Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa
File: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (raw, json)
Hash identifier: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=
Subject key identifier: F9:53:C3:BA:89:C2:D8:78:BC:74:19:53:E2:DB:E7:3A:21:DD:60:E8
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019424B3F39197D8C4930FD1E5C62BA93776
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.199.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f3:91:97:d8:c4:93:0f:d1:e5:c6:2b:a9:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f953c3ba89c2d878bc741953e2dbe73a21dd60e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:d8:9d:99:57:4a:2b:45:da:a6:89:80:a6:
26:37:78:5e:09:bd:48:ca:e7:86:61:0d:a0:f3:ec:
b6:b9:93:51:3a:33:35:80:cf:7f:53:5f:68:a9:6a:
07:d3:32:4a:f7:4d:62:cf:2b:81:8c:2d:7f:5a:93:
7f:8b:df:65:6a:3b:44:1c:e1:ac:1a:32:cc:e3:17:
d8:45:96:b5:dd:34:1e:f3:ae:38:8c:5c:9f:37:7a:
f5:93:63:36:29:f2:c2:37:03:44:b0:4a:19:74:d0:
97:89:4f:a8:e2:63:46:b5:f4:9e:35:85:de:ee:c7:
26:2d:a5:dc:56:58:ce:1f:6a:86:7e:e6:4a:4c:6c:
e6:bd:fa:ff:54:0c:a7:c9:09:bb:90:41:0e:e8:28:
39:c7:5f:b3:d3:3a:72:9e:18:18:a8:0f:c8:98:d9:
5a:ac:f5:16:73:b1:01:3f:c5:e6:e7:2e:08:88:70:
81:39:39:74:4a:e2:a8:51:f4:da:51:90:93:f4:06:
41:fe:7c:a3:e9:e2:a5:1c:1c:da:f3:ec:a6:f0:ae:
c8:f9:ce:88:9a:c4:31:e5:91:bb:fa:be:12:bc:d4:
18:65:1c:b3:23:5c:8f:83:62:ab:d2:34:87:1d:12:
e5:c9:ad:06:06:58:2a:e3:da:13:69:08:1a:11:e1:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:C3:BA:89:C2:D8:78:BC:74:19:53:E2:DB:E7:3A:21:DD:60:E8
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.227.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f7:58:ce:28:b4:b8:0d:dd:2e:12:54:87:bf:3e:4e:0d:62:
3a:33:25:de:bf:a2:a1:08:dd:33:48:4f:ee:f5:a8:08:a4:49:
78:1b:99:44:fe:3a:e6:18:50:8e:38:71:d4:97:fd:62:b6:74:
af:59:87:28:b5:24:6b:ab:b2:1c:bf:2e:fa:2a:b3:ed:e6:4d:
0f:cb:0e:61:fa:5a:4a:6f:24:34:ae:ee:a1:0d:4a:5f:94:a8:
ea:2b:6b:ff:9c:dc:e8:e9:de:7a:fb:24:50:e7:e5:44:02:d5:
10:7c:42:3e:02:96:cf:98:27:e2:d7:d1:c7:78:95:cd:b3:93:
e9:51:7d:5a:9f:25:bd:e4:f0:b1:1b:bd:43:aa:00:ff:d7:44:
f4:ba:9d:9b:bc:18:b2:37:67:da:bc:fa:3d:23:25:f5:a0:89:
01:65:60:a2:d9:68:06:1c:d5:e6:36:02:3e:27:c4:1d:c2:5c:
33:00:5f:32:14:d9:44:dd:09:59:f3:d2:f0:16:94:f0:bb:4f:
f0:aa:0e:ea:1a:f2:8d:3e:c4:b7:9f:bc:4f:ad:ef:be:ca:5e:
cd:4b:59:f0:45:c8:a0:51:f4:cd:ef:72:0b:75:6f:97:4c:13:
80:bf:98:06:73:4f:8e:0f:ac:f2:c4:35:8a:66:5b:c0:e4:85:
5f:d7:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:24 2025 by rpki-client