Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa
File: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (raw, json)
Hash identifier: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=
Subject key identifier: 92:E0:27:77:D3:6A:5A:7A:01:CC:24:E7:C7:45:F1:5E:64:62:ED:9E
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 0194258F627CEA9CD677F6334F5653764CD2
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211090
IP address blocks: 185.172.230.0/24 maxlen: 24
185.172.231.0/24 maxlen: 24
2a0b:81c0::/29 maxlen: 29
2a0b:81c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:62:7c:ea:9c:d6:77:f6:33:4f:56:53:76:4c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92e02777d36a5a7a01cc24e7c745f15e6462ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0c:2c:d6:a2:0e:22:11:13:e9:02:64:9c:78:
f2:c8:00:7c:2b:b2:56:d5:1c:88:15:1d:5e:f4:0b:
e1:9e:c3:c4:9d:61:d8:8f:a4:05:9d:84:60:33:82:
cc:e7:c2:f6:f0:2c:0d:a6:5a:e2:e8:cf:5f:72:1f:
3b:91:68:2d:c6:b9:3e:88:f7:6c:50:89:41:eb:56:
b5:51:65:e1:25:ee:1c:b9:47:49:c7:bc:71:ab:17:
88:93:e1:0b:d0:7f:c1:ea:7a:f4:ff:b7:3b:2a:73:
17:5b:c0:36:cc:c8:8b:5e:c6:ea:c7:a0:22:a8:26:
38:36:d3:8f:41:3f:f9:e2:4a:ed:8b:be:fc:dd:bc:
55:d8:0c:44:f5:93:9b:a7:e6:06:6e:50:f2:13:54:
9c:68:35:8e:29:4a:a0:c8:15:ad:b8:df:35:2e:b1:
b3:bb:7e:4f:57:96:c9:a9:a8:eb:73:5b:a2:61:99:
81:10:e4:b2:cb:ce:13:05:d8:3f:26:3c:8d:3b:8b:
0e:99:cc:ac:93:3d:7b:66:a7:2f:a4:43:e9:f9:66:
ed:c6:39:0a:9a:03:3b:c6:1c:d6:f9:55:3e:bf:69:
e4:b2:d7:fb:18:b8:7c:37:c3:aa:33:94:cb:e5:e3:
53:29:10:e1:d2:99:ed:6d:a5:90:7d:b5:ff:99:d9:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:27:77:D3:6A:5A:7A:01:CC:24:E7:C7:45:F1:5E:64:62:ED:9E
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.230.0/23
IPv6:
2a0b:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
39:43:6e:de:79:d3:0b:23:34:e6:7b:62:20:39:7a:79:d4:fe:
a6:ee:2a:02:2d:16:2b:57:a2:54:19:13:3c:65:7a:32:48:f9:
0a:96:67:67:a6:a6:c2:81:cd:3c:c7:30:23:36:37:95:70:b6:
56:53:28:40:5a:79:38:04:4c:0e:53:11:93:4f:90:5c:47:c2:
d4:f2:80:40:b8:9f:ee:0f:98:d9:b9:9a:44:ca:c2:cb:e5:dd:
c0:fa:17:33:3b:49:75:f1:ba:d0:8a:54:8f:0c:b0:fb:08:0e:
76:38:dd:16:c5:a2:f6:55:12:14:c0:e9:02:92:15:e8:86:1e:
3b:b7:39:fa:89:29:69:3a:41:e9:2f:f9:4c:f0:a7:70:f9:9c:
21:82:f1:fc:aa:43:57:de:e5:23:b8:1c:69:ab:a8:05:3f:2f:
5c:0d:ff:ab:ec:aa:a5:b9:f8:44:ad:11:ae:7b:89:dd:ee:f3:
94:0c:6a:bc:6c:fc:f2:68:30:c8:de:25:5d:73:57:1e:98:6f:
74:03:74:54:e8:26:ac:21:19:54:a9:4f:57:b0:2b:e6:01:23:
c4:6e:d9:4a:1f:e2:82:2c:a5:13:c6:5c:98:92:98:31:d6:53:
d8:e8:dd:32:45:a4:63:4b:ee:a5:17:58:bc:74:85:73:1e:d4:
a3:d9:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:16 2025 by rpki-client