Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9zkYfNO5jXLh36d87kMFPM1i2uI.roa
File: 9zkYfNO5jXLh36d87kMFPM1i2uI.roa (raw, json)
Hash identifier: k0391Y2fOTKPBOrqTSkoVUkUU0brU9j05sOEuHkF5A4=
Subject key identifier: F7:39:18:7C:D3:B9:8D:72:E1:DF:A7:7C:EE:43:05:3C:CD:62:DA:E2
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A52C6F9336903B15329E2703E9DD3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9zkYfNO5jXLh36d87kMFPM1i2uI.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211041
IP address blocks: 185.172.167.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:52:c6:f9:33:69:03:b1:53:29:e2:70:3e:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f739187cd3b98d72e1dfa77cee43053ccd62dae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:bf:67:4c:34:97:92:27:58:f5:af:47:0d:
2b:33:4a:f7:5b:7c:c7:b8:2d:fd:aa:b9:c8:5f:b2:
fb:15:6f:9e:ab:1a:44:b3:50:ed:be:22:9c:da:d8:
dc:7c:c4:b9:72:c2:9b:ba:e9:9e:0e:92:de:d3:13:
57:1c:6d:5e:3d:f6:f1:6b:9f:e9:8c:94:41:f0:c7:
0a:ec:15:3a:da:b0:b2:c8:96:4e:16:c7:a6:31:8b:
da:40:b6:d7:aa:97:ce:e2:78:cd:95:0a:85:87:b5:
f1:af:6f:e5:fc:81:4a:08:27:eb:3b:26:5d:29:83:
cb:96:50:a5:60:82:44:09:8d:4b:e0:82:d3:d3:59:
6c:ef:71:e2:5d:e6:c9:ea:2f:ee:7f:b1:ea:0d:bd:
d4:33:5d:14:f5:c0:62:79:c8:2f:58:f7:6f:a5:6f:
ce:01:2d:d3:78:73:69:f5:17:44:5b:d6:34:af:cf:
1a:f0:31:2c:f0:a8:83:36:8c:2a:36:6b:bf:aa:67:
31:2e:25:7b:05:5c:14:53:67:de:d6:f8:53:f0:c7:
d3:c2:6d:37:25:f8:5d:3b:76:d2:80:6c:99:1b:c8:
cc:54:59:ee:ab:85:06:8a:a1:a7:04:57:3a:f8:37:
d2:ba:c1:7b:53:f4:bc:97:82:e1:38:eb:60:f8:dc:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:18:7C:D3:B9:8D:72:E1:DF:A7:7C:EE:43:05:3C:CD:62:DA:E2
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9zkYfNO5jXLh36d87kMFPM1i2uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
Signature Algorithm: sha256WithRSAEncryption
64:95:39:37:9d:15:ea:a0:ed:6d:02:99:2f:f7:90:9b:03:15:
f1:ee:8b:f5:d3:db:75:3d:c3:28:db:2f:59:0e:32:d2:38:4a:
ea:63:ac:9f:03:98:b1:9c:ea:c3:ca:93:a1:7f:fd:ee:29:42:
44:08:4c:68:fe:69:69:93:95:22:a4:b8:9f:99:7e:3e:c8:40:
f4:12:2d:08:0a:cf:32:74:bd:36:8d:07:e7:ec:fe:88:93:03:
58:4c:2f:ff:e4:63:0a:39:90:ce:14:d0:fb:52:43:e6:ab:d7:
5f:bd:23:60:65:f7:ea:ad:72:24:06:16:b3:55:a8:1a:5e:6c:
89:9d:a5:a2:28:16:89:51:c7:2d:e6:41:9e:35:c7:89:8e:33:
95:43:8d:ac:24:77:c4:8f:83:a2:6b:7c:10:9a:ba:59:4c:58:
47:18:4e:de:29:a4:92:da:34:48:13:95:9d:70:e5:85:ab:17:
b4:25:19:44:66:12:51:14:1c:64:d6:7b:a5:32:16:c3:71:66:
9d:f6:6f:30:bd:a3:8d:b5:55:e0:33:ba:f7:4e:e4:d2:fc:b6:
4a:af:53:04:5e:3a:09:0b:7e:8c:73:80:ff:f9:ea:a0:0d:af:
38:c9:8e:2a:61:67:95:7f:ef:cc:ab:ff:a5:81:64:41:7c:35:
c7:d9:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:15 2025 by rpki-client