Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/2YadcCcrthTPeDDHEpW__8Qd9bs.roa
File: 2YadcCcrthTPeDDHEpW__8Qd9bs.roa (raw, json)
Hash identifier: OdnpX4OxWP0430jIZ65+bJ7XNUvVVpsmfscwz1Ws1zM=
Subject key identifier: D9:86:9D:70:27:2B:B6:14:CF:78:30:C7:12:95:BF:FF:C4:1D:F5:BB
Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial: 019423D742428307DEF34F3B4078A565A777
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/2YadcCcrthTPeDDHEpW__8Qd9bs.roa
Signing time: Wed 01 Jan 2025 21:48:17 +0000
ROA not before: Wed 01 Jan 2025 21:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.189.0/24 maxlen: 24
2001:7f8:103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:42:42:83:07:de:f3:4f:3b:40:78:a5:65:a7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9869d70272bb614cf7830c71295bfffc41df5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6b:18:91:23:ef:91:5a:c7:06:4d:0b:54:4f:
17:51:f6:db:fe:70:7d:0d:d9:b6:7d:0d:73:4b:54:
17:3d:3b:82:fd:22:17:c5:be:7a:1f:71:2e:1d:ae:
bb:1c:c5:16:9c:10:ec:91:da:d2:1a:59:11:ec:de:
21:21:40:1d:35:1b:ef:d9:37:12:e3:1b:e9:d2:4a:
2c:fc:60:1a:b9:d8:75:09:d4:f1:e2:48:98:5b:ff:
7f:2b:6d:5d:1e:4d:8e:30:6c:73:78:9a:21:34:89:
40:44:5a:92:87:bc:0f:46:55:23:54:8a:f3:e0:b2:
60:1c:3d:29:4d:56:7e:99:9e:04:80:db:6e:be:34:
2b:01:08:2e:e4:01:69:86:53:0c:ec:6b:fb:cc:12:
7f:d9:c3:a0:8d:58:35:df:c0:38:44:66:43:98:12:
cf:c7:17:ba:7e:80:e4:5e:8e:22:70:dc:75:a0:e7:
9f:6f:42:cf:bc:d7:e9:e8:5e:bb:df:d2:5a:e9:7c:
38:e4:94:af:85:1d:44:71:b0:b5:e5:c1:c4:0c:1f:
14:98:25:e0:89:ef:a8:97:83:da:36:f1:3a:1c:29:
d6:a4:90:15:c1:04:66:1c:38:b9:e3:6a:9f:49:77:
db:68:10:f5:f2:47:92:30:44:00:be:4c:6c:69:0f:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:86:9D:70:27:2B:B6:14:CF:78:30:C7:12:95:BF:FF:C4:1D:F5:BB
X509v3 Authority Key Identifier:
keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/2YadcCcrthTPeDDHEpW__8Qd9bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.189.0/24
IPv6:
2001:7f8:103::/48
Signature Algorithm: sha256WithRSAEncryption
44:a8:76:95:07:62:46:2e:1c:c8:3c:95:b6:d8:26:cb:1f:d4:
bc:02:d6:99:35:da:fc:0f:81:16:ad:12:bf:cf:b4:06:b8:da:
dc:9a:0b:8b:0e:57:d8:37:95:3e:de:45:2d:a4:f4:ca:e0:28:
19:5f:dd:b5:d8:1c:6f:2a:8c:f6:d4:db:92:8c:aa:0c:ff:c2:
f0:e2:8a:07:8d:13:ed:39:73:5d:c9:a4:55:09:af:a0:e3:ed:
ca:cf:e8:61:5a:05:28:df:1a:fc:69:e1:1b:59:bc:b2:f9:92:
99:ba:b2:4c:e7:d2:ff:fc:f1:49:4f:88:8f:be:28:34:97:7f:
b4:9e:e5:ee:31:c9:db:8e:b9:32:a8:18:ff:62:76:62:0d:20:
c9:51:e9:80:e6:b5:37:ee:46:e7:8a:4d:85:f2:58:da:ef:fa:
9e:5e:51:74:bd:d5:ee:3a:e3:9f:c4:f1:bd:db:38:e4:d4:fc:
91:29:25:d7:8b:90:74:9e:04:3f:1a:03:b1:75:74:d9:9c:6e:
2a:3e:37:91:47:24:aa:ca:72:d9:8a:db:ea:d8:6c:67:cd:29:
13:dc:08:d1:4f:c7:5a:ec:7a:3c:ad:55:21:5f:fb:42:52:b0:
7e:46:bc:3e:54:5c:3d:e7:dc:c0:03:ac:79:2b:99:9f:4e:20:
85:62:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:55 2025 by rpki-client