Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa
File: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (raw, json)
Hash identifier: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=
Subject key identifier: 0C:86:D9:0E:A7:29:33:8A:9C:3A:13:05:F1:E2:97:16:6B:0F:BD:0D
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 0194258F4C3AD3258A75C568D53EE7376825
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208126
IP address blocks: 185.84.227.0/24 maxlen: 24
2a12:91c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4c:3a:d3:25:8a:75:c5:68:d5:3e:e7:37:68:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c86d90ea729338a9c3a1305f1e297166b0fbd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:47:bb:2c:32:09:71:29:99:63:31:21:05:
c5:6b:16:a5:75:82:99:4d:6e:44:5d:40:9e:08:8e:
1d:9b:de:ba:cb:fc:fd:ee:04:07:17:dc:e3:07:0c:
eb:ab:9e:5c:38:87:cb:b9:bf:8a:f3:28:b9:9e:ce:
09:b9:8c:0a:20:0d:da:58:f8:a2:0a:5e:de:58:a3:
8c:54:84:cd:0a:3d:bd:08:d6:94:7e:65:01:6b:e0:
22:8e:94:f0:75:5d:58:ed:8f:1b:15:5b:7d:b4:ec:
96:0d:26:a3:29:f7:f4:f4:fc:ba:c3:bf:d8:65:64:
9c:3f:28:cf:46:b7:a3:fa:dd:a7:09:e6:96:19:15:
16:ba:c3:05:96:e0:a5:b6:60:00:75:9b:3b:10:52:
09:e2:c8:04:cd:40:c1:56:1f:dc:e9:97:e3:b9:bf:
41:3b:52:2b:ec:b0:32:a5:05:15:fa:a5:d9:bd:44:
5a:a7:c9:75:b5:fa:01:59:a2:0b:e0:d9:2b:5c:e8:
a1:f0:82:18:b8:d0:2b:b0:3b:87:c7:52:c1:90:b5:
ee:77:5e:b0:c7:cf:e2:66:54:71:dd:a9:31:29:b7:
21:76:7d:63:c2:a4:1f:7b:c6:c4:fc:91:c1:3f:0b:
e1:9a:4a:d9:79:95:90:a2:12:60:79:25:47:32:7e:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:86:D9:0E:A7:29:33:8A:9C:3A:13:05:F1:E2:97:16:6B:0F:BD:0D
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.227.0/24
IPv6:
2a12:91c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:9d:01:57:56:06:fb:c4:74:64:bf:66:af:69:45:2b:23:6b:
ea:9d:9f:02:e6:7b:6f:6b:8c:b9:10:6a:f4:e1:42:03:20:6a:
27:5a:55:17:0e:c9:08:71:68:e6:35:1b:d5:3c:4e:a4:e0:eb:
2c:e0:2f:5a:a0:de:67:8d:f9:e3:95:81:11:88:d4:84:a3:ce:
2e:c3:3f:3c:4d:67:dc:55:46:e7:14:cf:78:9a:01:f1:27:64:
30:fe:b4:c0:44:ab:ca:85:42:64:7a:0a:4c:34:1f:eb:25:e8:
eb:35:bd:0f:c9:c8:11:88:e7:4b:3d:e4:75:ee:d6:a7:21:a5:
6e:9a:40:42:00:22:7d:0f:0c:39:eb:8d:85:e5:b1:78:16:4e:
2b:13:3b:0b:71:d0:7e:4d:97:2a:6c:9e:d3:67:60:00:0f:e7:
eb:e7:60:55:c4:96:9e:67:e1:66:2b:3e:d1:cd:14:43:78:3d:
75:0f:81:80:d5:04:d1:6f:f7:75:71:95:b4:8d:64:fb:b4:c5:
c0:21:17:e7:8e:e2:3e:01:cf:44:a1:2a:4a:ad:7a:17:91:c1:
87:91:02:dc:4b:94:25:7b:c9:cf:08:8d:e0:ef:9c:9f:e4:71:
5a:3c:a2:aa:42:5b:4d:e0:89:3d:72:f2:4b:9e:11:3c:78:94:
c6:52:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:02 2025 by rpki-client