Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-ochhCk65zwxN9cgPF-fURSly80.roa
File: 1-ochhCk65zwxN9cgPF-fURSly80.roa (raw, json)
Hash identifier: S4HddcF5h4yqb5QHScLNYmsBM99n2F7PMJ+zgdJPScY=
Subject key identifier: FA:87:21:84:29:3A:E7:3C:31:37:D7:20:3C:5F:9F:51:14:A5:CB:CD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018FEBAB5F99BA13D3ABD2CBA52015C9D726
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-ochhCk65zwxN9cgPF-fURSly80.roa
Signing time: Thu 06 Jun 2024 03:50:27 +0000
ROA not before: Thu 06 Jun 2024 03:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18796
IP address blocks: 185.177.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:eb:ab:5f:99:ba:13:d3:ab:d2:cb:a5:20:15:c9:d7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 6 03:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa872184293ae73c3137d7203c5f9f5114a5cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:d2:9f:d1:f3:cd:8c:61:30:c9:3b:12:fb:
7c:bd:00:20:29:71:b3:44:7f:d0:90:eb:1c:77:d7:
dc:0d:8b:74:c4:45:19:c4:c2:83:1b:0c:81:fd:e2:
1d:e0:28:f8:d7:75:21:ff:25:2f:48:1d:e0:65:1d:
1d:00:79:54:96:da:17:66:48:6a:f9:c2:9b:38:a3:
61:ec:58:3c:5b:0d:a3:6a:d9:df:76:bf:54:58:27:
f5:94:46:56:89:47:96:4e:a4:cd:55:ef:16:37:2e:
ab:20:6c:6a:97:08:51:00:2d:f0:f1:79:d7:8c:8d:
d4:0e:04:8e:05:b2:85:52:58:71:b5:09:6a:fd:4c:
c9:a1:6b:bd:a6:9a:5b:69:c2:e9:7e:21:78:29:b9:
a6:c8:f2:d9:c9:52:e8:cf:66:ff:e4:85:67:45:62:
de:42:d8:48:7d:c4:7c:56:a5:90:a8:7a:01:b0:df:
90:8e:01:ad:17:c1:a7:46:9e:b4:9d:d7:4e:4b:68:
66:ff:63:5a:54:18:fd:48:bf:a9:c1:df:44:46:6b:
58:a8:f9:ab:12:d1:15:41:fb:c1:e0:fe:e6:4b:2f:
db:b5:8a:34:79:5c:dc:38:79:14:0e:92:42:fe:2a:
72:8f:10:7a:82:89:3a:db:3b:85:da:83:8a:5e:a8:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:21:84:29:3A:E7:3C:31:37:D7:20:3C:5F:9F:51:14:A5:CB:CD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-ochhCk65zwxN9cgPF-fURSly80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.25.0/24
Signature Algorithm: sha256WithRSAEncryption
53:89:be:d3:03:b8:11:63:4e:f8:04:5f:5f:da:1c:24:20:98:
b4:4e:7a:25:53:48:3c:a5:2f:7f:e5:87:24:5b:49:74:af:44:
c9:6c:d4:8a:82:a0:08:40:e5:8f:17:3d:7f:93:b1:7f:c8:2f:
e9:ae:44:46:2e:a5:e4:23:cd:6e:df:8f:6c:43:6d:19:06:79:
2c:d8:02:56:fb:6e:c1:e3:0e:fb:29:38:47:16:fd:76:62:ad:
67:ec:6e:a9:ce:2f:9b:d9:24:3e:2c:9a:46:7b:15:55:72:1b:
73:aa:52:ec:b2:cc:a6:63:3c:af:bf:dd:b2:79:b1:08:4a:03:
20:0c:ef:df:03:5b:7f:56:9f:c0:57:11:f3:84:38:d5:35:ec:
6e:56:b0:51:8f:69:96:10:ef:9c:07:89:2d:56:a5:13:95:c3:
36:21:f7:ba:02:f0:75:40:fd:26:6e:cc:4d:d6:7a:3f:1a:ff:
6e:24:a0:c0:80:1d:e6:86:b4:20:45:bb:d1:54:85:43:5f:d2:
ff:28:1d:b2:43:56:14:b9:f5:95:e1:69:2a:5f:72:6a:90:aa:
fc:68:a5:01:73:59:16:a4:22:09:85:68:87:f7:a2:02:15:0f:
05:ec:a0:3c:5f:1b:f3:b0:ee:b4:fb:39:6a:7f:fb:a4:6d:94:
d3:f4:a5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:58 2025 by rpki-client