Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/9ARDgcW6W1kDzazf5TCC4ro-iT0.roa
File: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (raw, json)
Hash identifier: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=
Subject key identifier: F4:04:43:81:C5:BA:5B:59:03:CD:AC:DF:E5:30:82:E2:BA:3E:89:3D
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019422FC124647FC79126C3CE44DF34DF869
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/9ARDgcW6W1kDzazf5TCC4ro-iT0.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31221
IP address blocks: 185.145.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:46:47:fc:79:12:6c:3c:e4:4d:f3:4d:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4044381c5ba5b5903cdacdfe53082e2ba3e893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:2e:cf:cd:f7:9d:ba:58:35:e4:1f:cf:48:
85:21:23:ae:57:61:7a:02:4c:d6:99:e2:28:1c:23:
57:af:da:c6:66:23:49:07:af:6a:7f:0e:bc:6d:41:
86:8e:61:90:b4:77:e0:8a:77:32:4d:f5:27:b8:51:
84:82:82:6c:d1:7d:9a:13:5b:c8:77:16:62:ae:4c:
64:d5:02:e4:87:e2:a7:6e:1f:23:70:0e:63:41:18:
3c:08:98:0d:c7:1e:e9:7f:a9:35:3e:db:96:4d:44:
03:dd:dc:8c:9b:a6:56:14:5f:44:c7:7d:58:28:59:
5a:fe:06:5d:ab:55:a3:62:22:57:dd:82:0d:ae:19:
5b:3c:f4:3b:3c:99:96:e7:86:10:07:68:91:7e:43:
dd:03:2c:e8:20:7f:47:d5:05:9f:e2:ec:d1:dc:bd:
b3:67:c8:cf:6e:a0:4b:c4:b0:42:93:fb:db:e6:d4:
a9:78:9c:64:45:d8:91:10:65:3c:09:be:47:2b:03:
3a:6c:ca:e2:c0:2a:a2:77:7d:0e:09:0d:4f:da:55:
36:a9:ae:6c:a0:79:6b:72:3f:8f:1b:ce:ed:38:11:
58:d1:9e:a8:ca:03:8e:49:b4:92:c0:9b:e1:f8:41:
26:70:bb:e1:4c:a1:d6:e1:ac:d5:cb:53:08:ab:08:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:43:81:C5:BA:5B:59:03:CD:AC:DF:E5:30:82:E2:BA:3E:89:3D
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/9ARDgcW6W1kDzazf5TCC4ro-iT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:75:6e:e5:77:fa:78:fc:01:85:56:d0:e1:e1:58:a5:f1:8c:
a2:36:83:d0:33:36:d2:98:f5:c8:41:39:90:51:e1:aa:0f:e9:
83:7a:d3:fc:34:67:00:49:df:82:8b:78:69:01:4b:64:46:95:
71:33:83:61:3c:0c:c9:55:ae:4a:85:75:e2:7f:dd:f1:c6:e6:
cf:42:4e:fa:77:ab:a2:db:b4:3f:c6:58:39:a2:40:05:c9:a4:
81:02:5a:c6:23:92:7f:70:8e:aa:e9:ee:03:45:cf:bf:d3:4b:
5c:5e:b2:b3:99:b8:ec:03:f7:5f:8a:f6:12:da:bd:f8:3c:ee:
3f:f7:25:30:4f:13:50:db:20:26:36:6f:21:e6:8d:4e:19:d8:
fd:41:16:9c:62:40:3f:6a:be:30:a8:b7:3e:6a:7a:d8:d1:17:
9f:74:04:a0:87:2c:c1:2a:00:68:39:8c:8e:44:83:c4:fa:de:
19:f3:4f:54:ff:18:03:4e:23:e4:d4:bd:43:9c:04:fd:df:5a:
f7:af:d9:c2:76:3e:e4:03:9d:fe:3b:f9:02:68:b3:6e:66:a2:
e2:b4:e2:36:82:02:19:61:bb:8e:81:a6:a8:db:ce:2d:aa:86:
d8:30:74:43:ae:30:06:78:86:09:1a:e8:79:35:ae:d9:2d:14:
35:67:c6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:22 2025 by rpki-client