Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/9anLZpxCdtczPvdlYCXgAxbRs8M.roa
File: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (raw, json)
Hash identifier: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=
Subject key identifier: F5:A9:CB:66:9C:42:76:D7:33:3E:F7:65:60:25:E0:03:16:D1:B3:C3
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 019420682DF2BC0D2B6E9AFF6C8EBA1BAD90
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/9anLZpxCdtczPvdlYCXgAxbRs8M.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.146.173.0/24 maxlen: 24
185.146.174.0/24 maxlen: 24
185.146.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2d:f2:bc:0d:2b:6e:9a:ff:6c:8e:ba:1b:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5a9cb669c4276d7333ef7656025e00316d1b3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:b4:3e:e6:49:1f:6a:7f:54:61:a3:be:05:
d6:c2:6f:85:93:ba:2c:df:f6:1f:03:3f:89:91:1a:
f3:87:9d:dd:87:7a:35:4e:57:c2:01:e5:57:ca:a8:
17:f9:d0:65:f6:04:3d:27:df:60:a6:ea:99:94:53:
a1:dd:50:e9:3b:a4:2d:2c:49:11:c8:14:c1:d3:57:
83:aa:d7:5c:9f:27:ad:55:65:5d:85:75:9b:03:92:
96:6a:ae:ea:85:38:8e:bf:cd:31:8a:89:25:16:3b:
ee:a2:bf:bc:e9:36:f7:1b:69:f1:f5:6c:c9:9d:ea:
fd:79:a5:7e:bb:2a:44:f8:1c:0b:02:ff:5a:13:26:
75:9c:06:3a:2c:f4:01:f1:ce:fa:02:73:ef:d6:de:
ca:26:b2:59:02:5c:88:dd:36:d6:ad:c0:8e:0f:90:
4f:6b:f4:51:7f:cb:b2:35:20:79:d6:ca:df:b1:08:
cb:dc:78:7d:84:da:f7:52:d0:4f:5b:38:a7:b5:14:
69:12:23:27:c6:a2:b8:ef:5a:cc:fa:de:0a:84:57:
0d:a7:fd:8b:59:3f:66:0f:e4:65:60:f2:e5:53:5f:
3a:59:b3:37:f4:3e:30:3b:58:2d:59:b7:e1:91:66:
17:f6:56:d7:b3:d3:7a:62:9b:c2:7b:9d:81:1e:5c:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:CB:66:9C:42:76:D7:33:3E:F7:65:60:25:E0:03:16:D1:B3:C3
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/9anLZpxCdtczPvdlYCXgAxbRs8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.173.0-185.146.175.255
Signature Algorithm: sha256WithRSAEncryption
51:cf:5a:64:3b:4c:a1:00:fb:48:be:f1:b9:f0:55:7e:8b:9d:
14:00:a4:a1:35:26:ff:eb:4b:b5:30:a0:82:46:19:74:20:f8:
f1:10:1c:0e:a1:dc:47:15:19:bb:61:33:4f:c8:77:05:de:92:
19:68:1a:b2:e4:0d:db:d5:d7:70:a8:d8:38:c0:16:1a:48:9c:
43:f2:7b:6e:35:4e:bf:96:25:99:06:4f:dc:f6:00:b6:55:ab:
9d:8f:50:b2:cf:cf:ea:b8:5d:e0:81:d0:5a:7d:62:cf:31:87:
a3:82:e4:7b:13:d3:e8:f6:20:5b:9c:a6:a0:c9:0c:f4:17:e3:
16:99:15:54:69:f5:15:cb:24:43:32:24:fb:af:d4:8d:3e:ba:
63:ab:d5:c3:00:76:07:19:2b:d8:53:cb:45:27:c4:3c:0f:d3:
da:b0:b5:5d:f9:88:f8:83:b5:aa:f8:db:37:b9:6c:cb:02:99:
b4:12:76:88:ea:ea:7a:4a:ac:dc:b9:ad:b2:bb:5d:73:3d:3a:
22:40:f6:50:e3:ee:ef:02:22:16:9f:2d:81:5b:00:67:59:93:
c6:a7:68:65:6f:26:d2:96:13:d8:c4:2e:1f:ec:a6:a2:07:9b:
74:08:9e:9e:17:87:b7:2c:93:f9:c2:4c:00:41:e8:99:74:bf:
1f:7d:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:54 2025 by rpki-client