Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/_D7djxZolRxCx5AgywEsR673Vyc.roa
File: _D7djxZolRxCx5AgywEsR673Vyc.roa (raw, json)
Hash identifier: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=
Subject key identifier: FC:3E:DD:8F:16:68:95:1C:42:C7:90:20:CB:01:2C:47:AE:F7:57:27
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 019421B24A347A99C20DDB9353A9E54F2A69
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/_D7djxZolRxCx5AgywEsR673Vyc.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202629
IP address blocks: 185.138.180.0/22 maxlen: 24
185.138.180.0/24 maxlen: 24
185.138.181.0/24 maxlen: 24
185.138.182.0/24 maxlen: 24
185.138.183.0/24 maxlen: 24
2a07:b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4a:34:7a:99:c2:0d:db:93:53:a9:e5:4f:2a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc3edd8f1668951c42c79020cb012c47aef75727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:64:ea:1b:ef:0e:f8:e7:fc:bf:7a:a0:2f:
af:d7:ca:9b:73:02:95:31:48:43:53:c9:47:9f:c2:
90:a4:1e:3b:a4:7b:92:70:52:3d:36:d4:e9:c6:ac:
22:43:5f:ed:4d:8c:15:17:4d:fe:0f:e8:f9:3e:bd:
e0:7c:9e:89:a4:cf:b3:67:cd:9e:fe:a4:0d:63:b3:
b4:98:77:4e:79:ef:77:10:fe:cb:82:42:5b:6b:86:
6e:36:1c:9e:03:3f:1e:68:84:eb:c2:3a:eb:b0:b0:
78:62:f5:4b:bc:ea:af:2c:5c:06:c4:78:98:c9:cd:
6d:fb:40:8a:61:5c:f8:65:8e:48:2c:4b:07:a8:05:
11:ee:8c:97:7c:70:22:51:bd:64:ff:29:f4:a5:83:
4c:08:2e:e9:48:f1:b1:d0:db:a1:0d:ca:73:9d:91:
d8:2c:3e:da:71:f4:a3:f7:df:cb:6c:99:08:ac:d8:
82:91:67:61:bb:4d:fa:7d:53:9a:b7:3f:3c:a8:8f:
70:97:12:c1:1e:5c:9e:21:08:70:43:ac:09:6c:1e:
ed:3d:1f:c8:82:a8:d1:d1:0a:ae:64:34:f2:b9:df:
08:d2:6d:52:d7:32:57:e5:ad:31:35:77:25:11:0a:
a2:1d:bd:41:93:97:b6:18:cf:47:8b:d2:77:0f:2d:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3E:DD:8F:16:68:95:1C:42:C7:90:20:CB:01:2C:47:AE:F7:57:27
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/_D7djxZolRxCx5AgywEsR673Vyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.180.0/22
IPv6:
2a07:b40::/29
Signature Algorithm: sha256WithRSAEncryption
58:32:4e:d9:47:6c:1f:44:17:f7:5d:33:2c:b6:7d:29:a5:c2:
8d:9e:db:72:bc:48:3a:92:7c:a9:d9:26:46:ff:ac:b4:2d:b8:
01:44:b6:a5:6d:b9:4f:e2:56:aa:27:c7:9a:3c:27:7f:b7:d8:
7b:8c:16:fd:7f:6e:27:93:43:56:57:65:87:04:fa:64:b3:43:
9b:28:bb:6c:4f:72:ba:36:60:7e:70:16:f2:37:c1:6e:8d:b4:
48:0e:cf:b2:7a:96:a2:ee:18:c6:68:7a:8e:d4:b7:de:76:27:
e5:71:bd:fc:4b:66:ac:4f:c7:cf:fa:65:47:b0:89:76:55:47:
f6:e7:b5:dc:0f:86:40:d7:6a:1c:e6:aa:c3:e4:c9:19:35:c4:
47:53:d8:1e:30:c4:16:e9:03:d9:59:2c:13:bf:90:05:2f:fb:
f5:79:d9:28:d0:03:54:d1:7d:d1:32:83:34:da:b7:9a:56:cc:
6e:68:0e:61:82:f0:15:d4:56:18:d9:80:04:82:0e:d3:8c:91:
a3:64:bc:a1:e5:90:75:09:ab:b2:cd:37:0a:dd:cd:3a:2d:6c:
06:b7:42:0e:84:cf:59:f5:49:1d:67:17:50:b3:6c:71:0c:7e:
56:dc:3c:c8:bf:a2:f0:bf:05:59:5c:d1:f1:ee:eb:1b:49:78:
d7:42:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:31:16 2025 by rpki-client