Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa
File: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (raw, json)
Hash identifier: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=
Subject key identifier: 37:47:87:A8:DA:E0:82:66:D7:74:DF:18:3F:BA:39:15:BD:18:9E:CD
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 01942369324949EA5768960DDBDE4CB544D8
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa
Signing time: Wed 01 Jan 2025 19:48:04 +0000
ROA not before: Wed 01 Jan 2025 19:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61272
IP address blocks: 185.177.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:32:49:49:ea:57:68:96:0d:db:de:4c:b5:44:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Jan 1 19:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374787a8dae08266d774df183fba3915bd189ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:a9:33:02:bc:59:81:f2:83:34:7f:d8:1b:
75:b9:85:60:34:71:aa:12:b4:de:91:b9:24:d2:ae:
0e:43:f5:5c:2d:17:48:92:c4:cf:4e:da:5c:9f:03:
64:14:89:86:e0:78:e6:00:79:4b:63:e5:64:e1:03:
c9:ed:4e:e7:cf:99:de:53:4d:2c:05:dc:3e:45:a1:
27:10:7d:20:9c:bf:a7:dc:04:de:44:bc:2e:5c:df:
7d:59:af:b9:af:f9:aa:7d:74:31:95:49:bd:e7:0b:
fb:22:10:7e:cf:68:0e:64:74:35:f4:1c:ac:0c:d1:
27:f1:0f:03:51:35:49:a2:d8:c1:5b:86:6a:55:92:
55:12:4c:07:3c:a5:82:66:59:99:71:89:76:e3:b2:
33:38:5f:38:86:88:14:41:e6:b7:b5:f4:5f:9f:ae:
95:f5:1e:67:31:f1:50:cd:2a:38:dd:41:91:5c:a8:
e1:6a:1d:f4:de:96:f9:65:9e:8a:b8:d5:5f:ae:99:
36:00:11:bd:d5:3a:3b:ce:3f:bb:34:ad:03:cf:aa:
f8:1b:79:6d:94:b5:9f:b4:10:cb:14:cc:cb:4c:d3:
9e:82:d8:35:ac:64:e3:a4:7e:42:5f:c0:88:1a:ad:
33:e9:ff:a0:c8:48:78:a0:b5:91:95:a7:6f:be:5c:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:87:A8:DA:E0:82:66:D7:74:DF:18:3F:BA:39:15:BD:18:9E:CD
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.150.0/24
Signature Algorithm: sha256WithRSAEncryption
86:42:b0:e7:04:aa:55:16:da:04:1f:9a:64:c6:39:e4:56:12:
86:50:20:b2:69:8f:50:1c:f7:8c:f3:e8:20:ec:88:32:02:91:
f5:79:9c:30:1d:17:d7:23:5c:83:0c:9a:95:7f:50:62:68:86:
2d:7d:da:87:fb:c3:26:a0:5f:35:8d:ff:51:ba:ae:5d:bc:97:
5f:89:af:88:6a:6c:5d:83:b0:2c:47:81:5c:a5:a5:9b:62:bd:
22:39:1b:4b:81:ea:83:de:05:38:e9:14:ca:32:db:3e:39:1f:
af:13:02:b2:bf:9e:7d:3a:5f:03:82:df:c2:6e:72:50:78:17:
08:a8:15:56:56:74:4c:15:29:44:97:73:05:8a:ea:2b:ea:ba:
f7:f0:0f:83:99:17:b4:85:fd:a7:20:f2:30:9e:19:03:ce:56:
bb:e5:88:bb:67:d2:ee:b8:8e:1c:7e:a0:46:bc:94:ed:fe:15:
b6:17:68:77:ac:b8:76:b8:9c:04:ed:f4:de:41:f3:ae:7e:0e:
de:d7:6d:fa:07:39:23:13:ce:ee:90:85:7c:10:61:58:0c:c8:
83:a2:92:b2:48:d0:d7:63:f1:41:14:02:91:10:5b:9f:f0:a9:
fc:24:7f:d9:c5:5c:80:de:0e:98:04:97:bb:34:88:ba:37:56:
2a:60:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:27 2025 by rpki-client