Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/N35ogLyeBi2BuFWlUXcGcxqHzqk.roa
File: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (raw, json)
Hash identifier: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=
Subject key identifier: 37:7E:68:80:BC:9E:06:2D:81:B8:55:A5:51:77:06:73:1A:87:CE:A9
Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial: 01942669F5D7FDBF5AE58B4E234FC308295E
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/N35ogLyeBi2BuFWlUXcGcxqHzqk.roa
Signing time: Thu 02 Jan 2025 09:47:45 +0000
ROA not before: Thu 02 Jan 2025 09:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200934
IP address blocks: 185.107.123.0/24 maxlen: 24
2a00:cb40:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:f5:d7:fd:bf:5a:e5:8b:4e:23:4f:c3:08:29:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Validity
Not Before: Jan 2 09:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=377e6880bc9e062d81b855a5517706731a87cea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:00:ae:f3:c3:d8:db:61:2f:99:60:dc:8e:
f7:b6:d8:e6:95:e6:97:60:15:9b:57:aa:77:2c:f3:
f2:25:93:7a:62:0c:a5:47:91:6e:7b:88:84:d7:91:
11:d8:a4:cb:da:7f:af:eb:2c:3a:70:c7:9d:4e:70:
fb:ed:f2:98:80:cd:84:a0:8e:4c:11:5e:76:36:c6:
ec:80:dc:d6:4e:91:40:33:fd:af:d4:bc:21:92:aa:
40:7a:47:62:cb:dd:e2:c6:c7:d8:a5:b9:43:e6:26:
7e:54:97:c0:17:75:dc:b0:45:30:3b:16:18:94:67:
fc:1a:fe:eb:fd:43:1b:8a:50:e9:1a:23:ad:8b:63:
6a:98:e8:68:3d:7e:ff:7c:ed:c8:94:65:aa:d4:d6:
a0:3b:68:f6:b2:32:ce:00:c8:db:52:a0:3b:ce:11:
2b:44:ab:97:cb:ae:44:84:1a:c1:f4:58:44:32:7e:
e4:8b:ef:df:49:cf:38:13:2e:b3:a7:c8:35:8f:3b:
6b:df:1a:2c:3d:91:e8:e8:62:94:72:e4:14:41:a9:
b1:25:27:ef:d2:bd:03:e7:98:97:61:17:62:45:f9:
a8:a5:56:a7:2a:14:ec:74:59:8c:3f:c2:61:22:33:
96:d7:2d:1b:2e:f8:7c:eb:19:70:b7:ef:ad:ce:cc:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:68:80:BC:9E:06:2D:81:B8:55:A5:51:77:06:73:1A:87:CE:A9
X509v3 Authority Key Identifier:
keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/N35ogLyeBi2BuFWlUXcGcxqHzqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.123.0/24
IPv6:
2a00:cb40:200::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d4:2a:20:04:a4:d5:b7:34:11:c6:13:79:61:e3:62:1c:d5:
f7:e9:cc:71:b7:1d:9c:84:43:3f:86:0b:84:b1:cd:15:2a:88:
22:19:1a:f3:3e:f0:b0:2f:cf:6f:2b:13:b7:08:c5:ff:31:94:
72:c1:a7:9c:7f:5e:f5:5f:3a:8e:ee:32:22:75:15:9f:8f:8b:
dc:83:6b:ab:72:81:bd:c6:3d:af:44:62:4e:3a:ef:09:36:6e:
53:68:cf:ae:d7:46:ec:c6:40:e9:26:a8:8e:d4:f6:57:2b:e1:
1c:5c:3e:72:a5:b7:36:68:d7:63:28:2b:82:46:42:cd:c6:63:
89:b1:4f:77:bb:45:7d:49:14:10:35:13:51:b9:da:a9:92:19:
cc:a9:38:24:1b:06:c4:7d:89:94:e5:47:6b:c0:4a:e2:6a:7c:
b5:9a:d2:96:89:af:c6:60:71:d1:17:f3:9e:72:c9:a5:65:3c:
0e:62:a0:08:86:ef:c9:7b:17:e7:7e:67:d0:18:91:a4:64:b7:
68:07:88:35:a7:bb:5f:54:21:41:2a:b3:3a:d4:bf:31:7e:1e:
67:69:58:a0:00:87:ac:4c:42:e2:4f:f2:71:6d:cd:c9:18:3b:
41:5d:05:12:35:aa:15:c0:8b:22:1a:d6:4e:bb:5b:92:df:e3:
04:7b:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:07 2025 by rpki-client