Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/SF9inl-Z2UBEp7L7rHoMTP2o47I.roa
File: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (raw, json)
Hash identifier: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=
Subject key identifier: 48:5F:62:9E:5F:99:D9:40:44:A7:B2:FB:AC:7A:0C:4C:FD:A8:E3:B2
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 0194B70FB20883572F8F5B00881113FB8B82
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/SF9inl-Z2UBEp7L7rHoMTP2o47I.roa
Signing time: Thu 30 Jan 2025 11:54:06 +0000
ROA not before: Thu 30 Jan 2025 11:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204540
IP address blocks: 185.112.172.0/24 maxlen: 24
185.112.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:0f:b2:08:83:57:2f:8f:5b:00:88:11:13:fb:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 30 11:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485f629e5f99d94044a7b2fbac7a0c4cfda8e3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:db:ce:02:62:2f:87:4a:ea:28:09:6d:c7:
22:4f:aa:c7:3e:ae:34:49:5c:e8:ae:b9:43:c9:39:
aa:a3:bc:4c:8d:63:3d:7a:ed:2b:fa:0c:b8:d1:c4:
e0:f8:58:e2:92:a3:ab:00:26:6f:cd:93:f4:76:36:
e7:19:25:ef:8f:5c:8a:3f:b5:0c:a9:18:2a:a9:c3:
ad:bb:6c:a7:f3:0d:dd:e1:8a:c5:13:00:bc:cb:2d:
08:cb:d1:ed:97:46:23:78:11:a2:d4:6a:39:bd:0d:
d7:37:66:6d:aa:68:7a:ac:52:d0:1a:9a:fe:b4:e9:
6a:ff:4b:0f:81:b8:86:f7:02:ad:9c:e2:3d:95:ac:
fb:c6:f6:54:77:02:2b:f1:25:eb:4a:e9:cc:50:79:
8b:66:2a:8a:0a:17:cc:b9:61:a5:c8:0e:24:4e:c7:
a9:b6:25:a1:98:cd:82:0e:29:ed:9d:c9:48:80:c4:
f8:78:89:6c:72:51:bc:5c:8b:51:ff:3a:fc:fc:65:
4c:1f:7b:8e:1c:ec:8e:e5:2a:f4:33:fd:e5:9c:48:
4b:06:3e:a4:45:a6:a4:ed:ca:ff:a2:67:2b:cb:e9:
d8:a6:31:2e:0e:16:13:39:c6:cc:fd:be:e8:46:64:
13:f2:04:e5:e5:4b:b5:f8:bf:4d:75:77:d4:51:c1:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5F:62:9E:5F:99:D9:40:44:A7:B2:FB:AC:7A:0C:4C:FD:A8:E3:B2
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/SF9inl-Z2UBEp7L7rHoMTP2o47I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.172.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:8e:fb:41:1b:20:9f:70:67:8b:a4:01:d4:f5:e7:34:c7:f8:
26:46:a4:95:d1:d8:75:b2:08:58:24:59:67:c5:1b:17:69:83:
59:e7:8b:0b:ed:09:cd:dd:4a:6f:72:63:34:52:3a:f7:55:17:
0b:92:cc:ec:4a:29:79:1c:a9:8f:a4:8a:89:36:a1:52:66:b5:
db:be:6d:4e:2a:fb:eb:22:4c:4f:a1:81:d8:68:a5:3a:23:e3:
1a:bb:f2:93:a8:37:80:f9:bb:fa:33:82:f2:49:20:df:4e:6e:
f6:da:bc:97:8f:ab:e4:5a:05:2e:8c:1d:a7:db:04:dd:97:ea:
d6:aa:57:65:35:95:09:4d:e2:a3:0a:9a:3d:46:d8:25:a6:6d:
90:1d:35:86:1b:72:94:67:29:eb:f1:20:33:64:f6:81:e5:e5:
3f:93:2e:8d:79:52:e0:a9:7c:d2:5d:af:46:0a:18:94:2a:15:
e9:a3:56:5f:6f:e2:fe:20:41:40:02:78:99:2f:0e:77:ca:23:
28:3d:4e:2b:12:14:11:7c:b7:b7:28:93:57:ed:d0:60:68:ec:
56:97:fb:e2:d4:ae:41:af:b9:e4:85:9b:c3:96:28:f6:b7:48:
c6:4e:c8:ad:58:6a:65:82:ab:e6:57:d2:6d:e8:d9:a7:20:89:
41:a4:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:43 2025 by rpki-client