Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/2oVWM8u7drYai34wEFYN2EyETU0.roa
File: 2oVWM8u7drYai34wEFYN2EyETU0.roa (raw, json)
Hash identifier: tC/p+kFVnyyR7qD74UeOj0fdin0r0vZksmbt+AEYkew=
Subject key identifier: DA:85:56:33:CB:BB:76:B6:1A:8B:7E:30:10:56:0D:D8:4C:84:4D:4D
Certificate issuer: /CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Certificate serial: 018570FBC95317F30420B5DAEFFBF0196D85
Authority key identifier: FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/2oVWM8u7drYai34wEFYN2EyETU0.roa
Signing time: Mon 02 Jan 2023 05:37:07 +0000
ROA not before: Mon 02 Jan 2023 05:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.140.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:c9:53:17:f3:04:20:b5:da:ef:fb:f0:19:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Validity
Not Before: Jan 2 05:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da855633cbbb76b61a8b7e3010560dd84c844d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:90:ed:f0:22:61:fd:65:87:aa:b9:1f:1c:
fc:d8:cf:84:50:a7:32:c4:ba:53:ae:22:d3:a9:3f:
bc:e8:d8:50:da:c1:35:f4:18:56:a0:56:97:0e:52:
1d:45:c5:05:59:ae:18:5a:23:76:5a:e8:cd:34:cf:
40:c3:a9:5d:2a:1c:3f:f4:0d:b7:06:bf:87:8d:65:
e6:8a:c7:26:39:c8:75:cb:f4:2e:8e:96:f7:21:f5:
66:bf:e3:c1:88:08:e5:2c:0a:a7:03:17:ec:3b:ab:
f2:9a:31:90:43:d2:18:01:b2:e2:ad:bb:a7:f7:a4:
6d:30:79:cf:91:61:da:12:b1:43:73:36:d8:b7:df:
ed:11:23:7d:56:18:8b:9c:3c:d5:f6:3c:ef:92:04:
51:85:4c:25:19:7a:9b:62:6e:62:f1:8d:ae:e6:98:
bd:ef:3a:44:72:c4:ac:68:ab:a9:e4:ce:db:b6:30:
9b:be:de:08:fc:3e:e9:28:2b:c9:bc:04:bd:8e:a3:
5c:89:3b:6d:1f:62:9e:dc:bd:1b:fc:09:92:b7:96:
88:d0:05:43:07:e6:ca:2f:9f:17:2c:44:6e:db:5d:
62:f6:c2:d3:b5:b4:0a:a0:07:ff:55:b5:49:94:3a:
b5:84:52:00:6c:51:ab:b1:9e:ca:e2:5a:5a:b8:89:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:56:33:CB:BB:76:B6:1A:8B:7E:30:10:56:0D:D8:4C:84:4D:4D
X509v3 Authority Key Identifier:
keyid:FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/2oVWM8u7drYai34wEFYN2EyETU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:9c:00:ff:c6:06:8a:16:71:a1:aa:15:74:40:dc:66:a5:d2:
df:88:9d:aa:84:07:71:d1:ef:09:2d:89:98:ad:2f:39:d3:45:
da:1c:29:21:9f:c1:ff:fb:40:48:96:f6:f5:34:c6:ea:5f:2d:
4d:2a:f2:e8:04:d8:34:7d:96:ec:6e:3f:9e:bd:34:30:9f:b5:
10:c8:1f:27:e1:71:67:4d:b4:e7:cd:38:46:87:c6:4f:bc:98:
c5:df:83:21:31:7c:4f:57:1f:b7:9a:5d:41:97:28:cb:43:63:
2a:21:4f:00:e0:8c:41:a3:25:e7:ef:24:43:58:56:76:f9:ea:
6f:de:18:2f:d5:d2:89:61:45:42:e0:27:23:7f:b9:f3:04:6b:
44:ad:36:0a:43:59:e7:61:6e:51:de:fb:fa:d4:8c:ea:78:34:
f0:c1:99:4f:f4:cb:11:bb:a0:45:31:91:1a:7f:40:a9:ed:26:
18:90:8c:0c:9b:72:fd:61:8e:2e:bd:79:f5:48:a7:9b:af:df:
06:57:d4:5d:9a:a4:78:85:d7:d1:43:82:2f:d9:d0:cc:92:fd:
4d:7a:b6:a3:19:d8:7e:55:c8:47:a5:1f:d0:93:42:79:b2:60:
1b:61:1c:de:35:05:89:db:f7:cb:8b:ab:14:e0:af:31:1a:34:
f3:f2:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:41:56 2025 by rpki-client