Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/1-d9j_e6shg_nFZrPPxw6TDw8-XQ.roa
File: 1-d9j_e6shg_nFZrPPxw6TDw8-XQ.roa (raw, json)
Hash identifier: 3tsX+DYwb9miXr1vKRQsrF04YJjXfzHmrY3jaFpe9kU=
Subject key identifier: F9:DF:63:FD:EE:AC:86:0F:E7:15:9A:CF:3F:1C:3A:4C:3C:3C:F9:74
Certificate issuer: /CN=77d01100407f553f0fb131be72b32e4981237efc
Certificate serial: 019054616B9406E592ADA6F688A3AFBCB901
Authority key identifier: 77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/1-d9j_e6shg_nFZrPPxw6TDw8-XQ.roa
Signing time: Wed 26 Jun 2024 11:49:48 +0000
ROA not before: Wed 26 Jun 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48655
IP address blocks: 185.226.208.0/22 maxlen: 22
2a0c:6200::/29 maxlen: 29
2a0c:6200::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:61:6b:94:06:e5:92:ad:a6:f6:88:a3:af:bc:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d01100407f553f0fb131be72b32e4981237efc
Validity
Not Before: Jun 26 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9df63fdeeac860fe7159acf3f1c3a4c3c3cf974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:92:2e:5e:cb:f7:5a:54:89:45:ea:8a:33:
cd:fd:01:35:41:36:24:30:2a:4e:0e:6e:e0:00:55:
33:15:75:3d:32:b9:dd:92:ab:21:1f:3a:b5:98:a3:
5e:96:4c:e4:14:95:8f:04:df:7d:c6:51:c1:5f:11:
15:49:4e:c2:74:16:55:23:17:cf:24:f5:a4:3b:14:
c8:ad:a7:37:91:9a:6f:c5:eb:bb:a6:6a:ef:ad:3f:
da:5c:fa:ce:ce:9a:5a:86:78:d2:5e:f6:76:1f:64:
e0:44:a4:48:8b:50:d0:bd:14:be:e9:f3:19:db:c3:
a1:8a:b4:80:56:e6:71:57:44:55:3e:9d:2c:6a:a6:
b7:18:79:1d:41:81:d4:20:d4:cb:41:99:20:59:af:
ea:57:9b:81:6b:a5:8b:7e:ca:43:58:48:66:32:13:
10:b2:af:92:8e:fc:d8:6c:65:d0:6d:cb:ca:ac:a2:
83:09:a9:b3:3b:7a:8f:b4:9c:44:66:9b:94:33:6f:
d7:6e:68:10:36:de:4e:11:75:f6:50:f8:2a:61:cc:
1c:5e:fc:9e:21:69:b0:6d:e2:51:d0:3a:31:3b:c4:
30:62:af:58:56:d7:39:1a:0b:57:d1:9a:b7:48:b0:
18:dd:d1:a9:66:10:86:8c:29:61:36:f5:a2:9f:6a:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:63:FD:EE:AC:86:0F:E7:15:9A:CF:3F:1C:3A:4C:3C:3C:F9:74
X509v3 Authority Key Identifier:
keyid:77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/1-d9j_e6shg_nFZrPPxw6TDw8-XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.208.0/22
IPv6:
2a0c:6200::/29
Signature Algorithm: sha256WithRSAEncryption
5f:2a:6e:4e:f0:e7:7b:56:25:57:1c:92:bc:25:48:de:72:63:
96:34:ab:01:c9:d9:5a:54:c5:23:55:ff:9f:e1:c8:4c:5a:df:
d3:b3:d2:07:45:37:7e:31:46:76:ca:c0:26:59:ad:94:e1:ac:
9f:e7:ab:65:ef:45:56:4e:18:f0:f6:8e:58:51:81:91:6e:d5:
78:5c:5d:19:b6:d0:ce:3a:39:cd:24:bf:2f:8a:b6:57:e9:30:
21:bb:da:b3:ce:58:0e:6f:ac:d5:0a:d1:4c:8e:3c:08:a3:26:
ff:ac:4c:61:23:28:24:28:7b:51:e2:d8:98:7c:b3:d4:76:a8:
88:67:b0:a4:06:9f:a8:3c:19:0b:97:2d:b6:7d:90:bc:6a:02:
ec:7b:c9:9e:27:90:39:ef:23:25:18:45:e6:9e:5e:1f:96:e5:
1b:fd:e8:c8:f2:3e:3b:88:fe:7e:32:fa:f5:3b:95:0c:5e:d3:
28:ff:0a:5e:9f:57:9c:13:a8:8a:bb:52:04:23:35:ca:d3:06:
f5:6f:a8:b6:e2:db:e2:aa:2a:5c:5e:cf:b3:fc:7e:ec:da:c2:
c9:8d:0a:00:93:30:bd:a2:f3:98:97:48:95:7c:5d:db:29:16:
a0:6f:47:b8:c2:14:61:3a:15:da:f5:5a:16:bf:e2:41:45:28:
94:b9:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:50 2025 by rpki-client