Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/vAe0qaUyTUIuHmAAhYqj4zN2sw0.roa
File: vAe0qaUyTUIuHmAAhYqj4zN2sw0.roa (raw, json)
Hash identifier: 3z87N8KdJYLCcQ5QrhHjn7HBESoNRNkblDe3tPncPYU=
Subject key identifier: BC:07:B4:A9:A5:32:4D:42:2E:1E:60:00:85:8A:A3:E3:33:76:B3:0D
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 019427B5C79DCAB32BA9AFCCA86CA5058161
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/vAe0qaUyTUIuHmAAhYqj4zN2sw0.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204589
IP address blocks: 185.226.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c7:9d:ca:b3:2b:a9:af:cc:a8:6c:a5:05:81:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc07b4a9a5324d422e1e6000858aa3e33376b30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:78:a2:64:2c:fa:15:43:72:1b:dc:01:d9:
56:d3:27:84:59:b5:ab:da:cb:f9:ea:84:66:a9:d2:
9e:ed:ff:87:6e:57:66:e8:3d:e7:59:98:c0:72:a9:
3d:2b:5a:63:96:2e:7b:1e:37:cf:14:e0:c2:3d:61:
8d:96:f8:ea:e1:04:73:89:5e:24:52:7c:eb:d2:85:
4b:ec:22:b6:60:25:6d:4e:f5:82:2f:fd:ba:8d:b6:
84:6c:8d:6c:75:4a:20:83:2d:63:16:f4:99:76:e2:
60:45:90:29:73:0c:97:fd:2a:ee:be:76:4f:8c:4d:
80:78:3b:c8:3e:66:be:62:b2:ee:6f:5a:d8:36:e7:
15:3e:f9:7e:96:d6:f7:ad:82:77:22:83:a3:e0:9f:
f1:8a:c3:7e:17:e9:14:dc:5a:b4:c7:c2:b2:1d:60:
64:67:0c:4d:dc:7f:18:77:4a:99:df:78:fc:fe:e4:
2f:9b:76:e0:98:da:4d:a2:7b:38:0b:b1:fc:0c:a8:
51:eb:1d:ab:4b:dd:57:37:05:cb:d9:e0:28:f9:0a:
1d:90:7b:1a:a7:66:f7:a1:65:7c:30:0f:f3:40:a4:
57:5d:b7:67:85:1c:79:2b:f3:c8:89:56:2d:85:d9:
79:18:3f:91:39:d0:a6:21:14:19:22:b8:13:24:76:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:B4:A9:A5:32:4D:42:2E:1E:60:00:85:8A:A3:E3:33:76:B3:0D
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/vAe0qaUyTUIuHmAAhYqj4zN2sw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.139.0/24
Signature Algorithm: sha256WithRSAEncryption
63:39:11:59:c0:92:8e:d6:9d:a1:20:ef:d2:80:b9:ea:ce:12:
fb:9b:e8:b0:89:fc:7f:82:e4:ce:a1:e4:3b:62:54:1b:8b:d3:
17:85:59:5e:20:3c:63:8c:b4:7b:85:93:8d:71:37:13:41:83:
7f:68:8e:e2:78:07:f6:15:2d:5a:69:00:e5:25:25:f9:9f:01:
5a:33:4d:d3:5d:43:ff:3f:a0:d5:86:36:2a:df:08:c3:2c:11:
90:1b:a3:f1:b3:fb:b6:05:a8:a5:fb:1d:9e:37:7b:a3:f9:65:
ec:26:7f:b8:82:95:67:9f:14:fd:04:20:97:f5:45:e5:5c:1b:
76:8b:32:25:d6:5d:f3:ba:de:31:5d:af:b4:a5:a7:81:6a:06:
2f:29:06:fe:19:f9:46:46:48:73:90:1a:ba:b8:4e:ee:e4:ca:
23:90:ac:28:83:69:9b:6d:89:0a:d3:01:a8:0e:62:10:54:c7:
c2:00:b7:59:1d:9f:18:55:0d:6c:a5:74:73:1d:80:f7:ed:43:
f2:9d:e6:0f:c3:d2:d0:8b:30:7b:8e:4e:35:10:33:9c:81:3b:
e8:58:b6:e4:91:a6:50:ee:46:d6:ad:c7:98:2d:87:85:01:b0:
c8:36:4a:cb:e9:ce:89:57:9f:d7:c8:79:40:93:70:4e:8f:0c:
d2:64:d4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:08 2025 by rpki-client