Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/2NcvU0UpvnNamvYiw-Ck0PihIIs.roa
File: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (raw, json)
Hash identifier: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=
Subject key identifier: D8:D7:2F:53:45:29:BE:73:5A:9A:F6:22:C3:E0:A4:D0:F8:A1:20:8B
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 01942747A188736041501341ED471DEF6A1A
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/2NcvU0UpvnNamvYiw-Ck0PihIIs.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31126
IP address blocks: 185.91.96.0/24 maxlen: 24
185.91.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a1:88:73:60:41:50:13:41:ed:47:1d:ef:6a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8d72f534529be735a9af622c3e0a4d0f8a1208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:ac:41:d8:70:52:54:af:d6:bf:df:f5:bb:
b2:8f:fe:a5:e7:5d:a6:17:5b:2e:12:b9:2c:d7:67:
21:c6:86:59:fd:9d:ae:6a:3d:95:fc:f8:c7:39:1d:
14:15:31:3b:aa:34:5b:73:b6:d4:40:16:73:54:b1:
09:e8:61:97:5b:7b:da:15:c1:09:bb:2d:dc:b5:63:
32:1e:6e:39:98:78:13:a9:12:fc:0f:c9:8f:fc:83:
d3:ff:21:23:85:f1:4c:1d:3f:02:7f:75:3c:b9:76:
f1:d8:15:6d:3e:38:27:70:24:05:97:cc:54:2f:d5:
e1:3a:89:9c:c3:f9:f5:6d:59:fc:e0:44:73:38:1e:
f8:ae:4f:5f:50:f7:28:ea:27:83:f1:6d:0b:cf:85:
a3:ff:cf:d0:46:97:21:d9:88:e8:7c:c9:b9:4d:0f:
f0:83:7d:e1:1e:09:c2:94:47:b1:80:a9:b8:a9:f3:
84:58:c1:dd:17:a8:3b:01:e4:44:a2:5b:d5:de:34:
a6:eb:de:74:28:24:b3:b9:a9:e5:9b:05:2a:65:81:
7d:a7:c6:1c:4d:34:70:4a:c8:c6:71:3e:94:c9:69:
2d:fe:bd:6c:66:7f:e3:b5:44:0b:58:0a:ec:95:f5:
4b:ed:14:d2:d2:11:f8:74:49:a8:e9:04:5a:55:78:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D7:2F:53:45:29:BE:73:5A:9A:F6:22:C3:E0:A4:D0:F8:A1:20:8B
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/2NcvU0UpvnNamvYiw-Ck0PihIIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.96.0/24
185.91.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c7:b5:74:52:06:08:b8:38:5d:b9:70:ea:14:0e:28:ca:12:
3b:12:52:10:f8:f6:81:ae:90:37:6c:0c:72:d3:b1:dd:a5:b9:
50:64:7c:9a:2b:ee:45:d8:0b:40:72:22:22:05:72:de:55:8f:
04:7d:0a:35:9b:f6:21:58:8f:5a:4f:ec:75:49:97:9b:43:7e:
e7:d8:27:cf:06:25:76:03:b0:92:d9:d3:21:a2:5c:bc:a3:55:
d3:bd:5e:0d:9d:d7:37:00:76:b2:bb:15:91:3f:d1:2f:94:bd:
6f:a1:21:42:5b:c5:3c:e0:0e:ea:c6:88:f4:24:52:26:42:0d:
86:5e:07:4b:ad:c4:67:f5:cf:92:9d:dc:a0:51:c9:22:3d:c1:
c9:e0:be:e9:45:9d:71:4b:df:24:a8:09:d1:e4:39:30:f4:28:
39:93:1d:a4:56:c5:b3:f3:5d:b7:92:cb:39:d3:3c:80:63:74:
bd:af:ee:d9:f5:19:e6:a1:0b:0d:f9:26:9a:85:42:3d:71:7b:
b0:59:42:57:5b:e3:8b:5b:6b:cb:5a:67:87:af:a5:cf:50:41:
05:f5:06:8e:c5:55:0c:3e:e6:46:3c:13:66:f1:99:51:31:f8:
7f:32:51:b0:8f:87:dc:8e:da:82:2a:15:67:27:03:f4:1d:fb:
9a:cf:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:14 2025 by rpki-client