Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/i6OZnwSC6Nlsenhf0tdXitkE5-w.roa
File: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (raw, json)
Hash identifier: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=
Subject key identifier: 8B:A3:99:9F:04:82:E8:D9:6C:7A:78:5F:D2:D7:57:8A:D9:04:E7:EC
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 0194266BAC4E34827320415896F904F947F3
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/i6OZnwSC6Nlsenhf0tdXitkE5-w.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212520
IP address blocks: 185.177.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ac:4e:34:82:73:20:41:58:96:f9:04:f9:47:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ba3999f0482e8d96c7a785fd2d7578ad904e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:fd:2f:9b:a1:9e:62:e0:b1:ef:46:2d:72:
cc:52:d4:ce:de:07:f9:3c:a8:ff:0e:ff:65:8a:7a:
57:b5:fe:19:a9:4e:71:40:7a:89:db:d5:07:33:74:
19:a9:39:8c:cb:cb:0d:b3:d3:65:92:d8:aa:1a:f7:
8e:f3:aa:b3:6a:99:52:b6:56:4e:85:53:dc:e2:93:
93:ab:8e:5f:f8:d6:b6:ae:f5:9e:9f:e8:c0:7e:c8:
37:e8:f9:75:f7:7b:3c:fd:c7:ee:09:4d:8e:13:2e:
72:b6:2a:a7:99:55:47:f2:51:c0:b8:83:6b:bb:2e:
c5:42:cc:51:71:4a:fb:d4:0d:3b:4c:16:29:1e:b0:
56:3e:4d:26:73:8f:f2:51:f4:01:25:df:e6:36:01:
54:0c:72:f7:03:15:c9:cc:28:fc:07:b1:9e:26:17:
54:fa:a6:5b:51:39:12:3d:fd:3e:ef:87:bd:af:27:
2c:93:d3:83:0d:f8:63:3b:ef:90:92:b4:ca:b8:4b:
c4:2e:4f:ae:9d:b6:3e:06:f0:66:5d:82:c3:ec:64:
42:03:f0:fe:db:26:3f:d4:ab:73:02:42:34:89:7e:
eb:92:05:ef:cf:a1:34:94:cb:68:4f:f7:b2:c9:f8:
96:2b:75:89:38:aa:b2:b5:2d:4b:29:31:25:81:07:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A3:99:9F:04:82:E8:D9:6C:7A:78:5F:D2:D7:57:8A:D9:04:E7:EC
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/i6OZnwSC6Nlsenhf0tdXitkE5-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:96:e0:1d:6a:fb:b0:ba:57:62:4c:86:3d:8b:21:16:9d:ba:
83:13:46:99:64:c7:14:2c:81:f9:fd:1a:10:d6:7f:af:85:ed:
02:15:cb:5f:31:f6:15:9d:e6:df:7d:2a:9a:29:fb:07:73:7e:
76:ff:e8:2e:8d:3e:02:cf:38:4f:d5:2f:0d:a1:0b:c9:df:25:
2e:18:f2:d0:1c:4d:f4:31:1b:a6:9c:98:33:e3:50:15:37:35:
69:00:df:2d:b3:25:c4:bd:5c:e1:b6:3f:fa:e4:a9:ec:60:ec:
38:1d:33:20:50:a6:96:b0:43:e6:2c:16:ed:06:3b:b3:82:c6:
27:e0:d0:23:71:72:60:3f:68:18:75:c2:34:9f:25:e5:2b:37:
e9:82:f3:4d:46:13:55:66:8e:ed:5c:29:d3:6c:19:8c:79:e2:
ad:28:88:c5:d5:90:46:6c:db:b4:72:9e:4a:a4:cf:cf:24:92:
6e:f0:9d:82:a4:02:50:fb:b6:18:9b:d3:43:df:3a:07:67:80:
52:94:32:d4:00:20:89:51:cd:53:7d:a1:57:2f:e2:3b:12:c8:
13:d3:8c:4f:ba:9e:d9:24:21:c3:0e:c4:eb:e6:a5:b1:b5:05:
35:89:e2:19:e1:cc:fd:aa:f8:76:24:e8:a5:a2:41:2f:8c:9f:
f8:bc:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:33 2025 by rpki-client