Subject key identifier: 20:0C:EA:76:7F:13:ED:87:4D:C8:EF:F5:33:01:74:E5:F9:DF:86:0D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247B774E2D72403DCE4F5D12AAED7D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IAzqdn8T7YdNyO_1MwF05fnfhg0.roa
Signing time: Thu 02 Jan 2025 17:51:06 +0000
ROA not before: Thu 02 Jan 2025 17:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43824
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7b:77:4e:2d:72:40:3d:ce:4f:5d:12:aa:ed:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=200cea767f13ed874dc8eff5330174e5f9df860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:7d:37:03:7c:4e:af:a6:7d:2e:69:a7:c5:
16:54:e5:ae:dd:ce:3d:45:61:1e:d1:20:28:69:f3:
ae:d7:74:7b:00:6b:46:8e:82:d6:6d:91:ec:ca:2b:
f4:7e:82:7b:01:b1:44:f0:3d:92:d1:e5:f7:a6:37:
a6:67:84:78:00:e0:b1:72:30:91:aa:b8:c0:01:b0:
bc:ba:ad:a0:43:57:bd:85:70:4e:cf:b6:74:39:aa:
2c:a2:f9:0b:f1:ec:a7:82:81:50:5e:16:6b:f7:aa:
bc:ab:e6:e5:c1:40:d8:4f:88:97:c6:ad:fe:86:b5:
f0:05:21:99:5e:d5:54:37:9b:14:01:60:41:25:42:
2a:50:6e:c0:34:21:2f:7e:21:ba:0e:b3:c8:4a:98:
c1:89:ac:f3:6d:ef:ec:d1:df:55:68:8a:0a:36:8a:
ec:f0:eb:f0:33:02:57:31:52:a1:e3:99:63:2d:40:
c4:f3:52:2a:bf:90:d2:b5:02:33:44:58:b2:88:58:
db:72:05:06:fd:5f:84:6a:a8:80:dc:50:81:74:6b:
c5:c5:bb:83:0b:19:e9:07:47:71:fb:be:bd:f2:33:
f6:74:b5:ad:1c:fc:5e:8d:fc:73:46:10:65:cd:19:
1a:0f:45:d8:fa:27:3b:77:66:04:05:47:30:17:8d:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:EA:76:7F:13:ED:87:4D:C8:EF:F5:33:01:74:E5:F9:DF:86:0D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IAzqdn8T7YdNyO_1MwF05fnfhg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5e:39:73:5f:46:14:a8:80:24:28:e5:a7:36:bf:23:49:96:
c0:b7:67:3c:3a:78:06:f0:32:6d:c8:b7:b4:7f:f9:ab:35:d8:
db:4a:00:57:d3:ab:a8:00:81:e8:96:c9:89:d6:be:63:da:fa:
33:ae:56:40:88:59:8b:3b:5d:b5:3f:84:a8:a4:99:c7:ef:a0:
b8:9b:5a:2e:47:3d:e4:69:c4:15:90:87:68:e3:a9:31:2e:f4:
fb:1e:db:18:d0:5a:5d:62:e0:18:ae:c8:da:73:da:3b:26:d9:
e8:aa:31:5f:8d:74:3d:c2:08:00:e5:32:84:19:d4:15:fe:16:
ec:e6:a8:b8:35:f1:da:b0:86:d4:9f:b7:a0:44:25:f2:8e:b7:
6c:f4:46:73:ec:ce:39:cb:bc:bc:6b:9d:dc:84:1c:c4:7f:d8:
61:6d:66:ef:07:ce:5c:c8:bd:f2:73:ad:89:68:3c:27:69:d1:
f3:35:be:27:33:ce:cc:53:44:30:ef:d1:45:db:f5:16:38:60:
df:bc:4e:7e:d0:49:b5:62:4e:57:65:56:38:9f:3b:2c:d2:00:
b2:fc:1b:6e:62:38:43:c3:10:5e:c4:7d:1c:75:7d:95:33:b6:
ae:b6:c6:1f:0b:87:f2:34:7b:1c:ab:78:bc:f8:90:a7:ef:9e:
b4:32:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:55 2025 by rpki-client