Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/S9cGjm1_FE5PT4vUzDVGwHhUU8I.roa
File: S9cGjm1_FE5PT4vUzDVGwHhUU8I.roa (raw, json)
Hash identifier: 69AJiJKNUyPoiJ1x84aJesWdv5amXDXDdulHmdz9t+I=
Subject key identifier: 4B:D7:06:8E:6D:7F:14:4E:4F:4F:8B:D4:CC:35:46:C0:78:54:53:C2
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 0194282682A789C1426CF261A8F2425C0241
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/S9cGjm1_FE5PT4vUzDVGwHhUU8I.roa
Signing time: Thu 02 Jan 2025 17:53:19 +0000
ROA not before: Thu 02 Jan 2025 17:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49110
IP address blocks: 185.143.40.0/24 maxlen: 24
185.143.41.0/24 maxlen: 24
185.143.42.0/24 maxlen: 24
185.143.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:82:a7:89:c1:42:6c:f2:61:a8:f2:42:5c:02:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Jan 2 17:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bd7068e6d7f144e4f4f8bd4cc3546c0785453c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:7f:c9:05:56:03:00:0c:da:2a:62:0c:3e:
79:38:59:9a:79:9d:c3:25:c8:66:df:81:01:6e:b5:
25:08:12:53:03:48:41:28:c7:ad:ac:ca:ba:51:c0:
c9:e0:51:41:13:03:08:4a:6d:c9:c6:2c:c9:73:2a:
41:87:ec:ab:1f:15:1c:39:c9:36:26:4d:51:a1:9e:
1e:51:cf:a9:34:e8:e4:b0:f4:62:2e:dc:f2:11:d9:
c7:1b:fc:ee:81:fe:da:23:a9:98:9d:2e:a4:7f:bb:
18:ca:68:85:fc:b7:40:21:48:45:e8:40:36:a9:23:
d0:c1:f5:af:f4:5f:52:2e:fa:ac:97:30:09:cf:ea:
c3:03:99:93:4b:19:77:8b:08:45:29:d3:4d:6d:b4:
60:10:e7:85:56:12:a4:24:03:82:b3:71:cc:64:0a:
f6:c4:8d:1b:ef:66:c7:e9:d4:9c:0a:52:67:9f:9f:
dc:48:f7:e0:88:c3:ca:90:c2:9e:73:56:2d:1b:53:
32:cf:22:00:98:d9:20:8d:ed:6c:8f:71:6f:ea:df:
ca:56:96:e2:1b:8b:33:7f:26:ee:6f:87:c2:0d:20:
eb:5e:51:95:2a:27:73:40:2d:e1:69:a5:bf:47:4c:
da:de:16:95:86:1c:af:e9:35:c8:f7:3a:63:f1:d5:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:06:8E:6D:7F:14:4E:4F:4F:8B:D4:CC:35:46:C0:78:54:53:C2
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/S9cGjm1_FE5PT4vUzDVGwHhUU8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.40.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ea:b8:0e:e4:7f:cb:30:ef:c7:50:69:da:21:4a:3e:d3:8a:
03:42:24:83:04:89:db:82:a3:58:81:d6:19:8a:f1:06:3b:e8:
ea:a0:62:f6:75:ea:9f:83:9d:da:aa:af:24:2d:38:6d:4e:de:
80:aa:cc:c2:92:eb:fd:82:92:61:7e:59:1a:f7:e2:4a:f0:06:
6d:0d:f7:00:96:22:08:81:4f:ea:42:3b:9c:f8:4a:d0:9e:0b:
ed:35:ea:be:e2:88:88:9a:38:25:a4:9c:41:1b:93:8c:14:b4:
6e:2d:e5:f0:01:e1:50:d0:20:6d:e6:00:2d:54:71:5e:60:c5:
b3:51:44:4f:8c:cc:c8:cf:3d:03:65:16:ca:af:ca:55:a5:47:
0e:68:d1:e5:4c:b8:bf:61:5f:0b:82:04:7c:f2:86:cb:a7:0f:
65:97:03:51:d4:ce:8f:61:ef:57:8d:cb:ab:43:cf:b6:d5:09:
64:41:df:55:f1:c1:1e:57:ea:47:03:b5:22:db:94:ef:0c:c6:
8e:cd:92:54:ee:3b:ca:5e:b5:bb:7f:e4:4e:39:05:a3:5c:f8:
61:c1:74:dc:c2:27:f8:0c:28:60:6e:ea:47:55:78:97:86:a6:
3e:fa:4d:36:6f:e7:22:3c:06:15:a0:f8:91:7e:cb:99:9c:f2:
f4:5d:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:05 2025 by rpki-client