Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rIe-pJOeM4Ko5Py4-qpcL9ZsUTA.roa
File: rIe-pJOeM4Ko5Py4-qpcL9ZsUTA.roa (raw, json)
Hash identifier: DshBHpUQ63kn3o9r+ubhe11CDNMj5cI4A+nqpddwkLY=
Subject key identifier: AC:87:BE:A4:93:9E:33:82:A8:E4:FC:B8:FA:AA:5C:2F:D6:6C:51:30
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01953DAD3949FF7075F2AC2CCD85BA4AE996
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rIe-pJOeM4Ko5Py4-qpcL9ZsUTA.roa
Signing time: Tue 25 Feb 2025 15:15:17 +0000
ROA not before: Tue 25 Feb 2025 15:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29491
IP address blocks: 185.227.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:ad:39:49:ff:70:75:f2:ac:2c:cd:85:ba:4a:e9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 25 15:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac87bea4939e3382a8e4fcb8faaa5c2fd66c5130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:4c:b7:11:8c:5a:07:3e:a2:24:47:1b:18:
fb:df:af:e7:0d:f9:44:08:51:b7:18:f6:1e:53:fb:
b7:df:12:5b:c7:b3:0e:f9:08:1b:58:97:0f:b7:9f:
04:e5:fb:dc:80:85:cd:4c:28:f6:8d:11:07:9a:0e:
11:75:25:bd:66:ba:1e:6a:cf:60:4b:e3:33:8c:ea:
71:c9:8d:47:11:aa:dc:25:5c:2e:50:1b:cd:20:1f:
44:ed:66:ee:31:40:59:26:f9:cc:27:22:20:9d:bc:
70:e7:55:c9:fd:c8:d0:b8:3b:27:b5:00:66:d9:db:
57:7e:32:9c:3f:9b:40:50:4b:4a:35:d9:cd:ff:20:
62:80:65:ef:f9:ba:b0:63:9b:e1:9a:93:6d:f3:73:
64:c7:5e:30:89:98:bc:0f:e3:09:81:1d:17:b3:7e:
50:38:16:aa:ef:66:ff:cd:d1:b1:e2:55:f7:27:84:
a9:09:01:db:96:af:d6:61:26:ad:12:b5:e0:d8:f0:
8a:a4:c8:0a:10:b0:d4:e2:7f:d0:6b:4b:e3:a7:f1:
04:f6:8b:22:8e:b2:6a:94:e9:88:db:04:0c:0a:ba:
4a:3f:a9:4c:01:77:13:9b:e2:ad:11:88:a4:a9:b1:
68:1a:ee:02:a1:fd:75:2c:fc:6e:fd:93:fd:eb:50:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:BE:A4:93:9E:33:82:A8:E4:FC:B8:FA:AA:5C:2F:D6:6C:51:30
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rIe-pJOeM4Ko5Py4-qpcL9ZsUTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3a:42:07:53:e9:ee:d9:90:a6:40:f6:83:1f:73:30:1f:3c:
38:86:77:99:26:7a:e6:ae:62:76:47:3f:7a:40:dc:d0:62:db:
22:ac:a0:93:e2:c2:e9:03:ae:23:61:f7:e4:0b:a4:2d:8a:f8:
47:d0:27:5d:cc:99:ca:eb:e6:04:12:9d:19:56:98:ec:d4:a7:
98:6d:17:ce:88:29:0a:6f:36:4b:68:35:56:30:da:85:6d:b8:
16:7b:63:0f:32:87:34:98:f0:fb:c8:e3:5d:6d:f5:ac:f7:88:
03:34:59:4a:59:71:47:2d:9b:f8:bf:c3:d2:0b:55:0a:26:b0:
44:8e:5b:5b:a3:b8:86:d8:fe:c6:c8:f1:29:b4:57:23:11:b1:
37:73:87:b1:5f:0f:79:13:6c:af:26:75:07:44:8a:51:2f:7f:
a1:e1:7f:28:9d:be:6b:77:7e:79:68:3c:80:33:4d:27:64:3e:
f7:ac:f1:6f:a5:92:d8:a5:c8:59:f2:02:ee:cb:5d:eb:af:f4:
6b:02:ae:d9:77:61:36:36:00:1a:ee:df:82:d2:ce:da:68:3b:
26:b3:7a:dd:f6:1a:13:b7:9a:c1:48:a1:b2:9b:5b:4e:46:1a:
a2:ed:57:dc:24:e2:f6:e7:5b:41:a4:8a:dc:41:e2:39:80:9a:
1a:7d:fa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:53:56 2025 by rpki-client