Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa
File: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (raw, json)
Hash identifier: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=
Subject key identifier: 47:D5:E3:0E:AB:14:D6:2E:39:6A:3D:D0:1A:B2:D9:26:6D:97:6E:DC
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 01942369A93F0163C32A731F93605A304A2E
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa
Signing time: Wed 01 Jan 2025 19:48:34 +0000
ROA not before: Wed 01 Jan 2025 19:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60789
IP address blocks: 185.26.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a9:3f:01:63:c3:2a:73:1f:93:60:5a:30:4a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Jan 1 19:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47d5e30eab14d62e396a3dd01ab2d9266d976edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:b9:32:37:f5:a9:bf:3c:9a:af:42:de:cc:
e9:69:a3:11:c0:9a:be:a4:8e:2f:5b:8d:4f:c1:d3:
4f:9d:b9:a3:43:3a:62:ad:49:6c:51:f6:5f:5b:f8:
01:c8:66:94:26:86:56:68:14:79:66:c0:e9:39:71:
fc:cb:6b:5a:94:76:17:47:01:41:b8:51:32:d9:9d:
42:df:f9:88:da:12:34:dc:93:8a:54:0c:08:aa:df:
60:1f:82:f0:76:f9:7f:ea:b2:4a:3a:63:77:a1:03:
68:ed:5a:e4:71:49:ef:67:9f:2b:f8:33:77:52:4d:
82:ca:e2:c3:ca:1a:73:07:d5:c8:2d:e3:a7:55:07:
3d:a5:f1:72:fd:0f:1a:3a:8b:68:19:d9:fa:3f:5b:
76:92:f6:24:be:13:62:83:66:b0:ed:e1:b8:e1:21:
3e:6b:f4:0f:57:4a:e2:b2:7e:0a:c7:14:76:ba:93:
7c:9e:8e:60:27:29:86:46:9a:5e:0e:bc:a3:9e:2f:
63:aa:b4:23:67:72:83:c5:19:6b:29:86:6d:1f:96:
dd:98:3d:7f:ef:c8:dc:5c:9a:66:d9:ee:f9:9b:d8:
b3:f3:3d:b2:df:5f:6b:86:2f:99:c9:84:2b:6c:57:
a9:72:cc:f0:21:bb:2d:cb:bc:d5:3b:8e:3c:e7:44:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D5:E3:0E:AB:14:D6:2E:39:6A:3D:D0:1A:B2:D9:26:6D:97:6E:DC
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.36.0/22
Signature Algorithm: sha256WithRSAEncryption
95:89:a4:48:68:d7:78:23:ff:cb:60:b9:55:9f:58:89:46:14:
50:c6:c0:ac:cc:ac:6f:46:22:72:3f:71:df:0f:4b:23:c7:fe:
79:5a:d8:00:41:f9:56:1b:60:71:55:8d:b2:b8:f7:14:fd:40:
29:e0:b5:d5:5e:00:68:e0:dc:07:96:0a:3e:45:ec:ae:88:c7:
47:a1:93:99:86:08:ba:07:9b:93:52:04:34:c5:73:df:17:1f:
a2:3b:28:d2:a5:64:67:28:58:f8:34:07:c6:09:7f:a6:b8:6f:
3b:16:69:49:73:67:92:bd:1f:aa:fd:8b:26:05:f2:40:2b:a5:
80:59:72:a4:ed:83:7a:bf:06:d5:e1:58:09:fd:76:fd:34:8d:
b1:2f:ad:33:92:ca:ab:03:5a:dd:90:8b:ca:42:52:92:24:df:
e2:55:cc:1f:8b:6a:c2:55:fc:03:69:2f:f6:3e:b4:7c:46:5f:
96:91:73:6b:51:cd:db:91:85:ab:37:6c:ef:47:97:61:1a:b0:
e0:b1:58:8b:bc:be:49:5b:7e:9f:35:fc:fd:d0:44:9b:bf:56:
a3:ff:4e:ed:bb:e5:d9:98:4e:a9:1c:c9:59:e9:6e:d0:9c:54:
4e:e0:1c:86:55:7e:fe:8d:b2:99:1c:15:ff:42:ec:29:df:94:
f6:32:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:50:23 2025 by rpki-client