Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/2RmBGSkamtcKknsNIoWFXrZb-Og.roa
File: 2RmBGSkamtcKknsNIoWFXrZb-Og.roa (raw, json)
Hash identifier: Fv7H1gbvKOPESKuDpaGf8o4aXlgy0duuVQv1vDMRG5A=
Subject key identifier: D9:19:81:19:29:1A:9A:D7:0A:92:7B:0D:22:85:85:5E:B6:5B:F8:E8
Certificate issuer: /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial: 0193E11EFA1180D48C55204E71E36514A90F
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/2RmBGSkamtcKknsNIoWFXrZb-Og.roa
Signing time: Thu 19 Dec 2024 22:52:03 +0000
ROA not before: Thu 19 Dec 2024 22:52:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.128.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e1:1e:fa:11:80:d4:8c:55:20:4e:71:e3:65:14:a9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Validity
Not Before: Dec 19 22:52:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9198119291a9ad70a927b0d2285855eb65bf8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:f9:42:30:38:bf:fa:75:09:2a:7c:44:f6:
7c:89:c2:47:41:5a:12:c0:a1:4a:5a:b1:df:a5:58:
f8:73:4f:4e:5a:dc:46:c3:0b:fe:4b:14:06:86:fa:
a8:0e:18:d4:93:33:6c:1a:0d:9f:99:4c:a4:22:71:
6b:1e:e2:a0:7d:df:bc:0f:1d:7c:a0:19:c4:36:56:
87:7d:14:1b:3c:8d:ae:10:86:2e:49:f1:b0:69:0b:
35:e0:68:32:14:43:ef:8b:8b:72:f3:4c:ce:a7:42:
60:2e:5d:d3:b7:62:94:55:ee:24:c2:ce:fc:e2:87:
7b:90:79:25:d0:a3:4d:6a:4e:5e:59:01:3c:21:eb:
e2:29:33:95:e7:52:14:e2:37:d7:d4:f5:c1:5a:10:
4e:ab:e4:6c:e3:2f:d7:10:ae:f8:5d:79:33:94:d8:
41:fe:55:86:e9:56:b2:c1:51:55:32:a6:a6:92:ef:
d1:89:c7:de:32:77:3c:ce:7a:6e:36:a5:70:da:4b:
78:bb:9d:93:5c:87:9b:d2:7a:1d:30:bc:cd:e4:46:
78:8b:3c:11:a7:76:bf:d2:ea:7d:19:60:d6:da:23:
a6:01:38:2f:4e:07:e8:9d:b0:8b:dc:4b:e9:da:36:
75:5c:04:84:64:e1:fd:22:fb:f0:b2:99:28:d1:32:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:19:81:19:29:1A:9A:D7:0A:92:7B:0D:22:85:85:5E:B6:5B:F8:E8
X509v3 Authority Key Identifier:
keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/2RmBGSkamtcKknsNIoWFXrZb-Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8b:8d:70:70:33:e0:70:47:46:d1:43:d1:8c:52:b1:a4:cc:
b9:b5:df:d4:05:bf:59:a3:fd:e8:db:2d:8b:43:ac:27:62:34:
32:79:20:b4:62:1b:55:87:a3:38:1a:a1:e3:0b:d1:05:98:1d:
56:88:84:96:f0:e9:19:7b:dd:cb:ae:0e:48:89:81:5b:97:12:
46:db:ae:c2:4c:3e:11:70:a2:21:85:9e:dc:37:84:bb:e6:6b:
82:63:66:f0:6f:f8:4a:8b:a6:b8:27:84:5f:fe:cd:bf:bd:31:
5e:78:d1:5a:57:b2:bb:a0:4e:6a:d4:18:73:8c:db:0d:5b:28:
54:f5:ab:d6:36:d4:aa:9b:2d:01:62:e6:6b:66:b0:6a:66:17:
58:0b:ea:6b:83:48:17:0c:61:0a:54:84:10:11:9d:f8:51:51:
36:bc:a7:65:bc:c5:61:94:da:ff:16:71:73:02:9a:67:aa:f8:
8f:63:7f:c1:5f:16:6f:d2:70:a7:21:28:fc:6b:cd:e9:bf:98:
dc:58:38:f9:58:e6:38:02:e8:16:11:36:a3:93:ce:54:be:38:
28:12:54:af:ba:5a:23:25:fa:b9:a0:ab:35:37:27:b4:b7:03:
cc:6e:40:f0:53:d4:89:19:75:86:30:d7:70:e4:a7:a1:7a:bd:
8e:b7:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:12 2025 by rpki-client