Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/_udyEbevQeyPMsntui78RQRmYXo.roa
File: _udyEbevQeyPMsntui78RQRmYXo.roa (raw, json)
Hash identifier: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=
Subject key identifier: FE:E7:72:11:B7:AF:41:EC:8F:32:C9:ED:BA:2E:FC:45:04:66:61:7A
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019424B3FFE13C4A751294621F2990DDE61B
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/_udyEbevQeyPMsntui78RQRmYXo.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64286
IP address blocks: 185.177.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ff:e1:3c:4a:75:12:94:62:1f:29:90:dd:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fee77211b7af41ec8f32c9edba2efc450466617a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:5b:0a:9e:32:89:70:53:88:38:ea:71:63:
24:0f:c6:4c:44:56:12:9e:d9:b2:32:cb:84:c5:49:
79:8e:f8:f8:07:22:28:bb:2d:ba:4b:82:a2:cc:72:
68:ce:c8:05:9c:a6:47:1a:6c:13:2c:48:34:31:0d:
5a:eb:19:bf:4b:50:4c:91:41:ba:c8:03:6a:73:39:
81:74:2f:ea:a2:2b:e5:71:9a:59:66:64:83:f7:0c:
07:55:6d:8b:82:5a:9e:c5:25:10:0c:04:5e:8c:03:
10:e4:ff:76:84:3c:b3:d7:ef:c0:6e:47:7c:53:ba:
42:d1:cd:60:fc:3a:0f:76:57:e8:21:01:15:9a:0c:
55:c8:29:09:06:78:8e:ca:71:50:f5:b8:eb:80:74:
77:5c:d8:6c:fc:3a:09:75:77:f4:0c:99:1a:d0:d6:
c5:55:f4:54:4c:fd:64:c5:65:c2:98:67:34:5c:6c:
e1:e5:4d:dc:0c:8e:da:e7:d4:47:f2:d2:22:63:e2:
ff:64:70:33:de:63:87:1a:9d:9e:25:70:da:46:32:
0c:c0:10:e7:8d:4f:35:a2:e7:66:10:ad:80:c3:57:
75:54:a4:d1:42:09:b7:ef:f1:f2:52:4b:47:e5:db:
e3:d0:3f:3e:ac:04:8e:50:1d:ff:f5:39:a4:3c:a1:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E7:72:11:B7:AF:41:EC:8F:32:C9:ED:BA:2E:FC:45:04:66:61:7A
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/_udyEbevQeyPMsntui78RQRmYXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.228.0/24
Signature Algorithm: sha256WithRSAEncryption
68:71:86:e7:55:02:53:2b:1e:7d:6f:3e:86:53:1b:d9:de:5e:
a3:36:9f:66:93:9e:f6:69:7e:7d:87:68:dc:36:db:dd:82:57:
14:35:c7:49:21:b6:55:fc:d4:66:12:7f:e2:ef:61:54:7c:de:
f7:70:87:07:e4:d7:4c:61:03:30:af:cc:76:bb:3d:66:b7:1d:
d1:39:d9:c1:cf:29:c1:55:46:c7:ce:b2:6b:5b:5f:14:2f:b3:
c5:3c:09:cb:9f:03:38:a5:45:eb:91:47:89:e1:6d:f4:93:1d:
71:43:af:db:81:18:3b:65:2e:7f:64:1e:e6:05:2b:60:04:6a:
30:6d:65:81:29:1f:20:67:75:98:7d:a9:c6:6f:41:d3:ba:2c:
2e:7b:0c:35:c9:2f:6a:5b:d5:34:7a:2f:8d:5e:c9:18:e9:f6:
34:fa:30:fe:2b:71:e5:33:0b:45:f9:29:d2:d8:04:28:f2:09:
0c:f1:02:41:45:8a:5a:06:a5:3f:a0:a5:e7:a9:87:0d:bf:5f:
de:5e:ec:7a:21:ff:08:8b:fa:0f:6d:5d:b2:15:c3:9f:57:66:
28:80:85:48:a7:69:06:88:9e:1f:75:bc:e7:00:e2:63:cc:44:
c3:8a:69:a3:29:c4:f7:91:dc:4c:f3:be:0e:c5:89:cb:6f:23:
aa:ee:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:10 2025 by rpki-client