Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/n806vQCKJO6E1y-xgzc_uqP7AsI.roa
File: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (raw, json)
Hash identifier: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=
Subject key identifier: 9F:CD:3A:BD:00:8A:24:EE:84:D7:2F:B1:83:37:3F:BA:A3:FB:02:C2
Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial: 01941FFA7E3377BF6A97D3463CA942A9C280
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/n806vQCKJO6E1y-xgzc_uqP7AsI.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394814
IP address blocks: 185.235.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7e:33:77:bf:6a:97:d3:46:3c:a9:42:a9:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde75079618691bae1f47bcbed52314496963891
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fcd3abd008a24ee84d72fb183373fbaa3fb02c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:5c:bb:fd:08:08:0f:47:aa:9c:b4:6d:69:
a4:92:d3:f7:b8:8b:31:7d:ec:93:00:cb:16:23:05:
77:ee:d6:5d:70:0e:59:b5:45:60:2b:7f:d0:be:89:
61:78:56:3e:90:bb:23:e6:90:bc:d2:8e:6f:e1:ae:
93:4d:65:76:bf:0c:0d:20:02:4b:a1:5b:01:03:36:
de:86:87:57:a1:3a:ed:5a:77:54:9b:d6:ea:ff:81:
76:a0:34:88:79:c7:30:4f:9e:d4:7e:9c:e2:17:14:
76:ce:3f:11:b2:c0:35:1a:f4:55:ea:e2:6e:b4:24:
50:46:5f:ef:4f:d9:58:6d:28:19:cd:bc:26:02:db:
ef:66:52:95:26:65:60:5c:56:94:3d:3d:ab:90:cb:
ec:40:ff:bf:21:8a:f9:e4:c0:e5:de:fd:92:d3:1f:
be:95:3f:5a:39:69:25:ca:0f:48:fb:94:d4:05:56:
1f:30:3f:8f:a3:26:09:ab:79:20:9a:96:8d:c5:82:
36:f6:2c:e3:1d:5e:c6:9b:7b:81:2e:8d:90:13:b3:
1f:93:12:75:5c:f9:f8:26:ad:90:4b:05:b4:39:8e:
dc:97:bd:3e:d7:87:be:2d:ee:90:ca:22:36:5b:4c:
5c:c1:70:94:1e:74:64:dc:d9:d1:f3:6f:07:ef:52:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:3A:BD:00:8A:24:EE:84:D7:2F:B1:83:37:3F:BA:A3:FB:02:C2
X509v3 Authority Key Identifier:
keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/n806vQCKJO6E1y-xgzc_uqP7AsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0c:c0:dd:41:11:fd:61:09:52:14:4c:45:87:15:af:01:10:
f0:68:02:bd:f1:64:5d:81:e1:56:ac:6f:c6:ca:5e:dd:02:93:
0b:1d:cb:55:a7:4b:40:0e:66:7d:5a:3c:fc:d3:59:2a:d8:cc:
0b:09:5e:4d:84:16:21:cf:8f:b9:04:0f:8d:4f:4e:7e:d9:fa:
00:2c:d2:0a:6e:68:33:b9:8f:0a:0e:23:b1:70:5d:63:28:99:
b4:3d:de:0f:63:1e:73:f9:01:e4:4c:bf:d2:e0:4c:f9:03:c0:
8d:00:10:0a:52:82:92:5a:db:12:e2:f8:8f:00:2e:af:f7:60:
03:d6:af:9d:c7:c9:da:fc:ae:f9:6e:21:33:fb:32:14:32:42:
00:96:0e:e0:14:58:d3:43:ce:2a:1f:0c:a9:1f:d2:02:df:67:
96:75:ab:dc:da:8d:68:94:ad:f9:a7:56:a3:3e:84:08:aa:f8:
18:ea:50:c2:1e:f3:09:13:aa:74:8c:99:50:3a:b4:b9:e0:20:
e0:b4:1f:50:9e:04:2f:83:38:33:23:7f:61:73:21:15:77:ea:
f3:16:97:32:f7:dc:65:f4:13:c7:8d:03:1b:2e:82:c3:98:62:
81:4b:d0:66:56:fa:73:2c:21:5d:66:1b:2d:59:fc:46:61:fb:
4c:86:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:34:29 2025 by rpki-client