Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa
File: F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa (raw, json)
Hash identifier: cui3T69juyxfuuKRDXOJBwPcUU7RywnAUmPOHsvMScE=
Subject key identifier: 17:B3:F6:EE:3A:17:64:6D:9F:38:AB:D4:80:9D:9C:F4:64:69:D8:57
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019421B1E8070853AB0B1A21378836AA0072
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212538
IP address blocks: 185.34.128.0/24 maxlen: 24
185.180.28.0/24 maxlen: 24
185.180.29.0/24 maxlen: 24
185.180.30.0/24 maxlen: 24
185.180.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e8:07:08:53:ab:0b:1a:21:37:88:36:aa:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17b3f6ee3a17646d9f38abd4809d9cf46469d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:cb:1b:e4:5d:2d:f0:1e:c6:1d:41:71:e5:
cf:d1:51:3c:7a:67:34:c3:80:b1:07:a3:04:0d:ea:
07:ac:da:30:37:d2:7e:d1:8b:3f:ce:c0:41:d5:a4:
ca:3d:12:da:7b:e0:b5:cb:5c:8b:5b:49:a1:2b:46:
e9:dc:cd:41:65:a5:68:1f:d1:cc:d4:90:8c:e5:a6:
83:39:4b:14:0b:d4:fb:38:11:8e:e1:58:bd:c3:72:
09:d9:54:d0:97:d1:c2:53:f1:db:25:95:12:58:d9:
c6:1e:1a:ea:8a:58:b2:bd:a6:5c:3d:63:e8:bf:e4:
82:7c:5a:9f:dd:ce:85:ca:87:5a:4a:10:fd:5a:83:
33:81:83:d7:62:52:4a:5a:34:3a:c4:5b:14:b7:11:
8c:c0:71:92:16:db:7c:48:1d:32:b5:4f:41:7a:ab:
8d:36:25:32:84:17:f0:5b:c0:8d:05:55:9e:dd:59:
45:f4:7b:65:50:e8:66:49:f1:f5:36:c6:48:07:1b:
6a:dd:0b:c4:96:66:1f:4e:f1:c1:fb:74:c1:40:fc:
66:5b:4a:20:00:c7:24:a5:41:1d:4a:9c:4e:52:33:
fc:1a:e4:53:dc:b6:67:74:40:4f:14:48:8d:00:2e:
4a:46:6c:f9:8c:d4:6f:f0:67:da:cc:bb:b5:6d:6a:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:F6:EE:3A:17:64:6D:9F:38:AB:D4:80:9D:9C:F4:64:69:D8:57
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.128.0/24
185.180.28.0/22
Signature Algorithm: sha256WithRSAEncryption
75:37:ac:ec:05:68:44:f6:a4:a5:1d:64:5b:f8:be:b4:33:e1:
58:a7:3f:2c:17:5f:39:6e:32:6e:9c:fd:fc:73:29:c3:52:32:
17:5b:cc:ec:99:67:bb:1d:79:38:c3:a7:12:27:9e:76:65:b2:
fe:8b:8e:b9:82:24:e8:25:2c:21:9a:1e:4f:15:a0:41:0b:4c:
5a:e7:db:0b:61:a5:ae:0d:5d:e7:65:37:86:1f:34:c8:c4:6c:
0f:c8:3e:38:87:21:10:a3:9f:f9:f9:9e:da:d5:63:12:de:14:
52:65:d1:21:7f:8e:75:06:3a:bd:82:85:61:16:89:89:a7:c7:
54:bb:7f:d9:79:bd:bb:ef:77:46:ad:9f:49:f9:83:c3:cc:2d:
23:c2:6a:ed:b5:28:3c:44:bd:a9:a4:83:de:e3:70:25:36:79:
95:fe:7a:02:1d:98:95:dd:27:37:39:47:51:f6:02:9e:86:de:
dd:f9:92:bd:88:c9:a3:d6:02:b3:f5:61:20:d6:2c:73:fd:7f:
6c:10:12:1f:54:4e:b5:2f:0a:a4:66:42:0e:d7:1a:19:28:7e:
42:84:7b:ed:28:43:f8:d7:2f:af:70:0b:01:74:08:6b:70:8e:
92:e4:76:17:f9:b1:b6:b8:2d:7d:d5:b6:c3:f5:33:8b:96:fc:
96:3f:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:31 2025 by rpki-client