Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa
File: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (raw, json)
Hash identifier: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=
Subject key identifier: 9B:62:DD:0F:99:89:6F:DB:92:44:C6:69:58:20:EF:9C:6B:12:FB:54
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01942444F1DDB6D14FC21D9652E87C3FC121
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa
Signing time: Wed 01 Jan 2025 23:48:05 +0000
ROA not before: Wed 01 Jan 2025 23:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49090
IP address blocks: 82.144.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f1:dd:b6:d1:4f:c2:1d:96:52:e8:7c:3f:c1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b62dd0f99896fdb9244c6695820ef9c6b12fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:0d:8b:a4:d5:61:08:73:24:a9:58:a8:ac:
98:4a:66:b2:07:20:88:7e:69:5e:f9:cc:7f:09:10:
3c:9d:25:80:70:ed:9a:d7:21:e2:4e:62:de:28:96:
7a:59:00:0b:b6:27:28:78:7c:ce:57:37:8a:73:dc:
07:cf:c6:ec:38:ab:9b:c6:3a:b5:27:2c:31:bd:36:
b8:91:5c:4e:8a:0c:a3:18:c4:15:02:e3:91:0b:24:
69:87:be:ff:3f:07:a3:3b:a2:49:1b:9e:43:70:9b:
e6:33:3b:dd:c8:c1:cb:bd:ad:ff:ac:1d:0b:1c:93:
5a:ee:e4:1d:b1:86:b5:0b:66:55:ca:17:cf:25:6a:
bf:f6:63:a7:16:c5:11:87:be:1e:37:6c:72:d1:be:
63:67:e4:a4:38:be:5c:78:b8:c2:4b:e3:62:16:c6:
b9:70:79:f8:89:07:44:38:89:f3:dd:ac:82:ff:55:
4c:c1:a9:ce:d6:42:eb:4a:a7:b4:91:51:25:a5:f2:
6c:71:4e:ba:5c:17:80:de:6f:d5:d4:e7:e7:4e:ec:
e9:b5:f8:aa:ed:88:ba:b7:fd:b0:05:58:d0:4e:c5:
63:fd:65:aa:88:e4:87:8e:1e:17:56:38:0d:1c:23:
c2:b7:97:ad:07:e6:91:50:b7:98:81:da:74:2c:8a:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:62:DD:0F:99:89:6F:DB:92:44:C6:69:58:20:EF:9C:6B:12:FB:54
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.184.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d8:54:0d:fc:77:64:59:73:40:81:9c:ff:35:21:b0:90:25:
71:6a:2c:82:36:7b:70:84:d0:c7:cb:d8:5e:3e:49:69:45:ba:
f3:e0:46:0f:9c:e6:a1:3a:10:6a:97:f5:1d:91:7e:54:14:31:
d0:55:4d:61:a5:dc:6e:e2:e7:12:43:80:1e:fe:28:b8:7b:88:
fb:e9:6a:bd:18:71:26:9e:b9:fa:18:82:51:bb:a0:17:91:58:
1e:7a:8f:f3:ce:c7:91:76:c5:c4:3d:e6:b7:39:11:bc:2b:9e:
c5:71:68:73:70:5f:4d:9c:67:c9:d7:11:53:04:db:40:fd:00:
8c:a8:13:cd:a0:ec:14:2e:33:0d:b7:a9:8a:4c:bd:50:46:84:
dd:f5:c2:57:9e:67:33:e7:72:00:b3:05:4c:7f:ff:60:86:cf:
96:4f:6e:67:90:0d:75:f7:d8:b1:aa:b3:f8:12:2d:be:28:d1:
07:e3:65:cf:e5:ba:6f:59:46:9e:0e:80:dc:b6:1f:1f:40:dc:
7b:64:b3:8b:5f:e1:2b:b7:ce:43:6d:e6:6a:e1:62:f2:3c:e5:
3a:f7:12:11:8d:83:92:90:22:d9:dc:2e:e4:73:cf:e4:5e:3c:
08:41:b6:36:03:e4:d2:88:e2:83:a6:2f:18:fd:fd:5d:24:2d:
ec:00:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:34 2025 by rpki-client