Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa
File: Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa (raw, json)
Hash identifier: S5Af46ICAzl/XprWaWxfdUsVmQ9qZwM6fg2ZXROy37M=
Subject key identifier: 5E:CF:53:E8:F2:B9:8A:33:95:C4:29:82:82:AF:FA:13:60:3F:FE:74
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 0194244496F7337E9C3890B416612F244ACF
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44072
IP address blocks: 185.178.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:96:f7:33:7e:9c:38:90:b4:16:61:2f:24:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ecf53e8f2b98a3395c4298282affa13603ffe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:d9:8f:70:d0:75:58:40:a5:c7:11:a3:91:
5c:89:5d:01:90:ed:af:02:2b:b8:49:7f:ac:bb:5a:
a7:80:26:98:b9:46:34:36:6b:2f:52:47:6e:e1:4b:
b8:6c:f5:74:48:61:e9:ac:a0:2b:79:d8:80:aa:52:
7d:c7:cf:19:26:1b:39:66:04:5f:35:06:99:77:8d:
41:fa:87:11:70:9a:9c:4a:f3:84:b6:ce:cf:9d:2a:
d6:d8:de:09:98:d8:ac:13:db:6b:ea:00:3d:fc:68:
4f:19:41:d0:f4:29:11:12:18:3b:cf:b1:be:4e:df:
c5:17:68:27:8c:9a:8d:cd:66:0f:8f:c9:09:ff:54:
97:7d:d6:34:68:03:8e:5f:74:bc:15:11:46:74:e9:
64:a5:ef:c5:91:55:0f:c9:d2:77:b4:a2:23:7f:fb:
02:18:90:41:d7:3a:5c:89:4b:93:36:30:85:61:8a:
fc:43:b7:88:bf:e3:1b:f4:f6:39:65:20:92:f0:50:
27:71:63:56:ee:60:35:e8:da:26:7a:ba:91:99:74:
29:41:77:3f:7a:bf:2f:ed:fe:64:17:bd:bc:69:51:
96:04:50:b9:e6:ae:4a:ce:ae:da:54:b5:f2:a0:35:
10:2a:ee:0a:68:7b:60:95:c8:ed:f5:43:43:88:4c:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CF:53:E8:F2:B9:8A:33:95:C4:29:82:82:AF:FA:13:60:3F:FE:74
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:40:98:d3:d1:49:94:75:2a:e9:9d:02:5c:67:5a:cb:5c:0b:
6a:9f:68:c8:34:f1:60:21:52:3a:08:34:f7:6b:57:d4:4e:00:
ad:62:15:f3:e0:d2:39:50:07:04:39:8e:10:17:4e:80:97:dc:
c7:58:81:34:23:a9:80:f3:31:00:d3:55:5d:d2:5a:8e:b1:a0:
55:b5:fe:9e:e1:ce:cd:23:d2:29:28:bf:81:a8:22:95:34:d1:
7a:70:50:0b:66:ad:1b:24:3d:c6:6d:cb:85:18:0c:7d:0b:6d:
c2:fe:a7:9b:ba:7f:ae:e5:d1:08:dc:18:08:59:b1:44:f1:86:
c0:db:79:4c:fa:f0:28:9e:e8:a5:45:5a:cb:b3:bb:8e:51:88:
a6:8b:50:e8:15:2f:1d:e3:a6:03:cb:ee:63:27:90:89:c0:36:
94:bc:c8:21:50:8a:88:6b:8b:65:de:6f:c0:ea:70:6a:c9:bf:
84:7a:c0:7d:c9:0f:2e:34:ac:08:62:66:62:03:6d:fd:ce:bb:
bf:57:2b:68:b2:ae:71:31:29:ec:39:55:15:35:d3:57:cb:fc:
e8:f7:53:a4:86:bc:8b:81:00:09:c0:f9:95:40:aa:ab:db:48:
2d:a0:c0:ae:60:e5:fc:bd:65:46:a9:d1:c3:18:3e:20:f8:bc:
f6:d8:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:44 2025 by rpki-client