Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa
File: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (raw, json)
Hash identifier: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=
Subject key identifier: 20:1F:58:BB:56:AC:41:33:CF:CB:49:E0:8E:DA:54:4D:04:7F:22:FC
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 0194266C30C3300FFED93B7EC5CDAA5BBF2B
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49796
IP address blocks: 185.129.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:30:c3:30:0f:fe:d9:3b:7e:c5:cd:aa:5b:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=201f58bb56ac4133cfcb49e08eda544d047f22fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:44:f1:b8:1b:e9:72:37:37:bd:63:60:f7:
40:16:fa:a5:6d:eb:8e:5f:56:2e:bd:e7:f1:13:9b:
92:f1:7a:5a:6d:1d:69:b4:b2:c8:08:c2:2a:45:53:
15:45:eb:0c:c9:53:22:fa:76:98:1b:7d:d6:0d:ec:
89:d8:6d:4e:c3:3f:39:c9:3b:d4:02:aa:18:a5:12:
be:c7:4c:07:41:70:8b:25:71:cb:14:79:ff:c8:48:
d6:ad:f7:61:50:32:43:de:cb:b7:f0:9d:75:ee:21:
44:10:31:f7:95:12:28:b7:96:1a:ac:57:05:96:fa:
bc:9c:5f:8b:55:72:08:66:3f:2f:5a:96:34:59:d4:
08:43:b9:11:4f:5c:ae:b7:68:4e:54:c8:4d:60:36:
f3:7f:0d:8a:65:80:8e:4b:17:d6:7b:f9:0f:4d:0e:
43:a0:e9:57:68:2e:84:0a:fa:0c:b4:cb:9e:c1:6a:
fd:4a:08:68:89:75:57:a8:b5:6f:21:1e:d6:63:1b:
e4:d8:ec:61:ae:ac:64:18:86:52:7c:92:46:dc:cb:
96:17:d5:19:b1:20:77:f2:c1:79:38:f5:01:a9:c5:
08:9e:f1:68:90:63:e7:a5:f9:88:0c:11:b1:eb:82:
18:37:89:66:cd:67:28:cd:8e:82:62:89:1b:2f:5f:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:58:BB:56:AC:41:33:CF:CB:49:E0:8E:DA:54:4D:04:7F:22:FC
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:41:f0:29:e9:a3:bf:69:32:c2:7c:09:73:23:bf:33:5f:f3:
4e:4a:05:95:55:84:16:7f:02:de:50:f1:94:96:e4:d8:d7:c8:
a4:04:cc:b4:09:fe:66:98:22:ff:5d:db:7c:cb:3f:2b:46:e0:
d7:d4:77:9b:d2:a8:39:88:dd:39:ae:1b:d3:a9:d1:75:19:e9:
b9:bc:c0:ee:b7:b9:5b:20:0a:aa:fe:48:43:78:70:84:1f:d3:
59:6f:04:fe:c8:83:05:f6:62:97:90:54:cc:e2:e8:f4:e3:24:
98:a0:c1:4d:e5:30:d4:8b:87:3f:75:21:57:8f:df:1a:9f:dc:
49:e8:39:09:ea:14:f4:6c:f4:9d:42:1d:1b:cb:ce:15:13:e4:
6e:fa:7c:fa:69:4e:b3:1b:a0:74:d4:98:04:6d:ea:53:8e:6a:
13:ed:dd:4a:44:03:43:7e:42:27:80:8b:38:2c:9c:3b:f6:ca:
53:61:98:7f:7f:22:05:71:a7:e0:d3:43:cc:97:2c:51:01:aa:
0b:05:c4:9e:5a:3a:73:82:82:66:63:58:c9:94:8f:e0:64:f1:
61:dd:82:9c:66:06:ac:ec:07:46:3c:cb:82:d3:7b:e6:0d:55:
a6:eb:ab:7a:04:14:b9:83:7a:6d:c3:59:30:1e:1e:bc:64:21:
8c:4b:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:15:14 2025 by rpki-client