Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa
File: gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa (raw, json)
Hash identifier: dD0JDKWyz8RttwKsGGrA4bkH6oYAjTjCLaJ4HX942V8=
Subject key identifier: 82:F5:E7:98:CA:2C:D5:95:8E:C4:DB:C7:E2:B1:78:55:94:60:AA:3C
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 0194228DDAD1CE8EDA62E8F9A1182DE3D2DF
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272869
IP address blocks: 185.240.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:da:d1:ce:8e:da:62:e8:f9:a1:18:2d:e3:d2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82f5e798ca2cd5958ec4dbc7e2b178559460aa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:fb:18:7e:29:45:8f:95:50:a2:35:b4:08:
65:84:05:33:6e:b7:44:a8:60:73:3f:06:d4:8a:c2:
18:56:97:b9:a2:fb:46:52:11:6b:40:3e:37:5e:df:
50:14:f0:d0:64:ab:bb:fb:b2:f0:4c:f3:f7:e9:e3:
65:33:99:70:c2:26:98:04:b3:09:e2:0f:dd:d1:d3:
8d:32:41:f5:62:a1:fc:03:e2:d8:dc:8b:15:92:72:
3e:7e:ce:79:44:11:5d:05:b3:55:70:45:fb:a9:24:
21:4d:86:87:fc:b5:a5:e5:9d:86:af:10:35:43:57:
71:96:25:da:21:4e:a1:b9:32:02:30:d9:1d:cd:5f:
9f:3f:1f:17:be:9d:87:ff:f9:3a:de:f8:8c:3e:b9:
e4:48:56:07:e8:99:96:8b:e9:1a:a0:05:88:b8:4e:
e4:2a:56:24:f1:e6:f5:cf:3a:1a:55:85:1d:0f:9f:
dc:7e:a6:27:20:0e:36:42:ea:eb:a9:ae:d2:3d:87:
40:0c:e7:bb:dd:35:67:8e:9c:28:63:87:21:40:74:
4d:e5:d1:f8:6e:ff:dc:cd:47:d6:da:29:0d:b6:b2:
36:a5:3a:1e:68:f3:13:06:f8:46:ed:c5:b8:65:83:
98:86:8e:68:85:c2:f4:b9:77:95:dc:bb:f4:69:a4:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F5:E7:98:CA:2C:D5:95:8E:C4:DB:C7:E2:B1:78:55:94:60:AA:3C
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.215.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f5:06:9c:8b:25:d7:c1:12:ef:05:d7:b5:68:be:91:5d:7a:
ca:10:b2:5c:65:da:00:43:02:ed:09:c7:1e:75:ac:04:8f:3b:
8d:4b:8d:c2:8d:94:b6:b0:9c:cd:af:ff:8a:f2:17:e0:cf:45:
28:db:5e:fc:7e:00:fd:82:93:5c:7e:32:a6:c8:88:9b:32:7c:
ea:43:18:9f:dd:4a:ae:1f:72:9c:38:39:9f:2a:c1:7a:ab:0c:
89:68:32:5d:17:d6:13:d3:d4:29:c9:65:93:3d:69:02:d5:03:
a3:40:12:76:6c:cc:e0:ca:c2:24:5d:02:ae:0c:c5:50:aa:01:
65:1a:98:7c:dc:17:69:17:5e:7d:5b:18:b6:7a:f1:4c:ee:7a:
40:cf:c0:90:df:fa:b1:ee:cf:57:ae:bf:f3:d0:76:93:27:ee:
85:0a:29:5d:ca:7d:df:7b:ac:6f:39:24:33:17:39:1e:e1:2e:
4a:43:23:ab:1b:28:80:4c:de:39:ed:c2:c0:b5:4d:37:a2:52:
15:eb:05:9b:c1:58:84:80:19:53:a2:93:fc:12:c2:18:7b:c9:
c4:b4:5b:5b:bf:6c:78:b2:17:c9:70:2a:f0:1f:c2:d6:98:3d:
71:41:b9:0a:d2:00:5f:6e:53:79:60:80:07:8d:b9:49:47:1d:
2b:64:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:27 2025 by rpki-client