Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8a1586-0ae3-46ab-96d5-7d7df1aacd21/1/__N9Auc25e-J2vf0BAZx-_jbNPI.roa
File: __N9Auc25e-J2vf0BAZx-_jbNPI.roa (raw, json)
Hash identifier: rmKpmFBWCqIEj5H3H/dbo+JJBi0Du6LkMyzCd47hXwc=
Subject key identifier: FF:F3:7D:02:E7:36:E5:EF:89:DA:F7:F4:04:06:71:FB:F8:DB:34:F2
Certificate issuer: /CN=982ea4093f981b846f2e96ae7c9615af2e1ca4cb
Certificate serial: 01856E26632F51B3086DF8EA526F904C3CB0
Authority key identifier: 98:2E:A4:09:3F:98:1B:84:6F:2E:96:AE:7C:96:15:AF:2E:1C:A4:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mC6kCT-YG4RvLpaufJYVry4cpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8a1586-0ae3-46ab-96d5-7d7df1aacd21/1/__N9Auc25e-J2vf0BAZx-_jbNPI.roa
Signing time: Sun 01 Jan 2023 16:24:47 +0000
ROA not before: Sun 01 Jan 2023 16:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 185.211.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:63:2f:51:b3:08:6d:f8:ea:52:6f:90:4c:3c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982ea4093f981b846f2e96ae7c9615af2e1ca4cb
Validity
Not Before: Jan 1 16:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fff37d02e736e5ef89daf7f4040671fbf8db34f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:ce:13:94:ca:3b:45:f7:03:ae:d4:46:a2:
cc:fd:5b:ba:06:9b:54:c1:78:3d:c1:af:13:72:57:
8d:7e:5e:d3:87:b2:5e:2f:c7:2e:04:f7:54:d2:bb:
38:24:32:0f:7b:f1:9c:79:72:3c:04:3a:41:38:fa:
9e:31:51:26:00:78:f9:f1:8b:e2:ba:51:55:34:1a:
7d:9b:9f:57:db:9a:fb:0e:b8:d8:aa:b5:53:95:ae:
78:d8:b9:64:4d:83:dd:c4:a2:f6:80:4f:98:84:fb:
8e:75:65:3d:18:93:9d:07:bb:83:ab:f0:eb:87:f9:
48:46:be:79:5f:01:a3:63:6a:4a:6e:e0:36:34:e4:
db:e4:d9:21:ce:d9:62:23:de:4a:06:d5:f1:25:b1:
a7:c2:c5:62:0b:79:ab:bf:cb:71:e4:87:cb:8b:d1:
24:bd:4b:99:12:6f:53:a6:03:c4:c5:cc:58:1d:ed:
4a:57:6b:68:cd:d6:c4:18:01:63:63:f2:2c:8b:0b:
42:c4:06:54:52:05:db:34:20:29:b1:de:a6:61:18:
74:89:9b:63:0c:9f:36:51:b5:91:82:0e:8a:68:ac:
e8:16:2a:61:23:68:5e:fe:22:f5:18:df:30:20:e2:
bd:33:ed:fc:5a:29:5a:92:9c:16:6a:5f:6e:9f:0a:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:7D:02:E7:36:E5:EF:89:DA:F7:F4:04:06:71:FB:F8:DB:34:F2
X509v3 Authority Key Identifier:
keyid:98:2E:A4:09:3F:98:1B:84:6F:2E:96:AE:7C:96:15:AF:2E:1C:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mC6kCT-YG4RvLpaufJYVry4cpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8a1586-0ae3-46ab-96d5-7d7df1aacd21/1/__N9Auc25e-J2vf0BAZx-_jbNPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8a1586-0ae3-46ab-96d5-7d7df1aacd21/1/mC6kCT-YG4RvLpaufJYVry4cpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7b:4e:07:95:37:e8:71:3b:75:3a:1f:78:2f:28:6a:79:0f:
9e:db:36:3d:72:7a:bd:f8:4b:98:83:33:a2:bc:96:93:fb:3a:
62:3c:b5:9a:58:97:b3:fb:b6:32:bb:6c:3d:04:63:51:12:4b:
40:ec:d2:61:68:05:64:c0:a0:e8:22:d2:5a:c0:e3:db:41:2a:
de:b9:5b:c4:63:e6:c7:69:d3:9a:8c:ff:21:6e:f8:ad:f6:33:
6f:fb:a3:87:6d:30:3a:74:ae:4d:07:a6:8a:13:ee:d5:cb:88:
52:04:8b:4a:44:09:4e:01:dc:7e:01:61:88:87:7c:5c:4c:e6:
c7:c5:67:2e:47:65:87:fb:9f:78:71:61:2f:1d:37:aa:1c:94:
50:7e:4d:64:e1:ba:1c:f6:1b:8d:44:88:19:c5:d1:d7:4a:49:
d5:a6:99:09:8b:58:53:79:2a:bd:20:db:d6:49:56:6d:24:db:
e9:6c:9c:49:e6:6e:48:85:ff:f2:85:d1:46:cf:73:b6:d5:9c:
60:48:0a:64:b1:b5:85:c3:25:08:23:a2:fa:8d:74:02:6c:64:
f0:24:f1:41:09:16:f5:11:b9:69:5e:e4:3c:af:e1:79:46:d2:
b0:d4:c8:88:84:54:7c:e5:30:de:2b:4a:dc:11:fb:ce:fa:55:
8d:28:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:09 2025 by rpki-client