Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pMIZZEHYcO0IlQ8lJ-JaDY1xnJs.roa
File: pMIZZEHYcO0IlQ8lJ-JaDY1xnJs.roa (raw, json)
Hash identifier: KI7tUZnJYI1JaBjFs0d5L727l5SVVoE+xByQFUZQZZI=
Subject key identifier: A4:C2:19:64:41:D8:70:ED:08:95:0F:25:27:E2:5A:0D:8D:71:9C:9B
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 019426D949C37A51B30DEBC9F5B398D2CFC9
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pMIZZEHYcO0IlQ8lJ-JaDY1xnJs.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 185.193.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:49:c3:7a:51:b3:0d:eb:c9:f5:b3:98:d2:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4c2196441d870ed08950f2527e25a0d8d719c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:bd:18:6f:8b:fe:5b:13:4c:d7:83:e2:bc:
1a:3f:a6:d1:47:a0:0c:d3:a3:8d:d1:58:ae:54:f3:
e3:19:eb:1c:14:0d:c6:47:68:ea:6c:1d:8a:ff:88:
03:5b:eb:df:6b:a2:a4:3c:4b:78:5a:93:3c:d2:2c:
9d:4c:c3:81:8b:3e:a7:1d:0c:7e:9d:c6:44:e9:91:
27:0c:8b:d1:84:a6:d1:f1:4f:16:e4:8c:aa:7c:b2:
ac:15:90:3d:33:07:8c:ff:62:9f:0d:98:34:c5:fe:
60:a4:06:ca:9b:a6:4f:ee:d7:42:01:c6:d0:d2:af:
b1:29:a4:43:0d:63:be:f9:cd:3a:ab:bc:70:7f:48:
3e:de:00:99:71:11:10:4a:e2:ee:75:7d:10:d7:fd:
13:17:73:91:51:9d:21:6c:cc:ee:ce:ac:24:7b:67:
2a:b5:af:ab:7f:05:25:f3:a3:ea:30:a8:6f:ac:3b:
d6:23:5d:15:23:b3:6c:38:e5:88:70:f7:0b:fb:ec:
30:e6:ba:bd:53:f4:bf:53:62:9e:2a:7a:cc:c9:a9:
0d:43:7c:d0:ee:a8:ed:f7:b6:c5:f4:b5:a2:ac:62:
1b:39:9f:09:09:fa:9f:89:69:b9:e2:d1:f0:9f:bb:
12:a2:f1:32:68:6c:fe:c1:91:0e:a0:ae:53:41:ac:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C2:19:64:41:D8:70:ED:08:95:0F:25:27:E2:5A:0D:8D:71:9C:9B
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pMIZZEHYcO0IlQ8lJ-JaDY1xnJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.167.0/24
Signature Algorithm: sha256WithRSAEncryption
da:f6:6f:f0:bb:3e:85:6f:f3:69:0d:24:7d:dd:a8:12:e7:18:
36:9b:a3:d6:26:a4:50:d4:2d:c7:ac:52:b4:ce:57:04:15:a6:
91:68:bf:79:a6:82:a3:10:50:fc:60:bc:30:a7:ab:ef:b3:1d:
e2:d8:04:28:43:58:7e:8a:a1:72:4b:57:ef:25:ea:30:41:41:
1a:64:4d:e6:19:f2:20:b8:b0:29:ae:f2:52:a5:a9:50:0a:df:
a9:02:84:53:09:57:79:47:b3:d7:48:c3:b6:df:25:23:2f:a9:
44:eb:76:3d:d4:3c:f0:3e:3f:71:2b:34:9f:b3:d3:69:aa:2f:
7f:de:67:09:2f:f4:57:01:05:f6:34:b4:85:65:8f:72:e6:76:
8e:75:75:62:74:a2:6d:40:20:1f:4a:e2:42:0d:fc:c0:56:ab:
e7:1e:d3:31:59:e4:b0:79:ef:93:01:d7:8c:40:2c:ef:e1:b6:
31:85:99:dc:7a:b2:7a:a4:14:b5:74:90:70:70:7e:3d:31:57:
b6:15:4f:9d:fc:94:05:41:36:87:a5:6b:52:e6:76:02:53:d9:
ca:35:61:d5:4d:38:d5:a3:f8:09:f2:8f:8a:24:33:53:5c:a0:
50:4e:dd:42:e0:47:db:c2:f2:e8:02:f0:7f:6d:82:16:30:07:
f8:09:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:05 2025 by rpki-client