Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/a4N6uZ3zLxFcWudvf4q59eJt-Kk.roa
File: a4N6uZ3zLxFcWudvf4q59eJt-Kk.roa (raw, json)
Hash identifier: A/Eckh4mmsJ3JlwelGysLbD+UYW4yWmGq8d/OLHRzNY=
Subject key identifier: 6B:83:7A:B9:9D:F3:2F:11:5C:5A:E7:6F:7F:8A:B9:F5:E2:6D:F8:A9
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0194282398BDDC5ED011ACD97AC84E912B51
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/a4N6uZ3zLxFcWudvf4q59eJt-Kk.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34078
IP address blocks: 185.180.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:98:bd:dc:5e:d0:11:ac:d9:7a:c8:4e:91:2b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b837ab99df32f115c5ae76f7f8ab9f5e26df8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:b7:cd:50:84:36:15:7e:31:78:4a:be:61:
39:dd:de:66:b9:a7:47:38:d8:2e:fb:64:c7:ee:82:
82:d0:e4:c7:a4:bc:51:7a:d9:40:27:80:ef:bb:5c:
65:1d:9b:54:6d:f2:7e:8b:cd:b2:bb:8b:19:8c:9e:
31:19:9c:71:ed:df:18:54:f4:30:57:ec:b7:2e:4b:
46:8d:09:7a:81:5e:2e:10:1a:b3:23:f6:2d:7a:ef:
ec:a9:cc:87:17:b7:da:5b:e3:e2:39:1f:9a:40:90:
38:d0:8d:72:ac:5f:d5:78:3a:59:d0:58:f6:75:b7:
23:82:90:e6:a9:1b:10:51:ba:8b:8f:1c:21:d5:fd:
3e:46:2a:52:20:fd:17:b8:41:92:3f:5e:ea:bd:57:
1b:51:d3:ae:e0:eb:d0:f7:68:5a:b4:e4:3c:03:4f:
11:83:00:90:de:1a:a5:c9:6b:26:c1:77:b9:56:aa:
5b:b6:f7:6e:ea:1e:9c:de:20:b8:88:e7:d1:c6:84:
c1:2c:f4:78:3b:e4:9f:4a:71:6e:75:d9:2c:ae:04:
69:99:84:b1:94:a5:eb:2a:ce:e4:ec:65:25:b5:ab:
8a:e7:9c:a8:93:e9:37:52:6b:06:1d:a1:20:90:16:
f5:e2:75:ba:07:8b:ba:bc:44:fb:5a:26:0a:a1:2b:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:7A:B9:9D:F3:2F:11:5C:5A:E7:6F:7F:8A:B9:F5:E2:6D:F8:A9
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/a4N6uZ3zLxFcWudvf4q59eJt-Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.128.0/22
Signature Algorithm: sha256WithRSAEncryption
58:82:e5:a0:38:46:60:0f:a9:ef:52:33:56:a9:74:f9:99:a8:
66:5b:cb:15:14:dd:8a:cf:2d:04:e9:ff:e8:ac:d4:ab:d4:a5:
43:25:69:e4:a2:89:cd:3c:32:3e:39:02:02:ef:bd:be:95:0d:
0d:ff:be:bb:d9:cd:0e:a6:ee:51:42:41:8b:48:ed:8f:07:a0:
26:13:8e:e8:22:eb:6d:4d:08:1b:e0:57:99:aa:2e:05:96:62:
87:d4:bb:2c:87:31:54:bb:72:3e:bf:95:4a:e3:66:28:95:b5:
76:bd:d1:bc:83:da:91:86:a4:76:98:ef:c5:80:11:5f:61:9e:
81:cd:38:e2:c4:cc:3a:72:4e:75:b9:41:d4:68:6c:a3:28:21:
16:83:4d:37:e3:b3:eb:cf:9c:38:18:b7:9f:f3:46:01:c0:c7:
1e:d6:1f:87:75:e3:b3:a3:81:0d:87:2e:e9:b6:8d:c7:81:23:
bd:63:40:0c:bc:76:7e:49:83:c4:cc:06:8e:83:1f:90:fe:8a:
16:e9:20:0d:91:73:44:86:d9:b3:92:28:b0:25:00:79:2a:0f:
df:b9:dc:d0:b4:d4:50:0f:b4:5f:0e:11:f1:f1:4b:8f:7e:e9:
e4:6a:64:94:b2:fa:91:40:94:7b:90:0a:78:e5:5f:e6:3f:8a:
c3:95:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:39 2025 by rpki-client