Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/j55rwmP0M5U3k7x3VXFxJgSVySg.roa
File: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (raw, json)
Hash identifier: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=
Subject key identifier: 8F:9E:6B:C2:63:F4:33:95:37:93:BC:77:55:71:71:26:04:95:C9:28
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 019420D5C61011D15CC4F4ABE0989E74FC6D
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/j55rwmP0M5U3k7x3VXFxJgSVySg.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207344
IP address blocks: 185.179.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c6:10:11:d1:5c:c4:f4:ab:e0:98:9e:74:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f9e6bc263f433953793bc77557171260495c928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:ba:b3:13:06:87:57:6c:f7:5a:f4:88:e7:
76:88:fc:e9:3e:69:bf:88:c2:47:91:60:8a:aa:d4:
e3:96:87:c5:e7:4c:65:03:26:1d:e0:bd:76:7c:cb:
32:de:47:4a:77:31:f4:cd:c4:80:6a:a0:a1:16:1f:
99:39:9c:f7:9d:c1:87:9b:23:16:24:ab:3b:89:88:
1e:6f:9b:71:93:4b:6b:56:f9:17:62:c0:7b:e1:4c:
50:b8:e6:09:35:4c:4d:24:2f:f2:ce:b3:22:b4:ec:
c2:c5:94:1e:e4:06:33:68:80:e5:65:dc:73:57:05:
d8:46:22:7d:1b:f3:6b:c5:86:1d:58:90:5f:7f:38:
3c:7e:94:a7:d5:de:ac:61:45:78:ee:70:c5:a3:34:
2f:ea:15:f8:c1:01:25:76:54:f8:bb:4e:f0:f1:5e:
7f:27:0e:fb:d8:f7:3e:c5:4f:bb:17:07:1e:7b:b1:
f3:52:ec:c9:af:64:6c:dd:ce:ae:51:a7:d2:2f:8d:
95:97:59:39:41:41:e6:7a:2c:ce:c4:f8:db:d1:cb:
12:e9:0a:5f:95:f6:57:11:13:ef:00:2c:17:4c:4c:
92:3f:9b:ae:76:90:c6:fc:77:c7:ae:12:5a:9f:37:
05:d7:1a:ae:10:eb:05:b3:6d:e8:d9:1a:7b:ea:1a:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:6B:C2:63:F4:33:95:37:93:BC:77:55:71:71:26:04:95:C9:28
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/j55rwmP0M5U3k7x3VXFxJgSVySg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.87.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c6:bc:61:e4:b9:68:8a:e8:b0:e4:09:cf:67:2f:68:b9:02:
17:76:89:fc:89:f9:be:29:b4:ab:a7:41:e9:e3:a3:79:e5:a9:
de:7c:4f:20:56:3c:67:a7:5b:ec:70:ea:1d:88:84:02:76:8c:
b7:a1:2d:0d:3e:b1:a7:2f:09:4e:c0:5d:5f:18:19:22:dc:a1:
81:6d:50:5e:4a:2d:cd:d5:d5:60:fe:56:ab:49:0b:14:3c:4a:
f8:53:c1:fd:70:62:fb:bd:82:36:f9:ed:fe:f3:fc:8c:ea:10:
bb:fe:71:5f:75:cb:e2:29:7c:3d:2c:fd:d1:28:16:fb:f4:c5:
e6:cb:90:83:06:51:24:9b:e0:63:47:91:ec:d8:be:61:4b:c4:
4d:09:54:03:4c:f9:c7:61:80:4b:9f:04:6a:99:3c:48:27:85:
7b:08:ef:c3:9d:16:2b:45:8e:4b:77:cf:ac:28:15:fc:23:5f:
59:37:1e:16:ab:3e:99:fc:26:4a:35:6b:8b:9e:1b:e5:f7:8e:
ca:bf:75:bc:f6:c9:04:cf:ea:be:21:20:be:84:ee:d7:02:61:
87:16:8e:4b:c2:e1:da:33:35:42:44:72:4f:cc:7e:a1:28:6e:
2a:00:7a:21:cb:a4:3d:e4:5b:0b:91:2a:de:cf:ec:e5:84:5c:
dd:cf:4c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:31 2025 by rpki-client