Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/8d3irncdHLZkdRnMP5XTaUSwUDg.roa
File: 8d3irncdHLZkdRnMP5XTaUSwUDg.roa (raw, json)
Hash identifier: rzsl5FRJP8PNH7SlWyQWAee7OQ1otGN4ArKngJgMF9U=
Subject key identifier: F1:DD:E2:AE:77:1D:1C:B6:64:75:19:CC:3F:95:D3:69:44:B0:50:38
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 01942444966E582D2351C92F316638F57B3D
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/8d3irncdHLZkdRnMP5XTaUSwUDg.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16322
IP address blocks: 185.178.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:96:6e:58:2d:23:51:c9:2f:31:66:38:f5:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1dde2ae771d1cb6647519cc3f95d36944b05038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:ca:65:93:bf:74:0f:6f:9f:2c:89:9b:bd:
e0:ac:6c:50:ce:89:b0:91:24:eb:64:ea:c6:38:44:
f4:fe:26:f1:a8:df:35:f0:38:35:25:16:6a:8f:ca:
b4:af:cc:a1:76:2b:76:ac:78:01:44:93:c6:2e:1c:
46:c1:3d:75:5c:9e:1a:14:0b:29:31:53:59:e5:87:
83:42:1f:d5:10:8c:a2:68:28:67:be:00:b4:da:11:
23:53:e6:38:ba:4b:63:f8:4f:a2:c9:33:1b:ad:33:
a9:c9:f8:30:ba:93:cc:89:00:f2:d5:f4:47:c0:df:
71:03:00:62:2f:28:e2:83:f1:a4:0a:0d:2f:ca:19:
1f:61:9c:6a:af:5c:ce:20:a9:c6:6e:66:9e:7d:e2:
f5:ba:91:16:05:78:c1:78:a8:26:85:1b:5f:1c:f5:
74:7e:c7:9f:ba:61:d8:e2:b1:f0:79:a6:4d:0d:45:
5e:e1:a0:d5:91:8e:0d:65:8a:77:88:f5:d0:8d:3a:
06:2f:e7:88:94:9b:dc:ce:8e:cd:d4:45:7e:6f:f5:
b0:fd:e8:b9:33:4d:a4:2f:20:d4:c8:79:e6:3e:1d:
7b:e6:6b:19:51:42:10:2d:78:83:81:d9:2d:26:6e:
06:95:8e:18:23:ff:4f:36:f0:74:1b:57:8b:57:fe:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:E2:AE:77:1D:1C:B6:64:75:19:CC:3F:95:D3:69:44:B0:50:38
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/8d3irncdHLZkdRnMP5XTaUSwUDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.105.0/24
Signature Algorithm: sha256WithRSAEncryption
01:fb:84:a8:17:02:69:c4:1e:eb:39:4c:b6:38:e9:e8:6e:48:
db:9f:12:a5:e9:47:66:41:1d:34:ed:00:a2:bc:ce:6d:65:b3:
62:56:d0:11:f9:d4:a6:4e:67:14:61:52:fe:2d:cd:4e:cf:89:
2b:d7:be:70:07:99:01:64:4d:8e:6a:22:49:8b:d3:06:ed:e8:
84:80:f8:4b:b9:8a:c5:73:17:7b:f2:83:f4:14:28:7a:fe:fd:
34:fd:e8:22:ed:e0:58:2f:3b:1d:22:99:e1:be:98:cb:6e:dc:
37:08:02:a8:f8:76:94:2c:11:4b:10:0d:26:44:7e:3e:01:85:
5d:83:09:1e:bb:78:dc:05:4a:f4:9b:1b:33:ef:5a:2b:5b:ed:
33:1a:7f:2c:2e:d3:21:6b:43:2c:b3:69:1e:c5:c4:d2:f1:aa:
d7:c4:9f:ba:88:d5:36:09:f1:d6:b5:86:f4:d7:d1:4f:c6:24:
9b:1f:d9:f7:dd:7c:1a:1b:d3:34:fc:42:db:38:b8:e2:7b:ec:
9f:2a:e0:35:5e:98:11:0a:4b:d5:9c:7c:03:cf:70:0b:3e:3b:
17:7a:56:10:f6:96:1d:8a:bb:03:c3:42:e5:25:01:10:e4:c8:
8d:e6:8e:ce:09:cb:e5:c0:d0:1d:c6:18:9b:e0:25:d4:9f:9d:
df:4b:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:50:04 2025 by rpki-client