Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/C9mugrtzW_-CpWlbrAzn7HLndJs.roa
File: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (raw, json)
Hash identifier: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=
Subject key identifier: 0B:D9:AE:82:BB:73:5B:FF:82:A5:69:5B:AC:0C:E7:EC:72:E7:74:9B
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019423D6C5139A03F413F3EAB8DB60B7B743
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/C9mugrtzW_-CpWlbrAzn7HLndJs.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204661
IP address blocks: 185.172.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c5:13:9a:03:f4:13:f3:ea:b8:db:60:b7:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bd9ae82bb735bff82a5695bac0ce7ec72e7749b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:23:c6:6f:49:2e:79:ff:61:e6:47:31:77:
b5:89:12:57:e9:4c:7f:5c:5b:1e:df:d7:d4:5f:51:
27:86:01:15:a6:60:0d:eb:03:e0:fb:a3:a5:69:9b:
7a:73:fb:f3:6d:16:28:c3:15:c6:47:c6:d6:39:6c:
81:b4:c8:ae:b4:49:77:3e:c7:d1:27:30:66:ee:fd:
69:c1:bd:64:2c:47:bc:fe:d3:e0:3d:90:ac:a6:54:
54:47:0d:d8:fe:77:cb:33:52:7f:e0:db:61:98:17:
25:5c:02:05:ca:e3:84:78:91:72:fb:51:34:12:76:
b6:9b:9e:66:78:a8:5f:af:49:3b:b5:97:3b:e1:4d:
58:ab:62:78:99:25:49:fc:80:73:87:b9:0b:0e:81:
10:4c:00:1a:1c:23:8f:ec:34:7c:96:f6:b7:49:24:
1b:cd:f2:44:fc:2c:06:36:3c:44:26:c9:7f:e0:67:
f8:4c:b8:11:81:9a:b0:75:5f:be:46:b9:e8:25:c8:
77:23:80:84:5f:ef:84:62:a0:f5:af:97:f4:cf:e4:
82:7e:14:2d:1b:cd:da:62:9c:b8:d9:32:b4:c0:10:
0e:9a:d2:dd:7a:13:a2:10:09:aa:96:a1:58:5a:b6:
fe:cc:bc:e2:92:e9:20:41:93:a7:8c:87:14:51:81:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:AE:82:BB:73:5B:FF:82:A5:69:5B:AC:0C:E7:EC:72:E7:74:9B
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/C9mugrtzW_-CpWlbrAzn7HLndJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1b:c9:f6:e5:6d:4a:38:48:fa:76:6f:b9:22:4f:c3:20:02:
ed:cc:e5:0b:09:25:4a:5e:d3:28:7c:97:c6:ab:73:aa:88:99:
6a:0e:6a:84:40:7c:c9:dd:24:53:ec:67:6b:94:d6:b2:8a:13:
d0:8b:a8:e0:fe:1c:dc:20:77:80:64:bb:8a:84:79:d4:36:b5:
e6:6b:c9:7d:a7:cb:78:be:4d:fe:d6:4e:c0:0d:d1:c8:42:9a:
6a:4a:60:d6:22:18:eb:8e:04:79:6a:6a:54:25:2f:d7:6c:11:
d3:ca:c0:d8:d6:31:95:b9:76:63:e9:ae:09:4c:78:8b:97:c7:
1f:94:f7:77:5e:a9:30:28:7b:e5:92:92:51:f0:eb:f3:98:91:
b5:d1:f0:9a:92:ad:04:74:98:30:81:af:73:b6:64:58:4b:04:
82:66:d7:d5:a3:8e:3b:d7:63:76:47:aa:53:f8:c3:85:0e:dd:
2b:f1:5d:2c:c1:5f:35:b7:88:8d:c4:39:54:d4:03:b6:58:be:
68:e0:a3:31:2e:55:86:cd:2f:28:88:3b:2e:5c:33:b8:f3:c8:
38:5f:df:b2:af:a2:7a:e4:48:49:6c:41:5c:97:f1:39:0f:81:
64:35:d6:ad:38:7b:58:61:ed:69:ea:8e:00:2a:d6:48:7f:59:
ee:8f:1e:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1sUTmgP0E/PquNtgt7dDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5
YWNiZTQwHhcNMjUwMTAxMjE0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmQ5YWU4MmJiNzM1YmZmODJhNTY5NWJhYzBjZTdlYzcyZTc3NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n0jxm9JLnn/YeZHMXe1iRJX6Ux/
XFse39fUX1EnhgEVpmAN6wPg+6OlaZt6c/vzbRYowxXGR8bWOWyBtMiutEl3PsfR
JzBm7v1pwb1kLEe8/tPgPZCsplRURw3Y/nfLM1J/4NthmBclXAIFyuOEeJFy+1E0
Ena2m55meKhfr0k7tZc74U1Yq2J4mSVJ/IBzh7kLDoEQTAAaHCOP7DR8lva3SSQb
zfJE/CwGNjxEJsl/4Gf4TLgRgZqwdV++RrnoJch3I4CEX++EYqD1r5f0z+SCfhQt
G83aYpy42TK0wBAOmtLdehOiEAmqlqFYWrb+zLzikukgQZOnjIcUUYHxkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvZroK7c1v/gqVpW6wM5+xy53SbMB8GA1UdIwQY
MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et
NDI4YmU5MDA4ZmJhLzEvQzltdWdydHpXXy1DcFdsYnJBem43SExuZEpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh
LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuazgMA0G
CSqGSIb3DQEBCwUAA4IBAQCLG8n25W1KOEj6dm+5Ik/DIALtzOULCSVKXtMofJfG
q3OqiJlqDmqEQHzJ3SRT7GdrlNayihPQi6jg/hzcIHeAZLuKhHnUNrXma8l9p8t4
vk3+1k7ADdHIQppqSmDWIhjrjgR5ampUJS/XbBHTysDY1jGVuXZj6a4JTHiLl8cf
lPd3XqkwKHvlkpJR8OvzmJG10fCakq0EdJgwga9ztmRYSwSCZtfVo44712N2R6pT
+MOFDt0r8V0swV81t4iNxDlU1AO2WL5o4KMxLlWGzS8oiDsuXDO488g4X9+yr6J6
5EhJbEFcl/E5D4FkNdatOHtYYe1p6o4AKtZIf1nujx4y
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:52:38 2025 by rpki-client