Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/O4vdHJ9QUww1uQlhzJCFdxoJHsU.roa
File: O4vdHJ9QUww1uQlhzJCFdxoJHsU.roa (raw, json)
Hash identifier: Nyj0b/sPzVhXT9FyVdgqmqJCTKENym6fidoReTUthdY=
Subject key identifier: 3B:8B:DD:1C:9F:50:53:0C:35:B9:09:61:CC:90:85:77:1A:09:1E:C5
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01942746396ECBD3AE5DDA21146F68B70929
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/O4vdHJ9QUww1uQlhzJCFdxoJHsU.roa
Signing time: Thu 02 Jan 2025 13:48:21 +0000
ROA not before: Thu 02 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216361
IP address blocks: 185.244.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:39:6e:cb:d3:ae:5d:da:21:14:6f:68:b7:09:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b8bdd1c9f50530c35b90961cc9085771a091ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:5a:d6:40:24:50:05:f8:99:99:75:d0:15:
49:0c:8e:56:7d:0d:2d:cb:57:57:5c:86:54:b1:4d:
ce:3e:fe:c9:7a:2c:a2:b9:6b:2a:0e:56:32:5e:c4:
87:71:e3:14:5c:53:0c:9a:d2:74:d8:04:03:c8:30:
b0:fa:db:74:5c:e5:e7:07:dc:cf:58:22:fd:e6:8f:
df:dc:8a:23:b4:d1:d4:2e:1d:be:25:b3:c4:bb:7d:
da:fc:d6:ad:f5:e5:6a:46:ec:b3:8a:e2:40:10:97:
7f:3e:9a:60:56:48:49:b1:69:09:6b:b7:a1:55:70:
3f:70:29:86:61:bd:47:ca:9e:f1:73:3b:4c:4a:51:
11:91:e0:13:1a:99:66:ab:44:59:be:05:c5:75:82:
a4:76:ef:90:ce:d9:67:73:d2:ef:af:34:89:e2:ca:
db:71:4c:7d:eb:1a:73:de:44:50:4a:c2:be:a2:2e:
0b:22:5b:5e:47:8b:f7:ff:2b:49:51:86:c2:dd:18:
04:e7:40:c8:51:b4:c3:ce:cb:7a:56:e0:f1:ab:7c:
a1:b3:d4:fa:72:33:15:16:00:fd:33:a0:cb:c0:54:
e1:38:f2:1e:ec:f7:da:04:8f:ba:b0:14:ed:bd:48:
07:9e:11:62:6f:c3:0a:5d:14:e4:af:68:f8:0b:16:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:DD:1C:9F:50:53:0C:35:B9:09:61:CC:90:85:77:1A:09:1E:C5
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/O4vdHJ9QUww1uQlhzJCFdxoJHsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.26.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2a:31:fe:36:d9:7a:15:b4:3c:04:d3:f3:76:dd:8a:bc:de:
14:64:12:a7:8a:5a:94:0c:35:62:8b:0c:9c:82:5b:e1:dd:46:
e5:46:1c:c1:dc:b1:09:01:a9:a7:7f:ef:a2:ba:67:5e:bf:2f:
30:1d:65:f4:c3:99:ea:e3:35:ec:1a:16:64:39:b1:81:a9:06:
46:6f:c3:96:ca:9e:50:72:ed:f6:71:fa:79:20:f2:e7:1b:33:
97:61:40:8f:70:fb:34:95:f0:4e:41:94:e4:b8:3a:3c:38:44:
38:60:c3:c6:dc:9d:49:d0:6d:ee:fd:56:32:60:bb:02:78:57:
d5:ab:e8:98:5c:f3:91:b7:1b:3e:bc:ec:4e:ce:b4:a1:61:77:
1f:69:d2:76:91:25:b4:28:5b:2e:57:97:b8:7a:67:c3:bd:06:
e8:b1:eb:af:6b:d0:b8:f4:89:f2:6e:ce:c1:ed:cd:75:c5:98:
7d:3e:82:f6:a6:b6:22:77:66:97:56:e6:28:27:4b:c3:11:d0:
b5:b5:fd:de:ac:20:8a:45:5e:b8:60:3d:16:6c:23:4d:b2:23:
8c:ec:7c:1e:f3:25:14:23:51:42:04:4f:be:40:83:43:88:66:
0e:5f:66:05:f8:06:4e:79:0d:72:dd:25:ba:c8:27:f5:5c:85:
ed:c6:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:01:13 2025 by rpki-client