Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa
File: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (raw, json)
Hash identifier: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=
Subject key identifier: 95:94:9F:68:52:D0:B2:74:E4:C1:DB:E7:D0:1D:EB:64:69:2A:46:E0
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 019425FC87812424F65C566FB1DBA5B8FA0F
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa
Signing time: Thu 02 Jan 2025 07:48:14 +0000
ROA not before: Thu 02 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31037
IP address blocks: 185.134.176.0/24 maxlen: 24
185.134.178.0/24 maxlen: 24
185.134.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:87:81:24:24:f6:5c:56:6f:b1:db:a5:b8:fa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jan 2 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95949f6852d0b274e4c1dbe7d01deb64692a46e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:2e:8f:ba:35:e6:ac:24:c4:8f:00:51:a5:
d2:be:26:d7:84:71:dc:98:c2:a6:8c:24:da:1c:33:
a4:db:4f:03:15:8a:a2:3f:99:58:a2:ae:35:97:9a:
de:dc:6e:22:d6:9f:32:3d:db:42:c4:d3:55:d3:06:
a9:f0:5c:22:7b:dd:a4:3b:46:61:fe:2e:75:d0:ac:
aa:1a:64:47:21:d6:50:15:9f:7b:ad:ff:58:b4:2e:
c2:dd:80:c4:7c:2b:9b:2f:79:7b:66:e3:7e:a2:c9:
8a:ab:65:44:1d:4e:37:33:51:d7:f8:44:c8:af:06:
8d:d9:3c:85:6b:bb:ae:5e:cd:9c:08:b0:4f:6f:c0:
87:43:6d:1a:9e:27:00:a2:e3:1a:5f:a7:71:4c:f3:
b5:ab:df:86:65:e5:87:68:d9:0b:01:c1:57:2a:b6:
74:11:97:d2:2f:f8:db:6a:70:ab:d2:7f:1d:81:7e:
ba:28:5a:e7:13:30:cf:f1:1a:c2:c6:3e:0e:0c:9b:
aa:f8:b4:48:a9:45:fd:7d:08:18:68:19:9a:e2:66:
d8:48:03:52:d8:cf:ec:4a:0f:48:ea:a6:76:2d:0d:
a7:0f:18:7d:40:c5:33:61:42:d2:54:06:d2:67:60:
b8:3a:7a:29:18:1a:e5:53:a1:f1:f0:2a:b6:75:b9:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:9F:68:52:D0:B2:74:E4:C1:DB:E7:D0:1D:EB:64:69:2A:46:E0
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.176.0/24
185.134.178.0/23
Signature Algorithm: sha256WithRSAEncryption
99:41:48:37:ca:f5:bf:b4:23:d1:6e:34:18:bc:06:10:c9:22:
39:82:b3:5d:fd:b5:5f:01:28:9b:76:ce:9b:15:3b:6a:4b:64:
83:3d:e6:c6:9f:45:13:09:8a:90:9d:63:e6:05:06:6e:03:66:
f5:79:be:26:5f:37:82:fa:64:c4:cc:df:e3:75:f0:43:f6:ba:
6e:c9:98:0e:e5:39:aa:52:8b:8c:22:b8:56:b4:0d:e9:ba:9f:
8d:67:0d:9c:17:83:a2:60:29:79:2e:14:28:98:07:dc:dc:43:
dd:da:e1:3b:34:14:cf:22:18:ad:f5:30:0a:17:fc:74:c7:29:
59:43:f4:0f:2d:99:3a:7b:57:45:28:14:2b:fa:fb:db:11:34:
1e:c6:12:43:bd:3b:3b:bf:90:3e:22:70:d6:9a:e1:d5:ba:92:
93:f1:10:c5:5c:0f:c6:72:60:bb:41:9c:f0:90:ee:f7:02:09:
af:ea:6c:c2:58:c1:3e:22:cf:41:c0:6a:73:af:22:ee:00:19:
39:9f:27:b9:f4:25:d9:f4:df:a2:13:a3:ea:8b:27:c6:a6:ba:
26:64:ff:c9:c7:cc:f4:58:2d:38:cc:87:2f:17:11:bf:af:5a:
17:2f:5e:cc:8c:2e:15:5b:8d:5d:03:9c:88:f8:db:06:25:1c:
3e:7d:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:42 2025 by rpki-client