Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/L_PCaE35IO-qmsZFzareoXO-OdE.roa
File: L_PCaE35IO-qmsZFzareoXO-OdE.roa (raw, json)
Hash identifier: /SoOqUd4jD4ofPzvuIzFnRTejbY+t7TCz8ejddC5DkI=
Subject key identifier: 2F:F3:C2:68:4D:F9:20:EF:AA:9A:C6:45:CD:AA:DE:A1:73:BE:39:D1
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0194221FFAE687EE105A960ECF8A918E4916
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/L_PCaE35IO-qmsZFzareoXO-OdE.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.81.174.0/23 maxlen: 24
185.96.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fa:e6:87:ee:10:5a:96:0e:cf:8a:91:8e:49:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff3c2684df920efaa9ac645cdaadea173be39d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:ea:42:e1:87:b8:3c:75:15:89:f7:5e:f7:
66:ad:f3:03:a4:05:67:f4:1d:ce:8a:41:dc:ed:a5:
a1:7d:b7:a2:84:c9:23:39:09:03:c8:09:6c:e1:17:
cd:a1:8a:2f:c1:3e:49:b1:f2:c5:91:d4:f4:4c:71:
e1:76:e0:10:60:b2:96:02:ec:3b:bc:52:e5:a5:53:
77:60:28:98:e3:55:68:fc:34:59:af:43:d4:75:4b:
c4:b4:13:ee:cc:4b:48:6d:fd:8b:c6:e6:4a:4e:1a:
b1:2f:b3:a1:8f:a3:9a:0b:b5:29:0f:93:ca:aa:35:
f5:9b:c9:57:67:f0:11:86:b2:3e:26:1f:78:ae:bd:
f8:1e:f6:3c:37:6e:09:bf:55:38:26:be:7e:38:e9:
73:32:ec:82:f8:88:05:69:f4:fa:bb:fc:dd:a3:e2:
0d:0a:af:c8:94:e9:44:b7:4e:9e:07:0c:e9:6f:91:
10:36:d8:28:03:22:f3:73:6b:ab:e7:1d:70:29:3f:
83:7f:1c:e4:29:9b:bb:15:48:fa:1f:56:56:d2:4d:
d4:73:f6:9a:d6:41:69:5f:da:38:3d:7c:39:11:be:
e4:8c:b9:c0:29:80:ca:a3:66:57:df:70:f9:5b:47:
64:c7:03:e6:1b:7e:2e:1f:6a:1f:5d:78:86:07:f2:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:C2:68:4D:F9:20:EF:AA:9A:C6:45:CD:AA:DE:A1:73:BE:39:D1
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/L_PCaE35IO-qmsZFzareoXO-OdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.174.0/23
185.96.38.0/24
Signature Algorithm: sha256WithRSAEncryption
16:8b:5b:5c:96:fb:26:60:f8:65:c4:5a:a6:87:be:87:04:86:
91:4e:b5:6f:b3:b1:7e:d0:50:1f:9e:37:4c:48:19:e4:8f:d8:
b3:cb:34:65:7a:c1:c6:f9:50:25:d2:d3:e3:d5:87:ea:2a:c7:
5a:df:e0:33:a0:69:97:2b:a0:ed:20:5e:53:03:48:27:05:0a:
c0:20:0b:cd:f1:84:f0:8d:01:15:5e:31:1f:b9:ef:0d:1a:9b:
28:56:ee:58:d0:fc:57:c8:21:ed:b5:53:fe:e9:ee:ee:62:51:
bd:90:9b:b3:fe:0d:83:ba:b9:06:d6:3a:bc:7d:60:65:37:73:
aa:c3:0e:32:2e:15:e4:88:3a:39:6c:6b:2d:27:10:d4:ec:83:
30:ab:23:e7:bd:f6:59:b3:3b:3f:12:62:c9:60:0e:6b:1e:77:
4e:3e:82:a4:24:00:61:65:2b:f3:20:61:a8:7b:9f:9c:bd:7e:
02:0c:6a:98:bf:07:12:5f:22:2c:cf:68:6e:db:b8:dd:50:6e:
06:8a:12:f1:18:8c:89:04:ff:b0:c7:3e:9e:7d:5b:15:c4:1c:
ac:6d:ae:0b:55:7b:9d:93:eb:cd:b6:7e:ce:68:19:57:0c:bd:
8f:8c:d0:2e:9d:4e:a8:1e:63:81:5a:57:51:3f:d2:96:32:7f:
4f:55:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:27 2025 by rpki-client