Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/boRpBmGc0eZNnyfQLiBFEjpwyGw.roa
File: boRpBmGc0eZNnyfQLiBFEjpwyGw.roa (raw, json)
Hash identifier: wO79maPC+9n5444HeSY5qyYVhUjcDEwlU6RmRAWg4SQ=
Subject key identifier: 6E:84:69:06:61:9C:D1:E6:4D:9F:27:D0:2E:20:45:12:3A:70:C8:6C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824838B28E485872DA8F925DED54E73
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/boRpBmGc0eZNnyfQLiBFEjpwyGw.roa
Signing time: Thu 02 Jan 2025 17:51:09 +0000
ROA not before: Thu 02 Jan 2025 17:51:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48449
IP address blocks: 185.226.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:83:8b:28:e4:85:87:2d:a8:f9:25:de:d5:4e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e846906619cd1e64d9f27d02e2045123a70c86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:36:65:04:8e:f6:dc:8b:19:89:d9:82:84:
4f:33:d6:6e:08:d6:29:af:29:4e:4e:4a:0e:b7:f7:
81:c9:11:36:54:a9:c5:2c:6e:13:e8:7d:44:b0:70:
05:49:94:75:98:0b:24:cc:16:10:c8:14:96:ec:57:
a7:60:cb:3e:0a:23:a6:d6:61:d4:23:07:00:ed:37:
12:8d:78:27:a0:bc:51:a9:07:94:f1:50:b1:c4:e2:
7e:6e:ce:a9:9d:cd:8d:da:fa:48:73:46:27:a1:3b:
26:1f:cf:59:9d:7f:b1:72:12:50:ff:df:e2:55:e3:
1a:0e:83:47:bf:b5:50:c6:10:59:08:7f:4a:82:60:
a0:b5:1b:c3:84:56:1a:58:c1:e2:49:87:ba:53:2f:
9e:07:f0:c1:d6:2d:99:4d:ac:89:b2:7b:a0:04:6e:
c1:3a:3b:bf:77:2a:3a:e9:d0:9f:0a:5b:c8:5b:60:
c9:90:97:b6:e7:d4:0b:d2:ca:40:64:5a:80:66:97:
85:fd:7f:33:0f:4d:4b:af:54:a3:c2:9b:78:a3:50:
17:27:8e:f1:bc:f3:0e:f4:59:f9:cd:39:93:6f:6a:
98:e3:1f:55:87:27:ae:86:29:91:13:91:bf:9c:8c:
87:3c:b3:1d:53:2a:50:a3:06:59:34:0f:9c:5a:52:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:69:06:61:9C:D1:E6:4D:9F:27:D0:2E:20:45:12:3A:70:C8:6C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/boRpBmGc0eZNnyfQLiBFEjpwyGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:79:46:0f:3e:a9:b0:89:a7:60:45:bf:b4:cb:83:8d:45:93:
14:11:08:25:93:4a:1e:2f:fe:59:f6:8f:44:80:f5:86:91:d7:
06:e4:40:ae:c8:88:8d:19:15:f8:65:57:fd:32:06:81:04:36:
ac:a4:ba:24:2a:32:a7:95:cf:43:7e:49:74:b4:a1:ee:84:5a:
05:8d:aa:28:9f:8e:51:8c:00:ef:d2:af:81:df:ed:ad:ee:84:
72:bf:0e:c5:bb:29:e5:45:e9:7a:03:5e:78:a0:1d:19:69:21:
aa:80:00:eb:bf:6d:d2:44:64:93:a1:19:62:5c:d7:a5:f4:83:
c9:a4:80:cd:55:63:e4:1a:41:30:fa:e0:6b:3f:05:e2:b7:4d:
a7:45:5d:3b:86:fc:e2:a8:a2:40:bc:bd:ad:56:71:6c:40:cb:
51:2f:d2:0c:63:cd:3c:22:bf:5a:8b:56:98:18:53:3f:fb:dd:
bb:0d:38:4d:2a:89:f0:32:d4:c1:2d:90:4c:4b:5e:bd:b5:31:
08:c1:78:53:90:13:a0:8b:07:66:c1:88:5a:09:aa:02:a3:d4:
81:0f:cb:6a:2f:e9:b8:43:65:08:7a:e8:a3:c7:77:a9:9f:88:
3d:97:1c:17:90:30:42:70:d6:d4:d7:4d:c8:87:d0:48:85:5d:
8c:02:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:39 2025 by rpki-client