Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/4OM3TuNkPVdmDzic95IjszBtoQA.roa
File: 4OM3TuNkPVdmDzic95IjszBtoQA.roa (raw, json)
Hash identifier: dt9wokazgTd6EaqSSQPyaNUyIvDqSau9vaZZ+2FBCWU=
Subject key identifier: E0:E3:37:4E:E3:64:3D:57:66:0F:38:9C:F7:92:23:B3:30:6D:A1:00
Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial: 019428262DA5DE194EE9B889EA89FA582235
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/4OM3TuNkPVdmDzic95IjszBtoQA.roa
Signing time: Thu 02 Jan 2025 17:52:58 +0000
ROA not before: Thu 02 Jan 2025 17:52:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59674
IP address blocks: 185.179.24.0/24 maxlen: 24
185.179.25.0/24 maxlen: 24
185.179.26.0/24 maxlen: 24
185.179.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:2d:a5:de:19:4e:e9:b8:89:ea:89:fa:58:22:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Validity
Not Before: Jan 2 17:52:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0e3374ee3643d57660f389cf79223b3306da100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:fe:d1:f8:f0:0d:0c:dc:26:34:98:22:08:
1e:31:88:e8:a5:30:15:f2:a0:c8:70:b6:2a:86:40:
3b:53:15:53:c7:41:6b:41:30:37:b8:7e:a8:4d:d3:
85:9d:7d:89:f1:6b:9d:78:0b:f1:57:b7:56:83:5d:
49:a2:fc:f4:19:87:b3:11:ef:02:81:2a:35:42:e0:
2b:85:3c:49:1c:09:81:28:87:c2:0d:11:71:8b:91:
43:8d:e4:cc:a8:d1:b2:ff:f1:7e:34:e3:d9:07:3b:
0a:a9:51:77:06:14:b6:9c:31:e2:5d:8e:2f:3f:40:
79:1e:c0:fe:14:a0:b6:11:09:90:3c:ca:be:ab:5f:
8b:ee:fa:9e:f5:fd:21:18:10:82:62:87:fb:42:37:
46:38:63:c9:29:ee:f5:b8:ce:8e:33:8e:fe:75:7f:
ba:11:b5:bd:15:2f:37:2b:5f:66:b6:b3:93:af:74:
a0:fe:4a:ad:d6:6f:64:b9:fa:ae:41:58:e0:67:5d:
6d:5e:19:36:1e:91:7a:25:af:a9:f1:cb:82:6b:14:
7c:df:d8:e7:5e:6d:22:5a:af:01:d6:77:e9:94:55:
76:d5:33:88:d0:66:82:f2:be:cc:6f:0f:d9:bf:61:
e6:20:24:34:f1:46:94:0d:56:b1:a2:40:eb:00:1b:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:37:4E:E3:64:3D:57:66:0F:38:9C:F7:92:23:B3:30:6D:A1:00
X509v3 Authority Key Identifier:
keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/4OM3TuNkPVdmDzic95IjszBtoQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.24.0/22
Signature Algorithm: sha256WithRSAEncryption
03:5d:a1:6a:a4:ca:25:25:f2:67:af:ab:4d:43:40:b8:78:f6:
10:61:73:76:8e:45:44:61:3a:d0:3a:33:51:92:b7:16:a2:8f:
be:6f:91:61:69:e1:95:e1:c4:8f:c7:71:81:64:3c:b8:44:e6:
d7:e0:1a:7a:90:bc:a5:a6:06:0a:ce:8b:38:f7:ea:0b:9e:82:
a1:b9:e3:24:f5:ae:fe:1d:da:4d:62:30:d7:84:d0:11:d9:ae:
c3:53:e5:20:be:d6:90:ea:23:fd:0c:35:b0:03:94:30:83:ae:
e6:48:bd:81:98:1e:74:5d:e9:e3:63:02:e9:84:2f:51:e5:3e:
f4:43:6b:17:e0:36:7d:7f:0d:88:77:d6:d6:99:73:c9:2c:af:
aa:9e:70:4e:1a:3c:e4:67:10:a9:99:03:80:89:4b:4b:98:fd:
bd:e8:72:c2:e4:c5:60:15:7f:ee:ba:ae:1e:f6:b6:13:eb:9a:
f5:0f:70:40:f8:ad:43:a9:7c:88:ea:c1:26:ec:90:73:5d:68:
ef:ec:ea:9a:98:75:8a:b2:0e:5d:69:71:76:9a:89:90:bb:30:
fe:38:fa:8a:a5:e1:7e:61:c1:36:6b:3a:2d:84:f0:e4:c6:c9:
c9:3a:2b:20:c4:d7:ca:5e:43:91:a8:1d:98:3e:ec:7e:08:3a:
bf:77:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:28:57 2025 by rpki-client