Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/CYcU3q5RcpGaGqj5ynx4wPBgOhY.roa
File: CYcU3q5RcpGaGqj5ynx4wPBgOhY.roa (raw, json)
Hash identifier: tFUN1Ia57N3XS+nam4CrsPWkbjlmuFRFekSRg4m+d3c=
Subject key identifier: 09:87:14:DE:AE:51:72:91:9A:1A:A8:F9:CA:7C:78:C0:F0:60:3A:16
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019424B3FED6E64C0D6180946DA64E1AB003
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/CYcU3q5RcpGaGqj5ynx4wPBgOhY.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.177.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fe:d6:e6:4c:0d:61:80:94:6d:a6:4e:1a:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098714deae5172919a1aa8f9ca7c78c0f0603a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:6d:8d:f1:c8:dd:a2:65:5c:94:c9:60:67:
84:d3:8e:3d:f1:62:ff:33:88:95:ad:94:36:9f:a1:
2a:46:aa:1a:7d:79:0d:3b:b0:ea:03:f9:06:6a:c3:
64:12:fb:42:80:58:02:f1:45:35:21:f1:65:90:89:
ba:f5:0d:be:7f:f9:40:2a:0b:64:bf:44:bc:76:09:
b2:51:07:d9:cc:da:06:d0:e2:46:8e:96:31:84:95:
a9:80:ba:59:21:36:3b:47:08:2e:4e:fb:bf:6b:69:
f4:98:25:b1:78:5f:64:4c:a9:22:95:35:3e:6f:2a:
0d:c5:95:7c:93:f4:45:85:ca:7e:d0:00:51:c0:8f:
84:e0:3f:a4:03:eb:86:20:8f:0a:69:e5:90:7e:f2:
86:43:49:79:2d:ce:f5:a1:f5:36:9e:b9:1b:06:7a:
44:95:ea:28:26:70:91:c9:ce:d2:03:44:bb:d8:88:
3f:62:bf:58:73:7b:7b:1a:fb:fe:7b:a9:28:49:3a:
3c:5c:f2:6f:eb:0c:1a:22:a0:42:1d:83:73:03:ce:
58:f5:26:98:c4:48:b1:c4:06:e7:53:d3:07:c0:b9:
cd:d0:d8:46:11:ff:01:ed:81:3c:80:2f:5c:d0:60:
c4:bd:1e:c7:5d:a2:d0:eb:d0:63:8f:9b:7e:86:2d:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:14:DE:AE:51:72:91:9A:1A:A8:F9:CA:7C:78:C0:F0:60:3A:16
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/CYcU3q5RcpGaGqj5ynx4wPBgOhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:89:30:f2:fc:bc:82:65:95:6e:4f:c2:50:83:21:60:e2:54:
b4:5c:c8:79:75:64:29:ee:56:31:ba:ca:df:86:45:82:3b:86:
72:8e:1a:b1:36:b9:49:40:e0:56:0a:31:aa:5d:93:90:c2:79:
f7:a2:72:66:61:88:c5:6d:98:52:aa:41:69:37:46:63:6f:52:
1a:2a:51:ec:9d:6f:2a:cb:0b:7f:ae:b9:45:c2:76:a8:e8:ad:
fe:de:cd:a9:b6:f0:9b:a4:1b:07:23:b4:9e:ef:61:39:0a:22:
bd:0e:96:5a:54:cc:9f:42:3a:96:11:6e:79:c2:b7:22:5e:83:
a3:36:d7:c5:d2:0e:78:33:e5:4b:d5:d0:d0:ee:fa:3c:dc:8b:
2e:15:e9:2a:6d:30:bb:73:b9:89:d7:ee:7c:3e:62:96:24:5f:
bf:1d:a2:8f:4d:a0:f3:23:66:1b:49:fc:7b:be:b1:ab:6b:3e:
9b:0c:23:49:90:ad:d3:6e:19:32:d5:39:62:29:23:e3:6a:b4:
9c:bd:00:fd:9b:a4:87:66:4d:a3:29:d8:9e:0b:7b:fb:50:8b:
99:d3:7c:ab:86:3e:47:c3:be:f2:6c:a4:8c:d4:85:7e:d5:7d:
32:9b:6a:c8:32:90:c6:1d:a9:61:49:ca:c4:33:b7:39:b9:ca:
61:0b:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:32 2025 by rpki-client