Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/b2-2zA239FER4wC7CBSDQ_s6itc.roa
File: b2-2zA239FER4wC7CBSDQ_s6itc.roa (raw, json)
Hash identifier: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=
Subject key identifier: 6F:6F:B6:CC:0D:B7:F4:51:11:E3:00:BB:08:14:83:43:FB:3A:8A:D7
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 01942521AEAC074EDAAA33139D615165D696
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/b2-2zA239FER4wC7CBSDQ_s6itc.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 185.135.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ae:ac:07:4e:da:aa:33:13:9d:61:51:65:d6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f6fb6cc0db7f45111e300bb08148343fb3a8ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:54:12:9c:e5:17:2b:4b:de:8c:84:c9:e8:
93:ad:04:fe:7e:11:db:28:3f:01:0b:6c:01:e6:74:
cf:84:09:14:28:81:bf:6c:46:53:2b:2c:aa:07:3c:
42:d7:3f:9b:6f:41:25:97:e3:79:10:72:a5:62:7e:
f2:ad:f0:48:67:d6:19:73:2b:2a:a2:51:7d:b8:f0:
fd:ea:de:e6:a5:83:3d:57:91:15:f4:7e:56:9f:76:
34:69:ca:e6:0b:d6:90:4f:96:a1:71:5d:76:62:e8:
eb:7f:58:00:1e:02:1f:3f:8e:4b:d9:f9:58:ab:75:
48:01:9c:19:fd:21:a4:98:e8:a5:8c:10:8c:73:af:
64:36:73:5c:73:fc:a2:30:20:15:e1:f8:1f:3c:56:
16:b4:e8:14:23:1a:3f:e1:8b:6d:61:22:ad:ab:46:
ef:0d:3b:20:30:4b:4e:88:bf:f8:b4:fe:08:34:d4:
cc:70:e4:82:db:42:21:b3:00:7d:f8:eb:91:ea:92:
05:f0:5c:76:63:7b:a7:ea:75:d3:28:e8:9a:2f:b9:
0e:0a:ac:b9:82:20:3c:ed:da:a8:2a:eb:6d:10:0a:
4c:37:e3:08:3a:1e:a1:6f:5f:1a:78:81:fe:d2:e0:
64:a9:0b:b7:1d:3c:25:b1:e3:a1:f4:b8:da:19:7f:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:B6:CC:0D:B7:F4:51:11:E3:00:BB:08:14:83:43:FB:3A:8A:D7
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/b2-2zA239FER4wC7CBSDQ_s6itc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c0:36:a5:83:d1:60:df:bf:52:f2:ba:f3:6a:50:63:0d:1b:
c0:cc:c0:86:3a:67:43:ca:43:fc:5f:ee:1e:a3:fc:3b:14:4d:
44:d2:14:08:69:77:28:67:c6:c4:35:bb:8a:b6:70:b6:8b:ac:
42:ec:df:4b:57:f5:6b:3f:a5:21:a9:7f:c4:14:6e:50:4a:2e:
07:8d:b6:d9:89:e2:a4:d6:a4:61:9b:22:33:b8:49:1b:e7:2b:
20:c3:64:bf:5f:36:e3:69:1b:ac:a0:46:32:36:f4:09:08:0f:
0b:58:d8:89:bd:a0:48:0c:5a:71:e1:b4:8f:ad:91:67:e4:38:
d7:45:f6:77:2d:54:76:5d:83:40:39:33:0d:dd:ff:a3:bc:ab:
b4:7b:f8:3c:6b:2a:6b:bc:ca:6c:7a:62:5d:e2:18:ce:45:b4:
67:a0:67:e2:1d:bf:b3:a3:b1:bb:2c:6d:48:4e:1b:0d:14:35:
2e:ce:ab:69:76:ae:b7:01:19:fe:80:1c:42:6b:09:36:cd:11:
80:06:51:dc:7b:aa:28:07:57:70:34:2f:05:b8:79:6c:74:4b:
9f:c7:16:77:2a:46:99:75:f3:91:bc:8f:68:7c:84:c6:1f:30:
c2:8b:27:63:1e:7d:2d:a5:b9:d5:2f:db:ee:a2:5f:5d:52:df:
5c:d7:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:53:44 2025 by rpki-client