Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa
File: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (raw, json)
Hash identifier: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=
Subject key identifier: F5:62:04:15:9D:78:00:50:B2:F8:D0:1D:3A:35:15:BD:75:DD:04:15
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 0194274696C576337D34C0EC570BFC767118
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa
Signing time: Thu 02 Jan 2025 13:48:45 +0000
ROA not before: Thu 02 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215018
IP address blocks: 185.74.82.0/23 maxlen: 23
185.74.82.0/24 maxlen: 24
185.74.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:96:c5:76:33:7d:34:c0:ec:57:0b:fc:76:71:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Jan 2 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f56204159d780050b2f8d01d3a3515bd75dd0415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:ad:32:0b:09:e2:b8:6f:7e:57:5b:75:fa:
1f:cc:17:b2:3e:27:1f:d4:af:0a:5c:c4:91:b7:df:
ac:1b:f1:4a:7e:c5:0e:ed:6c:d4:35:a3:0f:f0:83:
08:72:a9:69:fb:b6:c3:58:ab:99:76:a4:dc:02:db:
28:7b:12:37:c0:f1:98:3a:ed:f0:fb:3f:db:b1:34:
10:44:33:7a:43:aa:eb:f1:70:07:62:6e:87:f6:07:
55:f2:c2:14:99:72:cf:53:3b:d1:06:78:77:61:14:
fd:1b:6a:1a:4a:d1:62:19:58:7c:66:66:8b:9a:4e:
38:03:d6:d1:bb:5e:ad:39:c7:2e:1e:53:c8:3f:5c:
cb:2a:2b:58:d5:3b:ac:0d:8c:33:f5:1a:80:f1:18:
84:e8:e6:a4:e2:59:41:24:a2:bf:33:02:c3:b2:11:
fa:a1:01:99:26:02:de:c7:33:ad:96:df:86:40:a4:
30:b6:d5:da:66:31:77:0b:78:39:75:f6:55:fb:4a:
14:b4:4d:ef:c6:e2:5e:dd:0e:18:99:b0:4b:1a:96:
ca:2e:0d:cb:c6:72:bd:9a:76:b1:f9:d5:a7:26:a7:
b8:dc:72:d2:1a:d2:38:a4:6a:e1:f1:d6:0b:71:6b:
ca:b7:4d:da:98:bb:56:9a:38:38:94:ad:5a:66:b3:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:04:15:9D:78:00:50:B2:F8:D0:1D:3A:35:15:BD:75:DD:04:15
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.82.0/23
Signature Algorithm: sha256WithRSAEncryption
43:b1:e6:e5:12:9e:51:a7:fa:af:27:a5:d0:44:33:52:af:b5:
13:40:57:68:4f:cf:a6:5c:f7:6a:07:8d:c2:c7:d0:4f:c0:2a:
94:02:69:cd:1b:5b:d5:07:5b:43:e0:80:42:5a:f5:9d:4a:c8:
57:46:e5:6f:e2:b7:6a:0c:1b:aa:e2:29:46:26:8c:7b:70:bf:
76:f3:c8:92:d9:fb:75:2e:bb:2a:56:18:8b:7f:7a:d2:13:2b:
66:6e:24:87:6f:89:09:2a:11:6a:94:84:69:d0:55:40:b5:4e:
4d:88:e1:4a:00:1a:50:60:e2:ef:53:40:28:8f:9b:6e:8b:66:
eb:e2:68:0b:03:ce:8e:cb:31:83:dc:9f:f7:71:6d:bb:21:e0:
15:8e:a6:e9:e3:04:4d:d6:04:78:a1:f0:43:6a:f9:8b:c7:27:
02:3c:aa:6e:17:4f:12:7d:1a:84:bd:ac:d3:e2:cb:ce:c3:1c:
4e:47:e6:57:6f:70:e8:96:6d:b5:47:74:a1:8c:d0:46:d6:ea:
82:65:24:47:ba:7d:da:d0:38:96:22:16:10:ae:79:53:4e:26:
e5:d1:36:fc:6b:34:83:ba:96:b6:ad:a0:53:ec:4d:f4:ad:0b:
94:3c:4e:b8:e4:c0:e1:81:1c:30:df:11:6f:09:8a:2b:4d:4f:
ee:e6:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:21 2025 by rpki-client