Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa
File: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (raw, json)
Hash identifier: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=
Subject key identifier: 33:F6:7E:56:10:D9:73:6B:8B:0A:D4:1F:7B:5D:32:1E:5C:1C:48:68
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 01942067F8400DB9703B305497912CB6CD53
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.240.128.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f8:40:0d:b9:70:3b:30:54:97:91:2c:b6:cd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33f67e5610d9736b8b0ad41f7b5d321e5c1c4868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:dd:48:eb:76:61:f1:c6:6e:b0:0e:65:14:
c9:f3:34:e4:a7:c8:a6:1c:1f:52:71:de:be:11:e6:
e8:02:17:29:10:68:0d:7d:3e:5f:1e:e2:0c:0b:0f:
ba:28:22:b3:74:34:25:6a:0a:ed:80:fe:72:d0:34:
3c:f2:4d:37:b1:2d:7f:41:54:60:c2:4c:3c:59:a9:
7a:dd:04:ed:71:77:6f:26:0e:b9:0f:78:bb:5e:76:
da:7e:e0:46:69:42:6c:32:70:23:8f:b7:f7:5f:77:
5d:c2:55:fb:b6:ce:f8:23:bc:5d:82:71:c6:fb:03:
4d:07:8c:05:ec:e7:6b:1f:20:6c:72:96:8c:78:46:
b9:24:e4:2c:63:bd:6f:db:93:54:69:99:d4:31:9f:
ef:8c:f4:ad:69:25:51:45:2e:35:4f:25:9c:ed:cb:
52:4e:11:17:57:68:cd:05:1a:78:b5:eb:f2:12:5e:
34:25:91:fe:bd:39:0f:c9:d0:6e:a8:ef:aa:0b:41:
61:18:84:74:60:55:3a:74:0b:15:75:2c:11:0f:9d:
5f:cd:53:17:50:3f:4a:41:8d:c5:bf:67:39:0c:14:
6b:bd:e7:e9:bd:e8:8a:58:21:ac:87:bd:0e:6a:f1:
e3:2f:43:6c:32:5f:a0:10:40:3b:d1:3a:78:05:8e:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F6:7E:56:10:D9:73:6B:8B:0A:D4:1F:7B:5D:32:1E:5C:1C:48:68
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:6b:45:3b:8b:03:94:17:4f:f6:ca:bb:2e:39:dd:7e:66:b5:
d0:a6:d5:56:13:0f:b5:26:62:3e:49:68:af:b7:0a:29:1b:43:
b8:d9:4a:8b:c6:ee:61:bf:79:26:5e:f7:5d:13:a8:1a:3e:ad:
fd:f2:41:c3:ea:f1:d4:2e:62:0f:f6:58:b5:9c:77:83:a0:44:
2d:d7:5b:88:cf:24:f5:ce:12:39:91:e7:80:fa:1d:df:bf:83:
69:07:2e:e0:70:08:d4:9c:cd:cc:36:f3:84:a4:f2:f4:04:97:
03:70:f2:a7:83:79:7b:76:de:85:af:3a:9a:bf:55:2c:2b:ca:
ca:4b:90:00:6b:db:30:ee:95:4e:58:8b:e4:53:bb:7d:49:4a:
15:0f:6b:3c:a7:13:a1:23:44:d7:85:c2:f9:e0:24:0e:23:a9:
49:da:e8:26:fc:a9:d6:06:17:a0:3a:bb:15:a7:0a:6d:c4:79:
98:00:97:23:67:fa:cb:31:c9:f3:32:4f:e1:0b:44:31:ea:89:
63:c7:c6:a1:d8:11:e4:b8:d5:a9:71:32:94:f8:76:ec:8e:a4:
b2:56:6d:51:6c:8d:27:37:ad:48:9e:d0:44:ea:8c:3f:23:49:
90:12:e4:3c:b0:92:6a:9e:fc:5e:0c:d7:29:7d:6a:6d:8c:60:
b7:b8:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:21:45 2025 by rpki-client