Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/_51jX_RgZUWiVEK-S_q11tdiAsw.roa
File: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (raw, json)
Hash identifier: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=
Subject key identifier: FF:9D:63:5F:F4:60:65:45:A2:54:42:BE:4B:FA:B5:D6:D7:62:02:CC
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 019427B3E20F00B0606C287B70F13EB5C8BC
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/_51jX_RgZUWiVEK-S_q11tdiAsw.roa
Signing time: Thu 02 Jan 2025 15:48:07 +0000
ROA not before: Thu 02 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60706
IP address blocks: 185.26.196.0/24 maxlen: 24
185.26.197.0/24 maxlen: 24
2a00:8c60:1::/48 maxlen: 48
2a00:8c60:a::/48 maxlen: 48
2a00:8c60:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:e2:0f:00:b0:60:6c:28:7b:70:f1:3e:b5:c8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Jan 2 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff9d635ff4606545a25442be4bfab5d6d76202cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:2c:a9:e0:5c:d0:94:0d:b5:6a:f7:44:c9:
13:f3:fb:8c:4d:a8:42:ba:2e:c9:2a:6b:d2:02:a0:
20:47:67:fc:0f:80:62:27:92:f2:38:f2:4e:2f:50:
ad:85:da:5d:3b:81:c0:f2:e6:5a:b1:1d:3d:67:04:
ad:a2:b0:d3:42:37:dc:f7:9c:fe:ec:3d:11:8d:a3:
9c:30:79:1a:37:4c:90:1a:c0:40:e3:61:79:e7:95:
54:bd:d7:7f:e1:40:04:cc:d8:69:1f:8c:b4:23:ef:
88:91:12:a3:6f:e0:82:a3:86:c0:5f:4a:99:a0:88:
fc:13:02:cb:a4:e2:1c:e6:11:a5:04:8c:65:fc:0f:
41:c4:20:ee:3c:0c:7b:fc:1b:d9:38:0e:92:e4:a9:
f6:f8:7d:58:57:08:25:94:64:83:07:12:91:c2:14:
4a:e7:6b:ed:18:b6:e4:cc:69:ca:10:e7:58:8c:0e:
32:bc:fa:4f:7f:48:47:49:47:f4:42:d6:d2:49:06:
1a:c8:8d:6e:69:6e:43:62:f9:3d:d1:c2:57:1c:df:
3f:e0:4d:3a:18:b0:fa:2d:05:d5:b7:13:4d:15:07:
e7:e0:6a:26:eb:d1:4c:22:78:7c:36:3a:8e:70:b8:
6e:57:25:17:75:88:e2:df:d8:de:48:32:44:8c:75:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:63:5F:F4:60:65:45:A2:54:42:BE:4B:FA:B5:D6:D7:62:02:CC
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/_51jX_RgZUWiVEK-S_q11tdiAsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.196.0/23
IPv6:
2a00:8c60:1::/48
2a00:8c60:a::/47
Signature Algorithm: sha256WithRSAEncryption
29:7f:9c:6c:20:5f:81:d0:73:5e:a5:18:49:e3:0e:aa:b1:bc:
ac:d4:fe:02:64:69:4d:ba:08:09:22:17:98:20:d7:d0:43:94:
a3:88:e7:f8:7f:ad:0c:08:ca:73:db:bb:8c:75:99:d6:6a:5f:
56:ac:06:04:5c:19:6e:63:c7:4c:96:3c:aa:a8:fd:a6:20:52:
9b:60:e7:92:4f:57:d9:30:13:55:d9:40:76:49:76:e8:0f:1c:
39:ca:42:f3:08:df:91:4a:ad:56:36:ea:ba:32:a3:01:80:8b:
7e:1c:ad:5e:da:91:66:20:dd:03:f2:f0:69:ae:bc:a6:3d:62:
b9:6d:83:6e:0c:fe:e4:a6:70:c8:5b:fd:65:e5:08:5b:76:64:
69:a5:79:ec:d4:09:87:89:1e:57:8a:af:ec:3a:a0:97:44:75:
18:26:64:c6:b1:29:30:30:be:0d:dd:33:ca:0d:bb:6a:9e:e4:
3d:b1:a4:40:e6:81:56:10:61:a8:b5:45:45:2c:b2:2b:a3:0e:
85:0c:2c:98:95:52:1c:3e:47:74:89:10:9e:d1:c3:bb:6f:51:
b5:ee:cf:3a:70:b3:7d:6c:1a:b7:9c:02:64:d1:5f:c6:7b:e2:
8c:32:dc:d7:e7:29:c1:72:03:81:32:cd:e8:b6:d7:bc:92:c7:
ba:e1:5b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:47:55 2025 by rpki-client