Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/1cCURNbnhc3kVSx5LshZjXVHwGw.roa
File: 1cCURNbnhc3kVSx5LshZjXVHwGw.roa (raw, json)
Hash identifier: 9CYah/f0+YHG95521mbKC2yWBj7VliIIkMmUm02v1aQ=
Subject key identifier: D5:C0:94:44:D6:E7:85:CD:E4:55:2C:79:2E:C8:59:8D:75:47:C0:6C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 019421B2562078FCEBA34090560F5C01F3A5
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/1cCURNbnhc3kVSx5LshZjXVHwGw.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206830
IP address blocks: 185.172.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:56:20:78:fc:eb:a3:40:90:56:0f:5c:01:f3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5c09444d6e785cde4552c792ec8598d7547c06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:29:2e:ef:62:90:9b:77:bc:76:d1:13:1d:
06:38:49:6b:6b:83:ca:1b:35:c2:1d:19:43:26:65:
99:3c:3c:21:5a:76:3d:c5:d7:33:99:e2:a9:e8:e0:
bd:16:d8:7f:8d:8d:7c:09:ec:1f:86:02:a4:76:65:
ed:ee:7f:ba:7e:0a:97:5d:fc:5c:4d:45:cf:b7:76:
57:02:67:39:97:d5:59:f7:b7:f7:be:aa:c9:e0:02:
c9:82:fe:77:be:d7:14:87:fc:d0:8a:54:ba:60:ab:
b8:30:9f:97:82:b6:55:39:4f:61:58:c0:2d:bd:71:
b6:1c:90:5d:a1:a9:09:99:5b:53:3e:0f:b9:49:c1:
af:8d:a5:c7:7c:5d:32:68:42:ed:52:1d:62:4f:b8:
e1:eb:da:ef:45:1a:6c:b6:4a:5b:ac:34:22:d2:14:
22:04:f2:98:b2:b0:d1:b0:21:40:66:10:f3:ea:e6:
a5:e1:d3:78:ba:62:9b:76:f3:b4:75:45:e4:1c:ba:
79:32:64:15:ce:c8:e5:d2:63:2c:37:ad:bf:de:db:
de:fe:0b:5d:bf:7d:41:be:e7:85:8b:dc:b9:17:a9:
5f:ab:cb:b1:e5:10:86:fd:7f:8a:ef:89:c5:5a:d0:
a1:57:b0:e8:d9:6b:74:76:61:34:e7:59:e7:96:30:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:94:44:D6:E7:85:CD:E4:55:2C:79:2E:C8:59:8D:75:47:C0:6C
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/1cCURNbnhc3kVSx5LshZjXVHwGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:20:f3:a4:e4:8e:4b:a1:49:1b:e6:a6:8c:62:b1:55:85:9b:
63:91:3e:62:7d:4d:8a:20:a9:72:ac:c7:61:7f:cd:87:d5:00:
ee:8a:90:dc:b4:f3:84:20:f6:ef:a1:ba:66:52:15:36:bd:18:
b3:61:1f:7a:9d:80:4d:c0:00:01:a5:3e:ff:bc:56:6a:c4:b8:
39:0c:b6:50:2e:f0:b8:8c:64:53:80:d7:8b:c1:25:e4:9d:38:
28:f6:63:f0:46:5a:0c:d7:fd:62:05:af:40:c0:82:07:ed:74:
10:dd:68:8d:4f:e8:17:68:2f:2c:f1:f3:87:c8:5a:dc:25:be:
2f:8d:c8:57:57:fa:6a:24:1b:eb:4c:64:1f:9a:b3:f3:8a:5a:
cb:2f:93:24:2d:02:e3:d2:36:7f:0f:83:b3:2f:3d:50:ee:9e:
3d:d3:84:fb:9b:e7:f3:0a:b3:6d:a2:7d:d8:59:74:fa:95:d0:
27:bc:64:6e:ff:5b:19:2f:d9:a7:e1:d9:dc:a5:3c:c2:66:46:
31:84:82:40:af:c7:56:41:4e:b9:ed:02:b8:5b:c0:3a:01:64:
c3:4b:92:dd:c4:e2:6b:11:0a:af:d1:e7:65:86:f5:2d:94:11:
b0:c5:b8:fd:f8:b7:8d:b9:70:c7:6a:cb:03:6c:15:6a:12:ea:
b0:f6:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:36 2025 by rpki-client