Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/ciVuDSG137gexnzKwYgFKSw1JAo.roa
File: ciVuDSG137gexnzKwYgFKSw1JAo.roa (raw, json)
Hash identifier: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=
Subject key identifier: 72:25:6E:0D:21:B5:DF:B8:1E:C6:7C:CA:C1:88:05:29:2C:35:24:0A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 019474890D519BA00A892130E4F92E574BBF
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/ciVuDSG137gexnzKwYgFKSw1JAo.roa
Signing time: Fri 17 Jan 2025 13:52:06 +0000
ROA not before: Fri 17 Jan 2025 13:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49849
IP address blocks: 185.188.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:89:0d:51:9b:a0:0a:89:21:30:e4:f9:2e:57:4b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Jan 17 13:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72256e0d21b5dfb81ec67ccac18805292c35240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:67:1e:21:99:a2:9a:be:d2:2d:66:59:ce:
a6:08:48:bd:af:79:4a:36:8c:a5:2d:b1:87:e2:da:
b6:6a:2c:ef:a2:d4:69:ee:5e:00:27:76:e9:90:a8:
98:2b:b5:43:d9:dd:74:3f:97:f7:71:d2:23:12:12:
2a:6b:d4:11:6a:f4:c1:98:77:2b:4a:5a:05:d7:41:
57:5f:33:a0:0a:34:a2:69:d4:b8:e8:c1:fd:84:bc:
73:c7:46:83:ef:ae:e1:a1:dd:c9:94:f5:69:46:fb:
fa:b1:2e:44:9a:7b:d7:b9:df:ba:03:52:3e:49:6e:
d2:2b:3f:59:49:df:09:bb:3b:cd:04:21:b4:a2:f5:
24:5d:4d:15:9a:55:e9:85:43:b2:98:76:38:77:64:
9d:17:3b:60:c8:b0:b5:b9:f7:84:75:ca:d4:d9:17:
18:09:94:9d:4f:3e:75:b6:ee:25:64:d8:c3:3f:e1:
1f:b2:e2:d4:f5:8a:4a:7d:f5:de:6c:db:f6:40:a3:
97:21:7b:c9:90:f2:f0:4a:e3:39:a9:0f:dc:a1:64:
94:75:38:9a:d9:10:60:ac:f6:03:fe:96:84:a2:99:
b1:93:2b:6c:c8:f5:83:0b:1f:b1:dc:a8:7d:37:15:
7a:f4:ae:ac:f2:71:8e:d6:b4:42:12:16:16:55:6b:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:6E:0D:21:B5:DF:B8:1E:C6:7C:CA:C1:88:05:29:2C:35:24:0A
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/ciVuDSG137gexnzKwYgFKSw1JAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:92:45:38:70:f4:22:7f:f4:c6:44:de:11:04:ba:e1:13:4d:
0e:f4:9e:76:19:b3:3d:e9:c1:cc:29:47:14:d7:47:67:f6:c3:
83:32:a6:31:d4:da:4b:c8:77:79:cc:8a:5b:29:1e:bb:01:b2:
9e:c7:34:19:40:15:a4:73:08:ef:c4:c4:6c:af:f9:83:e2:85:
39:c8:15:ee:c0:ba:ce:bf:c1:4a:80:d3:86:63:b2:56:b8:af:
b1:9f:c2:4a:38:eb:28:14:05:62:19:aa:b1:af:9b:73:9d:0e:
29:6b:2d:f7:5e:ec:09:b8:f1:8c:82:74:29:f9:cb:68:4b:9d:
e0:50:ca:f5:0d:f7:e4:c9:d7:c0:af:e4:a3:90:c4:c5:21:71:
7e:9e:55:9d:9f:d1:6c:93:0d:0c:9b:49:9a:33:36:c8:8c:09:
66:59:3d:04:5f:4a:58:6d:4c:c7:3e:2c:25:68:82:be:76:b6:
93:74:7d:40:ba:3e:b7:0e:df:83:09:55:e2:0c:f6:c0:63:62:
5a:44:d7:35:b6:cd:fd:e6:0f:fa:10:75:6d:b7:a7:3b:b7:41:
e3:51:1b:87:04:c4:34:b5:d0:fc:ea:ae:8a:ad:a2:6e:91:eb:
b3:bf:49:4f:13:07:83:94:0f:c0:f7:58:00:e4:85:20:d1:a2:
b5:69:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:57 2025 by rpki-client