Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/giUGr98XTvMTapx-HcfkJZUS_QQ.roa
File: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (raw, json)
Hash identifier: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=
Subject key identifier: 82:25:06:AF:DF:17:4E:F3:13:6A:9C:7E:1D:C7:E4:25:95:12:FD:04
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019425217E26711CD08CEC2F0BFA26F7FD0A
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/giUGr98XTvMTapx-HcfkJZUS_QQ.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203510
IP address blocks: 185.9.185.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7e:26:71:1c:d0:8c:ec:2f:0b:fa:26:f7:fd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=822506afdf174ef3136a9c7e1dc7e4259512fd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:2b:a1:5e:b5:00:b9:38:36:cf:ce:97:6c:
9d:dc:0c:65:d1:86:d1:10:d1:e8:aa:34:24:f0:97:
4c:61:5f:0e:81:69:e1:c2:28:31:88:6f:c7:57:36:
df:f8:a5:a9:1d:24:63:42:76:a1:29:b1:a7:54:15:
a0:ef:9f:fb:b6:87:a1:76:d0:e1:dc:e2:c3:b0:f2:
68:8e:32:98:16:d8:90:0e:9d:99:12:04:54:06:92:
51:28:f8:0b:25:91:7c:a1:de:ca:30:4b:c9:f1:51:
98:f9:9b:eb:1e:f1:6b:f3:87:63:05:46:4d:67:98:
2c:db:24:90:78:de:e5:1d:fb:b0:6b:1f:50:fc:25:
a4:75:fb:1f:31:3d:5b:80:86:cf:13:11:c3:6e:b4:
75:01:df:fc:69:ae:39:9f:15:0f:ed:9d:cd:e6:36:
ea:f3:e7:ae:36:0a:63:a2:d8:20:ab:1c:12:91:0c:
8a:1e:25:b5:4e:1e:3e:72:0d:45:68:b3:25:05:89:
33:15:fb:0e:5e:e2:5e:c4:bf:ab:02:87:d5:2e:98:
df:39:a4:4a:2f:a1:8f:47:53:6b:04:38:dc:93:43:
77:72:29:ed:39:41:0c:6c:f1:86:f6:66:33:41:75:
d6:89:f0:90:31:b3:3d:c4:53:b3:8f:be:e3:87:16:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:06:AF:DF:17:4E:F3:13:6A:9C:7E:1D:C7:E4:25:95:12:FD:04
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/giUGr98XTvMTapx-HcfkJZUS_QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.185.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c5:ce:9f:f9:fc:90:47:d9:35:7b:b8:97:52:cd:2a:7d:5c:
5b:a5:61:04:7c:30:b0:2b:ef:5f:35:38:6f:65:94:06:6e:3d:
0a:26:63:29:30:16:17:e1:24:af:17:35:03:ff:67:33:ed:78:
ef:52:1d:5b:77:19:0d:54:18:71:37:07:92:17:b1:01:dd:e0:
77:63:85:31:87:10:b2:98:6b:36:de:70:a9:6d:03:a3:13:65:
05:b3:21:c0:ec:60:95:7f:ad:72:4d:62:f4:0e:18:2e:46:b7:
38:69:f3:bc:a6:8b:4f:ed:7a:dc:92:03:4d:dd:c4:e8:26:bc:
c5:f3:56:bb:28:3e:c7:e5:a0:30:e9:b0:71:08:fd:f6:3e:db:
7a:17:5b:63:38:27:af:3a:c7:31:fd:52:63:49:e4:64:09:13:
95:76:72:c2:89:32:0e:85:6b:9a:aa:07:ce:81:8c:7f:98:a7:
74:55:2c:e8:57:81:44:a6:dc:cb:f0:c2:7c:73:26:50:46:bb:
51:9c:69:3c:ea:bc:f9:b5:8e:62:33:de:dd:51:bb:85:4b:b8:
57:ea:19:1e:69:30:43:f9:e5:e0:64:f4:92:21:04:f1:62:35:
0d:b8:c1:fa:ec:4a:53:91:76:ae:32:cf:65:fd:f1:f5:44:8f:
a1:77:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:32 2025 by rpki-client