Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/t9eG9LA6EWmdW1u_qvOWiwX_nHk.roa
File: t9eG9LA6EWmdW1u_qvOWiwX_nHk.roa (raw, json)
Hash identifier: /vgplaRmHDxSp3VJb5NRArFdYkLIBE7CLS2J04R2rkc=
Subject key identifier: B7:D7:86:F4:B0:3A:11:69:9D:5B:5B:BF:AA:F3:96:8B:05:FF:9C:79
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 0194228DE76DCCE942D6B4BB1D6F4BD31054
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/t9eG9LA6EWmdW1u_qvOWiwX_nHk.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42183
IP address blocks: 185.82.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e7:6d:cc:e9:42:d6:b4:bb:1d:6f:4b:d3:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7d786f4b03a11699d5b5bbfaaf3968b05ff9c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:b1:7c:cb:7e:31:ae:2b:53:1b:64:84:9a:
d1:3e:41:f7:06:b5:bc:c8:d2:e5:45:0d:f4:49:cc:
32:51:e3:01:f0:00:83:6f:7b:7e:76:51:c4:96:47:
5e:c7:83:5c:01:50:f0:33:0e:75:4a:e6:c6:31:e5:
d2:3e:f9:c0:e2:fc:27:64:41:cb:59:5c:66:5c:db:
c4:ac:f5:b3:df:08:e5:c7:25:4a:82:ca:32:50:11:
7c:13:6d:b1:d0:6a:30:71:71:a7:3e:74:5f:25:e1:
45:a9:0d:1d:25:45:0f:ad:ff:7c:1a:87:72:2f:84:
f1:08:fd:ec:2f:7e:d1:66:a9:20:a8:53:81:64:ed:
9e:cc:82:c9:5c:19:f4:ee:29:78:ec:f9:b7:7b:83:
0c:d7:ee:34:91:31:ce:03:b3:8e:e1:36:44:77:fc:
19:04:d5:02:41:9c:e3:17:d3:ac:56:8e:1f:58:b7:
d3:59:07:9b:52:e0:a2:c9:51:03:26:8e:87:15:ba:
a5:76:ce:75:3b:7d:15:50:cf:82:78:6e:09:1d:49:
84:29:be:64:59:d9:41:b1:65:24:da:f6:67:59:bc:
b4:19:91:0f:20:e7:89:ca:fa:7d:91:c7:b5:77:ea:
5a:d4:d8:aa:5f:3e:2c:c5:1b:11:07:24:fe:76:4a:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:86:F4:B0:3A:11:69:9D:5B:5B:BF:AA:F3:96:8B:05:FF:9C:79
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/t9eG9LA6EWmdW1u_qvOWiwX_nHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.96.0/22
Signature Algorithm: sha256WithRSAEncryption
14:91:5d:23:15:b1:37:24:9d:da:92:5b:f3:c5:72:d0:33:40:
8f:4f:e0:89:63:5b:85:15:a8:af:55:b8:ce:67:ea:8a:75:1f:
98:23:bf:27:80:f4:2d:59:d6:b9:1b:d6:ca:72:0f:71:fb:c8:
2b:8b:3c:8e:90:57:76:15:3c:05:d2:fc:57:1f:6e:6c:c9:72:
0a:5c:66:7e:5a:2c:33:a8:d7:5f:06:67:d3:a7:be:8b:24:8e:
ba:e2:70:ac:5a:b8:89:c1:24:f0:05:46:54:c9:e2:c2:63:e0:
a0:5f:91:b6:0a:fe:66:db:78:e9:1a:2b:00:02:8a:05:8c:65:
08:fc:21:46:c7:fd:32:f4:8f:82:61:08:bd:cc:e1:bc:81:1e:
b1:e0:b1:b8:1f:a9:d6:cb:55:95:7b:f1:f6:9f:c1:a9:2c:2b:
37:06:be:37:dc:4f:13:ac:28:09:ae:69:a5:c1:08:9c:ed:e5:
2b:81:e0:8d:01:4c:68:c3:6f:39:dd:9b:db:8b:94:b6:c7:c8:
97:09:27:70:fc:72:32:ce:65:6e:31:04:31:61:de:f5:0c:e8:
3f:dc:1d:90:5b:89:af:40:2b:d0:dd:c9:e4:38:86:08:31:fb:
73:58:4b:86:d8:fe:35:87:fb:58:32:bb:32:b4:b0:cb:a1:69:
27:3f:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:13 2025 by rpki-client