Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/_5zMdOWOnuF29ViyjTYdqmiabT0.roa
File: _5zMdOWOnuF29ViyjTYdqmiabT0.roa (raw, json)
Hash identifier: bOHD6ebnTlGjO2kqvQSoKN6+pQ2e9dKaoGGov9ljW5w=
Subject key identifier: FF:9C:CC:74:E5:8E:9E:E1:76:F5:58:B2:8D:36:1D:AA:68:9A:6D:3D
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 019421B2529C550152766E812FAF6F85A300
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/_5zMdOWOnuF29ViyjTYdqmiabT0.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31367
IP address blocks: 185.172.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:52:9c:55:01:52:76:6e:81:2f:af:6f:85:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff9ccc74e58e9ee176f558b28d361daa689a6d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:43:e2:6c:99:7e:66:6d:9f:c7:e5:35:c7:
2a:6b:b1:35:39:ea:f9:e6:e5:84:aa:1d:30:0b:e7:
10:bd:0b:d5:78:56:cd:2e:e9:b7:de:91:df:23:bd:
ad:24:5a:27:cd:d6:7b:b4:95:80:45:b2:5e:ca:5b:
23:62:10:60:8a:24:12:85:1a:2e:aa:96:f7:61:e4:
3b:88:bf:ae:4e:3c:91:70:c6:f7:c7:54:68:44:a9:
03:0e:2f:e7:32:5c:ba:be:7e:98:a6:6b:0f:f7:a0:
fb:db:5a:94:7b:e3:fb:e5:67:28:ed:8e:80:82:89:
5c:f2:6b:90:09:51:04:79:ef:bc:3a:bd:2d:c2:cb:
c5:d5:01:04:77:9c:f9:11:3c:9f:61:53:0f:8f:2e:
f6:ad:b5:b8:a1:af:04:b9:9a:29:e5:66:d1:86:13:
d2:8d:3c:82:bc:ea:43:f3:e7:b3:cb:93:bc:26:a0:
7e:61:7d:92:41:80:bf:a5:73:d4:08:96:a2:cf:eb:
bb:f6:c7:ef:61:e1:01:d6:36:af:9b:7e:c0:a5:3f:
15:ea:0c:3b:bc:fe:51:61:58:89:f7:61:e5:5f:c9:
ff:81:2e:59:0d:80:c5:23:83:fe:8e:c2:95:6b:20:
26:dc:8e:39:35:da:bb:f2:46:51:b2:92:27:c9:49:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:CC:74:E5:8E:9E:E1:76:F5:58:B2:8D:36:1D:AA:68:9A:6D:3D
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/_5zMdOWOnuF29ViyjTYdqmiabT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.152.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:c3:36:82:ce:07:1e:3d:e9:c4:52:d0:20:26:f3:1a:8f:db:
f1:6b:5c:45:9e:87:56:ae:1e:2d:ac:00:c3:8c:ce:3d:ab:94:
10:24:c4:bb:31:b5:d7:a4:49:b1:26:5b:1c:73:48:49:ed:fe:
5f:c4:34:cc:46:40:7b:86:ec:56:36:67:f8:3c:63:9e:ba:d5:
74:70:7f:4e:cd:58:9c:a6:1a:33:cc:5e:a4:1e:d9:96:d4:ef:
52:0a:29:e1:65:4e:92:a5:7f:70:bf:2f:bc:bd:a8:7a:b6:e5:
66:33:23:a2:26:06:67:43:e2:29:c6:e9:be:c9:1d:96:e2:19:
30:e6:d8:c1:74:c9:c1:86:7e:cf:17:75:a3:13:f2:b5:49:c6:
d4:cf:6d:74:29:14:c8:48:36:f4:9f:7c:79:1e:7f:c9:ce:8c:
be:19:cf:4c:93:b7:a8:4c:67:2c:bc:a2:12:81:bf:70:f4:84:
ea:a7:29:f7:91:bf:a6:8c:92:d3:24:aa:2c:fb:10:74:61:fa:
53:ca:af:5b:71:3a:14:e3:73:31:aa:82:20:33:28:d8:bb:99:
03:de:a3:04:78:44:b5:0a:a8:a1:10:37:39:7c:c8:71:fb:b2:
ef:12:fd:1f:e7:d8:17:85:ba:79:5c:93:20:89:66:c5:59:f6:
74:29:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:27 2025 by rpki-client