Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/x9osegNwUKFrT1H1VZTt-kaY4bg.roa
File: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (raw, json)
Hash identifier: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=
Subject key identifier: C7:DA:2C:7A:03:70:50:A1:6B:4F:51:F5:55:94:ED:FA:46:98:E1:B8
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 0194258F6886B5B640BF69FC21A17747E291
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/x9osegNwUKFrT1H1VZTt-kaY4bg.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.195.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:68:86:b5:b6:40:bf:69:fc:21:a1:77:47:e2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7da2c7a037050a16b4f51f55594edfa4698e1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:c5:ec:9a:04:4b:26:25:0a:78:e8:23:bd:
6f:83:fc:4b:01:18:8f:30:9c:83:55:79:47:30:b8:
5b:5a:54:6a:48:64:a8:57:00:bb:66:35:cc:8e:50:
e0:0d:c9:cc:26:c5:a2:68:0f:6a:03:ae:70:ae:07:
08:95:aa:fc:8b:ef:41:00:6f:33:d8:16:95:c7:c6:
45:18:04:79:f2:d7:66:56:6f:2d:32:bc:42:5e:95:
4c:85:ae:bc:fe:91:6d:de:75:17:35:ed:38:61:2a:
46:66:c7:8f:9e:81:5d:39:6f:02:6d:74:f5:53:f2:
02:f0:36:a3:32:ef:df:c3:2d:f3:f0:df:6b:0a:c5:
4b:37:51:b9:ce:53:20:2d:53:aa:c4:32:21:42:c7:
ce:97:b0:c1:6e:c7:95:88:ff:f0:d4:2c:06:34:09:
81:4b:34:26:84:d5:13:06:ad:5c:3a:87:1c:d9:c9:
78:38:15:fa:10:1c:47:21:a2:70:ec:0b:79:df:a8:
34:cc:b7:f6:89:5c:9b:e8:a6:94:2f:4d:70:27:0d:
9a:87:7e:e5:43:2d:83:f2:ed:46:64:89:5b:5b:2e:
38:4c:ef:8d:3c:a6:a7:e8:04:8f:b7:dc:24:5f:be:
db:b0:86:5e:14:a0:23:24:9f:1b:98:86:ba:eb:70:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:2C:7A:03:70:50:A1:6B:4F:51:F5:55:94:ED:FA:46:98:E1:B8
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/x9osegNwUKFrT1H1VZTt-kaY4bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:66:7f:27:55:79:4d:2e:70:2c:cd:27:26:75:35:e0:52:48:
aa:10:a9:9a:51:93:3f:93:53:fa:8b:52:5c:a1:2a:68:6e:ac:
84:68:65:eb:22:a5:30:be:b0:45:c6:7d:e9:4b:f0:68:d1:c2:
07:06:bf:7b:e0:d2:2b:3f:1b:9d:3a:5a:27:56:0a:5a:79:17:
48:84:c1:23:40:0e:79:7f:48:f2:73:f9:ae:36:9c:f7:52:65:
67:23:6c:c7:41:10:04:29:ef:0a:3f:df:20:61:ad:60:1b:76:
68:a8:f5:c5:6d:fc:10:44:e8:8f:3b:ed:16:da:75:bd:c7:e7:
e3:16:d2:2d:37:48:49:01:39:df:7f:3c:d5:d5:69:38:cb:96:
a4:38:9a:e8:88:ae:3f:9c:26:b7:0f:6c:25:74:1b:2a:c4:0c:
db:14:0a:8a:26:69:b0:4b:02:b4:0f:ee:44:8c:29:e3:b2:4d:
ad:01:df:ef:3d:04:e8:10:3e:c1:4a:ea:ef:08:95:40:80:df:
95:69:f5:0a:67:94:a8:8b:b8:5f:e2:87:bc:3b:69:76:21:82:
d2:39:bf:f5:bc:28:a1:37:8c:b5:94:ab:fe:07:a8:cf:81:83:
55:eb:15:3b:2a:e4:1c:ce:d9:f7:e0:be:e3:60:cd:33:f9:e4:
1a:1d:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:33 2025 by rpki-client