Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/iuhtvnk40PJ3pJsLP6UydbteVKc.roa
File: iuhtvnk40PJ3pJsLP6UydbteVKc.roa (raw, json)
Hash identifier: 05jMo0JsclMskAiLshdThJV1RoVy3g2UV0jsfseUfVw=
Subject key identifier: 8A:E8:6D:BE:79:38:D0:F2:77:A4:9B:0B:3F:A5:32:75:BB:5E:54:A7
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019424B400443261216058D9789D05B694F4
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/iuhtvnk40PJ3pJsLP6UydbteVKc.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397373
IP address blocks: 185.177.231.0/24 maxlen: 24
213.178.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:00:44:32:61:21:60:58:d9:78:9d:05:b6:94:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae86dbe7938d0f277a49b0b3fa53275bb5e54a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:3c:75:96:c3:fb:db:8f:11:e1:a4:5e:65:
80:8e:d3:37:9f:89:a6:e9:a3:a5:11:81:a2:52:3e:
f7:7d:ad:5a:36:e8:f6:89:97:f5:33:de:d9:f0:3d:
fe:7a:15:ed:5f:6a:55:ea:cd:10:3b:ea:6c:23:f9:
c7:09:43:ef:85:89:04:fe:0c:ef:b4:f5:95:f1:c6:
05:77:d3:e8:fa:1a:6d:48:f5:4e:93:55:61:c5:c8:
cf:83:c3:ee:e4:9b:1b:7a:7e:b3:23:d3:da:14:12:
59:7e:cc:e7:31:e3:c1:6b:c5:22:b5:11:5a:58:81:
56:55:69:ea:21:f0:19:c7:fd:b8:f7:d6:64:1c:e4:
c5:c2:05:c3:f2:30:a3:1c:55:53:c4:2f:ea:05:37:
f8:07:c3:4d:a7:2d:4e:eb:20:6c:e3:32:f5:fc:f9:
4a:86:51:55:81:08:f1:e6:85:41:7b:8d:42:04:8d:
0c:05:90:86:76:ac:b7:37:9f:3c:53:d7:6e:c8:db:
0b:85:8c:47:5f:de:94:ac:0a:b2:9f:ec:9b:63:e0:
8f:09:f6:59:cb:41:27:ec:03:93:10:de:ff:ef:5a:
c1:f7:90:7d:00:7b:25:33:40:bf:7a:95:fe:11:a3:
31:91:29:14:8f:ba:85:8a:2e:46:49:fa:18:63:3c:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E8:6D:BE:79:38:D0:F2:77:A4:9B:0B:3F:A5:32:75:BB:5E:54:A7
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/iuhtvnk40PJ3pJsLP6UydbteVKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.231.0/24
213.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ab:eb:0b:ef:52:85:cc:ef:36:8e:37:3c:66:05:cd:a3:d7:
01:70:8b:df:3c:19:5e:f8:a1:a3:c0:99:dd:cf:dd:5e:41:6e:
9d:d3:40:50:86:21:5c:73:e6:86:1e:8d:5a:39:9a:45:0f:a4:
e2:40:17:82:89:6a:41:b3:6f:8e:e3:c3:11:c9:1a:04:f9:61:
b1:83:1d:6a:06:8b:1f:8b:a2:49:fd:cf:c8:a0:a3:11:9c:a8:
dc:ad:f2:c4:2e:5c:b1:88:68:46:bd:7b:38:3a:9d:17:9f:fe:
a3:9b:3c:6d:d2:70:de:ac:08:91:8b:ef:97:b0:45:2b:68:59:
e8:eb:f2:62:21:1d:b9:a1:46:6a:a4:46:33:0e:0e:30:7f:4f:
7f:7e:cf:ba:4f:39:eb:73:61:9e:8b:20:8d:9b:ca:9d:c9:4f:
9f:a6:d1:55:9b:6e:92:89:bd:7a:00:2c:6c:8b:65:bb:35:d2:
64:62:4f:1b:92:b5:e4:b9:7e:5a:18:8f:66:b7:6f:f3:fe:50:
dd:73:74:80:4c:20:44:4d:65:48:7c:91:6e:75:82:7a:ba:e2:
7a:b2:78:e0:d4:f9:c3:77:3a:9f:9a:46:62:75:39:a1:d7:b1:
6a:47:4c:b8:d4:e2:d2:4e:a0:3e:09:98:bb:f6:b6:40:e5:39:
0c:40:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:07 2025 by rpki-client