Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/9phsu2p4WF8NqnfUkSWWdnt6zzA.roa
File: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (raw, json)
Hash identifier: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=
Subject key identifier: F6:98:6C:BB:6A:78:58:5F:0D:AA:77:D4:91:25:96:76:7B:7A:CF:30
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 019427B65C6422E30A058C7CED66539BEB6A
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/9phsu2p4WF8NqnfUkSWWdnt6zzA.roa
Signing time: Thu 02 Jan 2025 15:50:50 +0000
ROA not before: Thu 02 Jan 2025 15:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202598
IP address blocks: 185.156.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:5c:64:22:e3:0a:05:8c:7c:ed:66:53:9b:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Jan 2 15:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6986cbb6a78585f0daa77d4912596767b7acf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:18:80:52:c5:5a:09:d6:7c:d1:cb:ff:e1:
c3:a3:1e:34:7a:bc:97:55:64:4a:7a:b4:05:39:9b:
9f:bc:be:e7:d7:b4:69:a5:c4:ab:44:66:6f:98:79:
ed:70:0e:aa:7c:26:e0:d8:67:e9:44:c6:c9:ec:14:
97:19:a1:3e:eb:b8:85:b6:1c:df:87:03:49:66:a5:
85:fa:0b:bc:27:47:d8:96:03:6e:7b:a9:ac:7f:cc:
ef:45:60:28:da:30:3e:02:d4:fb:32:e4:89:74:6a:
84:d3:9f:5d:e8:9c:c0:19:ab:f3:48:d2:e4:b7:78:
b9:93:81:81:b5:e8:5b:2c:1c:79:30:59:ce:5f:88:
38:a2:a7:d6:07:d7:e4:1c:03:67:6e:f2:c2:88:1b:
aa:ae:8c:61:1e:1b:2c:e7:19:3b:45:db:2e:d6:04:
a8:86:f3:2b:32:5d:d4:17:05:77:bc:30:89:73:91:
53:bc:28:24:d4:13:09:8f:68:1d:5b:34:f2:39:e0:
4d:3b:af:85:80:f4:cc:83:5d:ec:88:7e:a1:39:35:
76:9c:35:9e:2c:5f:20:f6:f8:c9:99:db:76:75:43:
9f:7f:3f:9b:4a:8e:f8:a7:d7:b7:67:23:2b:d5:7a:
69:34:83:2b:49:e8:65:20:d9:b2:da:33:07:a6:85:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:98:6C:BB:6A:78:58:5F:0D:AA:77:D4:91:25:96:76:7B:7A:CF:30
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/9phsu2p4WF8NqnfUkSWWdnt6zzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.56.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7e:97:65:dc:fb:3d:db:26:ab:4b:b6:ed:42:c6:81:c5:8e:
55:3d:2a:db:63:76:b1:59:8e:90:30:22:a8:39:aa:b7:85:1b:
63:9c:1d:7f:5d:28:83:ab:00:9e:5c:48:b4:42:60:ff:87:86:
02:af:df:f0:9d:05:98:a2:f8:e1:da:36:21:a8:04:f6:9c:94:
b2:44:46:79:f6:b0:29:84:cd:b8:62:83:83:78:04:93:fb:74:
cf:d7:8e:30:ed:e9:c3:1a:83:dd:11:c2:23:a8:97:8d:2b:fb:
a9:06:cc:9f:b2:3a:5a:c6:51:a6:c9:c2:22:cb:ab:9e:48:9c:
2e:bb:e3:6a:e6:fe:aa:2b:86:e3:8f:55:b7:90:bf:a3:07:ae:
ba:17:c4:8b:54:05:55:0e:a0:4f:b4:f7:97:33:85:e5:c7:27:
c0:97:25:46:05:ff:a7:e8:8d:b7:4b:c7:3f:cd:75:70:6b:d5:
ce:9c:f8:b6:c2:a5:45:13:36:15:c1:c0:da:c6:a3:26:1c:8c:
d3:1e:b8:f7:cb:d1:ba:92:03:36:0e:3a:ef:06:2f:42:71:0e:
f3:2e:70:15:c3:4e:63:46:51:ea:a0:97:6c:36:b6:c3:25:2d:
53:6c:76:22:3e:4e:e2:ba:28:92:cc:45:f6:e7:a2:6e:29:82:
60:8a:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:10 2025 by rpki-client