Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/hAeo3-fsoXXxktFSXGJREiwOKiQ.roa
File: hAeo3-fsoXXxktFSXGJREiwOKiQ.roa (raw, json)
Hash identifier: yM5JEjdbG/f4XH2hveChqybWEFcsYH1LdaHT9UmPcb8=
Subject key identifier: 84:07:A8:DF:E7:EC:A1:75:F1:92:D1:52:5C:62:51:12:2C:0E:2A:24
Certificate issuer: /CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Certificate serial: 019426D9DE439C6A308F7160581A556E5C13
Authority key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/hAeo3-fsoXXxktFSXGJREiwOKiQ.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51301
IP address blocks: 185.135.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:de:43:9c:6a:30:8f:71:60:58:1a:55:6e:5c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8407a8dfe7eca175f192d1525c6251122c0e2a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:49:44:de:b0:61:73:1c:08:d1:8e:7f:54:
1d:46:3c:c5:6c:f4:fe:26:50:bd:bd:cf:73:0c:14:
0c:fe:09:38:6a:6f:f7:83:ca:66:6a:fd:99:03:a7:
3c:8b:e3:66:26:d3:72:e3:4f:66:d1:b8:8b:9d:54:
35:39:64:42:13:dc:04:88:df:13:f1:8d:85:2a:f4:
70:43:c4:82:0b:66:e6:55:fa:d4:1b:13:e6:e5:a6:
98:6f:56:59:f6:98:f9:04:c9:de:94:51:40:28:22:
92:fc:be:48:8e:20:f0:ea:c8:e2:08:0b:92:08:49:
ee:55:af:42:cc:95:4e:75:3d:3d:91:b2:09:e1:ff:
ae:6a:65:80:ab:0e:5c:e1:26:3c:57:d2:be:8a:21:
4a:33:8f:4e:f8:91:4d:4a:c3:22:19:ad:cc:2f:bc:
b6:43:fb:ae:5c:57:49:b3:e0:64:0b:74:98:06:09:
25:cb:73:a1:99:03:c7:10:89:9d:82:e7:61:55:89:
b2:25:91:3a:fc:af:7e:76:27:c3:99:ad:dd:d0:65:
71:fa:60:fe:59:88:74:64:04:9e:85:54:fb:67:ea:
92:54:c0:86:55:48:82:31:55:e4:ab:c3:a1:f4:56:
f1:60:08:6c:cc:cf:97:a1:bd:f8:5d:02:2f:a4:56:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:A8:DF:E7:EC:A1:75:F1:92:D1:52:5C:62:51:12:2C:0E:2A:24
X509v3 Authority Key Identifier:
keyid:7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/hAeo3-fsoXXxktFSXGJREiwOKiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.188.0/24
Signature Algorithm: sha256WithRSAEncryption
05:af:e9:cd:f5:a6:2c:72:d7:4d:25:77:21:25:76:8e:ed:d4:
17:de:d6:5d:65:1d:57:eb:67:09:ef:32:3f:a2:77:ab:8e:3d:
6e:48:e6:b3:f4:dd:1c:fc:a1:c7:39:35:f6:ae:b6:e0:7d:19:
ac:5a:c7:c3:69:bf:d2:6f:98:cd:44:51:60:93:38:19:09:48:
d8:31:fa:96:b7:ea:b7:0b:94:0b:52:f0:e3:10:6c:93:9d:fa:
f8:fd:9c:77:fb:6f:a7:c5:e6:16:0f:a4:a8:47:b2:5b:7c:de:
1b:f6:78:df:d1:b2:01:39:76:f4:ac:d5:69:04:e8:87:30:36:
e6:ff:df:e8:9a:6c:d1:32:a9:7e:bc:8f:fe:e0:eb:9c:2f:7b:
d3:4a:c0:25:13:8f:c6:01:3f:06:9e:21:45:27:52:24:13:d3:
c6:f0:65:a2:7b:26:ef:f6:cc:82:f0:d4:4b:75:6e:b5:93:fa:
73:d9:f3:99:bb:01:05:74:a0:a4:7f:dc:1b:92:d0:4d:7f:15:
c2:71:8a:f7:26:75:85:9c:9b:65:ee:0a:af:ba:75:bb:7f:b6:
68:94:4d:da:6e:68:e8:5c:ea:77:0b:b7:4f:34:01:97:a2:90:
9c:bd:60:1f:39:85:ca:a1:02:b1:29:27:ec:e9:01:05:da:aa:
63:cf:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:21 2025 by rpki-client