Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/XmMK1HZ3DcPkTMV2el117ysMhn8.roa
File: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (raw, json)
Hash identifier: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=
Subject key identifier: 5E:63:0A:D4:76:77:0D:C3:E4:4C:C5:76:7A:5D:75:EF:2B:0C:86:7F
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 0194266BEE8A43EF6B21FE4C38608BB8E595
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/XmMK1HZ3DcPkTMV2el117ysMhn8.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212376
IP address blocks: 185.184.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ee:8a:43:ef:6b:21:fe:4c:38:60:8b:b8:e5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e630ad476770dc3e44cc5767a5d75ef2b0c867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:a7:17:61:6a:3f:12:73:36:ff:c6:da:2f:
58:3c:e6:49:8c:23:5f:35:fe:ab:30:08:76:7a:70:
e1:13:5e:49:ef:ac:fe:7c:3b:16:e1:77:51:bb:9a:
32:60:06:41:a2:06:da:85:2d:1e:12:4a:94:28:a5:
83:f5:e7:a4:fa:3f:3c:96:18:a0:76:7b:a5:cc:e7:
1a:e0:7e:e1:e0:ab:3d:2b:09:f0:5c:31:f2:5c:66:
cc:11:2a:bb:f7:3b:31:4a:f7:bc:47:f5:ca:d0:bc:
a0:a3:f7:6a:35:21:ed:c6:ac:97:4f:14:28:da:b4:
56:9e:12:32:52:1d:10:a1:d6:73:be:20:f9:23:92:
d4:42:79:d4:0b:3b:81:1e:85:77:51:59:48:ef:b8:
5d:48:ad:5e:bb:09:9c:74:df:3a:74:c3:66:c9:39:
7d:db:4c:8d:9f:94:e5:5c:fd:0a:a5:b5:ca:7c:6f:
38:47:92:fc:94:0b:e6:ac:a2:e7:e3:3a:2e:61:64:
07:9b:23:ca:f0:e0:05:00:98:56:62:17:f5:c8:9d:
13:77:21:91:fc:8c:f6:a9:31:f9:f3:95:d8:d9:00:
23:95:ac:75:5e:8c:8c:f7:24:03:84:fa:95:b3:43:
c3:66:97:2c:53:bc:64:c4:df:e7:50:45:ab:6e:59:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:63:0A:D4:76:77:0D:C3:E4:4C:C5:76:7A:5D:75:EF:2B:0C:86:7F
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/XmMK1HZ3DcPkTMV2el117ysMhn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.196.0/24
Signature Algorithm: sha256WithRSAEncryption
66:26:ea:1f:2f:a8:77:8e:3d:6a:b1:89:83:53:ba:73:a5:be:
46:89:77:a5:3a:d9:92:66:fa:64:e0:27:a3:a3:33:d3:f8:69:
a3:9d:d1:a8:56:64:0a:18:01:da:f8:03:19:73:26:08:8e:72:
24:cf:b7:dc:56:3d:3a:67:b8:64:d2:21:9b:26:50:82:13:e0:
92:30:1c:06:48:16:3f:09:d7:e4:77:f1:0a:24:d8:e1:7c:10:
d5:f8:b3:f9:40:6f:16:08:d3:1c:6e:d8:e6:55:e8:ab:42:8f:
09:ba:a1:72:d1:77:52:6c:1e:b3:56:a8:b8:18:d0:c0:9a:fc:
12:e7:e7:ad:fa:8b:73:3f:6f:7e:5c:82:64:a9:3e:b1:46:b2:
85:c1:78:b0:dc:58:dd:b9:5a:4c:94:16:d3:c1:0a:d3:45:f0:
53:6e:df:5b:79:5b:07:b5:31:b4:cd:c0:34:ad:67:38:f3:a5:
e2:be:10:84:b8:1a:e4:88:70:02:59:e0:e8:93:6a:9f:b5:a5:
b5:a5:b1:89:88:63:99:b0:6e:14:2d:8c:0d:5e:93:5a:cf:18:
72:15:b1:42:ce:d5:bd:5d:be:7b:42:fe:02:5d:e2:62:e7:82:
ec:aa:62:8b:0f:c4:a4:0a:04:3a:00:54:d1:0c:6f:a0:f0:26:
a6:5a:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:16 2025 by rpki-client