Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/P9lrL0rqVuTNKsuIZX2UI4q9nok.roa
File: P9lrL0rqVuTNKsuIZX2UI4q9nok.roa (raw, json)
Hash identifier: l33LLEi85W+Jy2EEkjE5lH+sJ4z7z92o/Pw7sfiSP8U=
Subject key identifier: 3F:D9:6B:2F:4A:EA:56:E4:CD:2A:CB:88:65:7D:94:23:8A:BD:9E:89
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 0194258EFB82AA1C5C50F618FAA3CC7228AB
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/P9lrL0rqVuTNKsuIZX2UI4q9nok.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.135.57.0/24 maxlen: 24
185.135.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fb:82:aa:1c:5c:50:f6:18:fa:a3:cc:72:28:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fd96b2f4aea56e4cd2acb88657d94238abd9e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:34:3a:5e:6c:94:7b:77:47:22:68:d0:e7:
2d:cb:4c:8e:f0:76:00:bb:8b:90:06:c4:c1:a0:be:
43:c7:61:65:b1:14:53:ce:3b:a6:8c:5b:f7:35:af:
5d:32:d6:64:11:ad:c2:c5:c2:b9:3c:f6:53:18:05:
b5:c8:22:54:bf:1c:aa:5d:74:36:ab:df:cd:6b:ca:
40:4c:d7:c2:a0:06:c1:7b:c2:d2:18:b1:2d:3a:07:
bd:64:86:53:13:33:88:8c:6f:f8:f9:38:a6:f9:c0:
4e:52:c4:d0:9d:e9:a0:20:cc:64:37:0a:a3:21:a3:
24:b0:02:be:7b:e3:a6:4e:b9:ee:93:f4:c6:49:f7:
b8:34:19:26:15:19:8e:1a:0c:f1:d6:14:3f:2b:6b:
6b:39:59:04:83:a7:6a:ff:9a:df:6c:e4:4f:2e:a3:
38:6f:2e:9c:48:43:ff:fa:59:93:4a:9e:f5:0a:46:
c5:69:bb:0c:17:0b:56:11:5a:75:76:35:93:fa:21:
24:e0:62:97:2d:c3:a2:1d:fa:87:cc:16:7f:c3:85:
8f:b2:5e:90:62:52:e4:97:c8:88:f9:c5:2a:39:9a:
90:03:7b:24:21:73:f6:91:4a:cd:0f:71:98:4a:ec:
bd:6f:9d:d1:e8:94:c4:21:d8:84:36:20:65:3c:7f:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:6B:2F:4A:EA:56:E4:CD:2A:CB:88:65:7D:94:23:8A:BD:9E:89
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/P9lrL0rqVuTNKsuIZX2UI4q9nok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.57.0-185.135.58.255
Signature Algorithm: sha256WithRSAEncryption
22:ad:f0:9d:73:0b:d5:8c:b5:9a:70:b2:ac:82:3f:32:69:0b:
b9:9d:45:4a:73:da:04:97:a1:9b:28:5c:a8:48:5c:82:b6:00:
f2:00:fe:69:c1:45:8d:3a:ca:40:8e:40:1b:ce:c2:bc:19:79:
68:c0:11:98:27:63:8a:2b:e8:97:12:0a:92:24:d3:8f:1c:10:
9d:75:01:98:97:fa:e5:a6:16:95:77:c9:a2:48:2a:bc:b9:58:
c3:f3:78:84:6f:b9:7d:6e:b8:b3:a8:0b:ec:88:f9:35:45:f5:
4e:cb:1b:06:d8:04:29:34:1b:ac:a1:4b:e9:18:93:3b:86:68:
68:e2:c9:a8:53:25:c3:36:f4:d4:50:7b:5e:af:9f:ef:92:ec:
06:cd:30:97:e6:cf:29:b4:fa:5e:ec:b1:c9:a0:ca:4a:60:fa:
d2:04:38:18:c1:8d:55:b5:af:15:29:e5:b3:b7:e3:75:ba:64:
b0:92:6c:9e:a9:30:f9:16:38:0b:53:62:c6:42:98:df:90:b3:
86:fc:70:f8:15:f1:89:8d:cf:0b:39:fa:98:f8:bf:1e:f3:20:
df:4d:cd:4b:66:fb:4c:a2:41:5d:71:ac:4d:2e:1f:43:76:7a:
c4:53:0c:ea:ac:b3:7e:c1:5c:a9:bd:09:57:29:f8:5d:54:d3:
28:bb:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:27 2025 by rpki-client