Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/0Iy8NsUXTA0psQPyCINqg9pVI58.roa
File: 0Iy8NsUXTA0psQPyCINqg9pVI58.roa (raw, json)
Hash identifier: yvEGBqidyX57HbZdF/uHS+mpQFnEILAUnlH+f4viPS0=
Subject key identifier: D0:8C:BC:36:C5:17:4C:0D:29:B1:03:F2:08:83:6A:83:DA:55:23:9F
Certificate issuer: /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial: 019421B2106F135B8D4C9B4C9D509F86CD0C
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/0Iy8NsUXTA0psQPyCINqg9pVI58.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204645
IP address blocks: 185.109.172.0/22 maxlen: 24
2a02:4e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:10:6f:13:5b:8d:4c:9b:4c:9d:50:9f:86:cd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d08cbc36c5174c0d29b103f208836a83da55239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:32:3b:5e:ea:f8:2b:73:26:71:0c:ff:ae:
77:b0:ec:b4:cc:7e:a9:ac:62:a6:57:bd:4f:c9:6f:
bf:a7:a3:dc:6e:a3:87:b0:ca:12:e6:92:e8:f6:0f:
1c:bd:f9:cc:b3:28:da:77:95:99:d9:25:41:cf:c7:
c9:1b:20:2f:1a:b5:2c:a8:72:cf:ad:a9:e6:e9:0a:
36:bc:82:fc:0c:2c:e7:34:ee:d3:38:8c:17:41:8a:
3a:78:9e:c2:a1:1d:ef:25:0a:03:f3:23:14:f8:ff:
78:fd:71:47:ab:95:e5:ce:e2:bc:01:f3:21:9d:f3:
8f:0d:ea:a7:59:2b:57:a9:cf:0a:96:d8:4c:13:d2:
1a:63:54:f0:03:4d:8e:45:94:ca:65:4d:24:b0:1b:
6f:aa:c3:e8:1b:99:10:a3:72:e3:c1:90:3b:87:98:
08:46:21:bc:90:92:af:0e:c2:21:db:cd:87:8c:d5:
00:68:1f:76:7c:96:a9:b1:69:6e:5f:51:4b:b3:df:
d3:a2:da:89:48:69:12:73:50:95:53:9a:7e:50:c5:
fd:a0:4b:99:d2:43:ed:0a:ea:02:6f:9b:99:03:b2:
83:e1:37:a1:12:7a:45:6f:b3:4e:d3:51:ac:5e:97:
a0:e9:cf:77:b1:cf:7d:38:00:a6:4b:a0:d3:11:7c:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:BC:36:C5:17:4C:0D:29:B1:03:F2:08:83:6A:83:DA:55:23:9F
X509v3 Authority Key Identifier:
keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/0Iy8NsUXTA0psQPyCINqg9pVI58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.172.0/22
IPv6:
2a02:4e80::/32
Signature Algorithm: sha256WithRSAEncryption
28:ac:28:92:63:42:aa:fd:5a:24:1a:11:cc:10:b7:1e:c3:d2:
20:eb:73:ee:80:cf:62:47:08:8c:94:11:58:a3:d2:85:e0:b5:
b9:a1:0f:d1:4e:2f:3d:54:27:49:5a:14:ae:d0:8b:1b:78:09:
61:7d:15:35:5c:44:98:b3:cd:d3:d3:3d:68:2f:39:44:77:5d:
0c:8e:64:72:99:3b:02:29:7e:36:c7:42:54:19:9b:e3:0b:38:
81:85:2b:09:bd:84:b8:46:35:10:6d:d3:e3:bc:89:b2:7e:5b:
d7:03:88:3d:68:06:18:ad:96:34:29:06:8f:fe:14:43:ff:6b:
69:e1:c9:85:57:98:47:34:d0:9a:91:18:13:ee:a7:3b:3a:ef:
67:ba:df:c9:21:b7:c9:59:03:35:e5:fe:81:b7:9f:a9:89:c1:
4e:69:1c:48:c6:76:b0:85:a3:13:ee:f5:68:74:ab:76:0b:d4:
42:b6:7f:3e:04:3a:57:5d:b2:1a:10:cb:c6:70:63:bb:0f:f6:
34:51:df:9b:1f:2c:6e:6d:64:02:2c:16:cc:d6:67:b1:59:fe:
4f:38:f8:53:7b:28:c3:3b:c4:3f:dd:e7:f3:ac:77:84:86:65:
c4:f2:20:41:93:47:57:5c:24:1c:ac:6f:8f:e9:cd:a4:fe:2b:
82:58:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:00 2025 by rpki-client