Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/9CxZ9k_t9hMo55L6uAnbiDEpetU.roa
File: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (raw, json)
Hash identifier: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=
Subject key identifier: F4:2C:59:F6:4F:ED:F6:13:28:E7:92:FA:B8:09:DB:88:31:29:7A:D5
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0194206813CD9C9C9D27047EBC5EE8C81ECD
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/9CxZ9k_t9hMo55L6uAnbiDEpetU.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206596
IP address blocks: 185.240.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:13:cd:9c:9c:9d:27:04:7e:bc:5e:e8:c8:1e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f42c59f64fedf61328e792fab809db8831297ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:e5:60:47:68:06:dc:9c:69:99:b4:80:23:
30:aa:45:ce:a9:81:6f:fb:96:ce:ee:ac:6e:92:bd:
d9:6f:99:a1:b7:fc:e4:f0:05:0d:57:19:21:a0:1f:
bd:99:4c:0f:7c:95:9f:96:16:a6:15:46:37:3c:9c:
ff:05:cb:9f:cd:6d:9d:0d:17:6b:37:b0:36:b2:e6:
7e:e7:ba:a2:29:e2:14:69:00:b6:c6:23:ab:0d:ca:
9d:9a:98:18:f3:10:c9:fe:8e:78:0c:b6:c3:af:f3:
bd:fe:b3:21:12:1a:d9:f2:36:b0:ff:27:3c:8a:69:
7a:fc:a8:1a:66:a7:73:b0:8f:23:3c:1b:5c:62:16:
db:d8:1d:bd:df:33:c3:a0:55:ed:84:c4:d3:7e:07:
1e:06:94:03:62:f2:63:6d:f6:67:e1:47:96:63:aa:
fb:ce:36:1d:3a:c9:90:de:f4:c2:22:d0:02:a9:d8:
1b:a0:9a:24:f3:16:31:cd:db:34:f9:e2:31:8d:0a:
39:3b:cd:d4:ee:1a:07:85:ca:50:83:a8:4e:47:c5:
f1:96:1d:5c:53:87:c3:1b:2b:c3:69:b2:ce:e3:49:
e4:b5:05:77:85:50:f5:27:34:27:87:64:18:52:27:
4f:60:7f:b7:93:d5:40:58:ba:b5:43:52:ba:82:ee:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2C:59:F6:4F:ED:F6:13:28:E7:92:FA:B8:09:DB:88:31:29:7A:D5
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/9CxZ9k_t9hMo55L6uAnbiDEpetU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:cb:31:35:8b:52:2d:f9:a3:ed:80:80:62:a0:cd:0d:7b:f8:
97:3a:5f:e5:bf:6e:be:5f:98:f7:ec:58:c3:89:d6:26:4e:95:
74:b3:3a:08:33:4e:d7:62:cc:07:60:f6:e8:ba:81:6c:a9:8a:
a9:1a:f3:45:d3:69:95:49:85:19:b5:47:ad:49:76:b4:bd:78:
4d:cd:76:26:00:92:39:2b:73:18:ea:95:e6:25:b8:d5:0f:4d:
36:e2:58:f1:73:d0:08:3a:89:00:0f:c5:31:78:65:a6:f3:21:
a5:70:13:2d:62:51:d8:87:bd:df:e4:4d:14:d2:bd:b7:1e:d5:
d4:23:82:a8:40:0f:50:d7:11:ef:94:c2:36:a2:26:3b:ae:b0:
c3:62:21:b0:c0:2b:90:57:ff:bb:3e:3c:a1:d9:5a:b4:8c:77:
24:c8:76:38:b2:6e:d5:36:62:ea:26:43:93:3e:fb:b4:5b:b3:
97:42:61:f8:d5:0c:ca:e3:1e:46:e0:b9:93:3b:dc:36:71:4e:
e1:27:0f:ce:7c:df:9f:70:c2:d2:70:ea:17:72:69:0c:91:57:
47:c2:73:a0:94:de:a4:a4:11:04:93:c2:4d:14:32:fc:e5:e2:
ea:80:d1:6c:25:d8:e5:18:41:cb:1e:ea:c0:de:fe:fc:45:5f:
ec:5d:8e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:12 2025 by rpki-client