Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/_CsObP4Ze3uU9K2w6CdOR8S59eQ.roa
File: _CsObP4Ze3uU9K2w6CdOR8S59eQ.roa (raw, json)
Hash identifier: 1vz8OL2ZT6+f1AOzld1JihOzraesTCmal5gPezTDoY0=
Subject key identifier: FC:2B:0E:6C:FE:19:7B:7B:94:F4:AD:B0:E8:27:4E:47:C4:B9:F5:E4
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 019420D657FC536C327862D93B6F40A75333
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/_CsObP4Ze3uU9K2w6CdOR8S59eQ.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206636
IP address blocks: 185.179.96.0/22 maxlen: 22
2a14:5e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:fc:53:6c:32:78:62:d9:3b:6f:40:a7:53:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc2b0e6cfe197b7b94f4adb0e8274e47c4b9f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:24:6d:e3:92:d7:d0:6e:8d:8a:15:a0:7f:
be:a4:8c:d0:85:2a:97:35:45:fe:22:56:0a:b8:70:
1c:a3:5c:f4:8b:8a:5f:1c:2c:3a:36:25:cb:3a:81:
7b:fe:4f:77:b2:3e:49:b9:a5:16:50:e2:96:74:20:
7e:5f:e5:57:a0:e0:e2:38:14:40:ca:3d:16:09:0e:
57:df:0f:ba:82:72:fa:8f:fd:13:b2:5d:0e:53:4c:
8d:0c:c9:c0:e3:71:29:95:ed:ab:fa:a0:7c:ff:5e:
6d:f9:35:90:83:fc:bb:6e:ab:fb:8c:6f:33:0a:92:
1f:be:d4:3a:16:2f:84:17:79:d2:c7:79:7a:03:11:
c9:36:58:1e:ff:d9:da:db:d0:d7:78:53:aa:91:ce:
09:f4:e9:0f:ca:c4:be:b0:90:30:5e:3e:3e:59:2c:
f2:61:8a:a1:08:10:eb:ae:7a:de:3b:3a:11:83:76:
da:7c:42:67:b8:29:2b:72:07:e9:98:9f:d5:88:05:
24:5d:38:a4:0f:7e:b1:60:be:c9:e8:c5:6d:0f:7a:
16:58:46:b0:d7:cd:de:a5:c0:da:5f:39:42:9e:e1:
84:20:e9:82:92:ce:f7:98:2e:90:f9:0f:a9:1f:52:
0e:38:31:c6:bd:fe:2c:0f:ac:06:3f:3b:ab:76:39:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:0E:6C:FE:19:7B:7B:94:F4:AD:B0:E8:27:4E:47:C4:B9:F5:E4
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/_CsObP4Ze3uU9K2w6CdOR8S59eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.96.0/22
IPv6:
2a14:5e80::/32
Signature Algorithm: sha256WithRSAEncryption
41:50:6f:64:99:60:6e:3b:59:d0:82:d8:3f:1d:6a:33:65:17:
ba:c3:d2:38:68:a7:95:55:56:b4:af:50:57:24:13:72:9a:2a:
4c:f4:da:a8:8f:8d:e0:a2:90:36:a6:16:11:1b:91:01:a2:49:
0e:c1:c9:15:b9:ba:11:75:6a:8c:82:1d:97:00:8e:30:93:00:
93:5e:fb:a8:5a:cb:68:78:e4:39:cb:89:4f:51:b7:96:52:96:
9f:c4:25:e3:bf:41:28:37:01:04:e9:18:6f:ff:95:fe:bd:a0:
04:56:ad:6f:09:95:06:8d:60:fe:40:f7:68:6d:29:e7:9b:c3:
15:c0:5b:56:87:1d:d2:19:89:ac:d6:f0:cb:9a:ff:bb:9b:b7:
46:c7:23:e5:2f:44:8f:d4:f4:6d:98:fe:45:b4:20:a4:65:3d:
ab:89:ba:5b:09:06:e4:ab:8b:6d:7f:a3:b5:be:85:b1:e3:c6:
35:e6:74:4e:0f:13:61:3d:e2:11:ec:df:e5:a2:b6:7c:b5:89:
52:68:ad:a4:92:a0:7e:81:ea:70:97:f4:32:dc:18:d5:0d:1f:
d8:a2:cd:e4:b2:d8:41:e9:39:fe:07:5a:b5:5b:6b:0c:22:11:
94:10:20:96:8b:07:62:5b:27:47:0b:21:f3:66:56:c2:e1:07:
89:85:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:41 2025 by rpki-client