Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/zWVlVmkEB7rMguHla-ob06L-eJg.roa
File: zWVlVmkEB7rMguHla-ob06L-eJg.roa (raw, json)
Hash identifier: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=
Subject key identifier: CD:65:65:56:69:04:07:BA:CC:82:E1:E5:6B:EA:1B:D3:A2:FE:78:98
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 019424B40145070D744CA6851B39222E24F9
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/zWVlVmkEB7rMguHla-ob06L-eJg.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272988
IP address blocks: 185.236.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:01:45:07:0d:74:4c:a6:85:1b:39:22:2e:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd656556690407bacc82e1e56bea1bd3a2fe7898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:c2:a5:9c:2b:5b:5d:17:df:b3:c4:e8:1c:
d6:69:cd:52:23:36:fe:ed:40:11:91:c9:f4:7b:bd:
66:be:ac:14:a1:02:25:e2:a6:25:64:48:68:1c:ee:
07:a7:c9:73:17:16:b6:a0:b0:0c:80:81:ad:ab:0e:
05:6f:2a:36:2c:3e:b4:0c:36:58:bd:71:c7:2e:ba:
b0:fd:00:01:1e:3a:07:74:cb:04:f4:92:1f:c4:b8:
db:0b:0e:49:4a:0e:ff:74:b0:3a:69:21:e5:1f:7f:
81:d8:11:21:73:8e:31:46:46:83:75:a3:12:c1:72:
03:ec:71:60:fd:d5:32:00:21:e7:1d:cf:e4:ff:e8:
92:5c:11:65:32:19:a3:a8:0c:7a:7f:11:09:58:ea:
3a:c3:7c:fa:6e:1c:87:af:cd:7d:b4:cc:8c:7b:50:
65:14:2f:6e:31:24:bc:32:5c:95:93:15:a9:66:66:
c5:ab:96:60:ca:bd:4b:dc:5b:ca:8e:80:e5:ec:8a:
06:20:6d:c3:bd:41:15:f2:34:17:f6:b6:8e:fe:e1:
85:60:f9:70:db:c6:64:ec:28:b3:d3:7b:41:7e:cd:
58:fd:a8:46:f5:4e:79:59:a9:b7:1c:99:18:cf:31:
95:21:db:52:7a:a6:fd:46:35:f8:6a:58:b4:37:1e:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:65:56:69:04:07:BA:CC:82:E1:E5:6B:EA:1B:D3:A2:FE:78:98
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/zWVlVmkEB7rMguHla-ob06L-eJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2d:4d:55:af:ad:f6:81:8e:ee:9a:b1:41:03:ad:4e:25:f0:
59:dd:eb:91:46:c4:ff:8a:86:c4:bb:7d:d5:04:c2:16:bb:01:
94:b8:6a:ea:1b:a5:0e:50:2a:a2:61:a7:df:77:44:81:11:e2:
95:02:76:cf:79:24:02:80:0e:55:1e:d3:9e:36:96:0b:10:99:
b7:74:4d:62:3b:45:37:c0:d6:c3:67:3b:7b:73:39:f3:e4:c3:
6a:ea:1e:b6:0d:46:cc:e0:b9:2f:a3:7c:dd:2f:cd:b2:18:48:
e4:8b:4e:c6:6c:fe:d6:e4:c6:33:32:99:b8:d6:88:46:b8:0c:
1b:ec:7b:9e:9b:99:e1:3b:5b:ed:73:b3:f5:88:41:8f:31:be:
4a:24:ac:94:c2:00:bf:32:a9:b2:9f:f6:32:f3:70:68:ec:2f:
ea:f3:7b:6c:87:31:1e:e3:e2:2c:81:8e:a4:6a:4e:58:50:5a:
12:c4:f7:b8:79:26:2b:61:95:69:e7:87:5b:5f:1a:c6:d9:9c:
91:93:bd:b9:cb:36:98:19:21:d6:39:0f:d8:ea:0d:bd:7f:f8:
69:e5:0b:74:5a:e1:de:5d:9a:d3:6c:d8:36:be:66:5d:ae:98:
d8:40:33:1e:8f:fc:58:4d:5b:c9:df:57:66:17:30:72:15:17:
24:1a:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:45 2025 by rpki-client