Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa
File: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (raw, json)
Hash identifier: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=
Subject key identifier: BE:E4:F0:57:CB:37:76:7E:BD:53:84:6A:6B:EE:5C:2A:BA:C9:AA:30
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 01941F8C80C1A30F46D8D53EF6EACEA3B6A0
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 185.211.8.0/24 maxlen: 24
185.211.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:80:c1:a3:0f:46:d8:d5:3e:f6:ea:ce:a3:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bee4f057cb37767ebd53846a6bee5c2abac9aa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:01:5a:cc:29:e4:dc:40:75:f3:61:1f:a2:
14:03:77:1d:83:f6:5d:3f:cd:1a:19:66:98:10:e5:
e7:d9:0e:3b:23:d8:4f:97:39:8e:d7:b5:e8:35:72:
0a:aa:66:0f:b8:7e:9c:3c:a4:b1:52:27:2e:12:42:
3e:38:05:0c:87:8f:fa:90:f2:0f:34:5a:24:b3:02:
49:d6:0a:b2:61:15:7f:12:5b:b6:10:0e:5e:99:92:
74:4a:ed:d2:0e:b0:ea:59:d2:0b:66:f6:37:2f:03:
80:50:25:fd:32:a8:68:79:46:ae:e6:30:65:a2:57:
2e:60:d4:ef:f6:ac:51:de:22:7c:43:1f:27:31:c1:
98:d0:3c:5a:c5:4a:c6:f0:b5:21:1a:6f:d3:9d:21:
6a:4e:e7:e9:36:51:0f:10:55:5b:41:4f:bc:59:ec:
f8:0f:24:f1:02:6d:3b:04:36:9a:61:e7:ac:12:77:
76:9a:8e:fb:df:54:53:bc:29:26:5e:c4:b7:f0:f9:
a2:a6:38:a8:1e:d5:0b:7d:d4:f9:76:c1:7f:6f:02:
99:5f:59:16:b0:c5:1f:06:67:b8:ec:fa:aa:dc:e1:
bb:0f:d2:de:85:9c:17:de:a6:9f:a9:3d:68:8f:4f:
ce:1f:9b:7d:03:4f:aa:cd:76:34:b8:66:ba:31:ba:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:F0:57:CB:37:76:7E:BD:53:84:6A:6B:EE:5C:2A:BA:C9:AA:30
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:d7:04:5a:20:10:11:25:66:d0:85:c0:8e:ac:f1:46:41:0d:
a7:ee:24:8d:42:c5:c0:3a:3d:61:07:fb:97:a7:04:71:2e:be:
5d:49:dc:39:5f:7c:07:28:4b:c7:38:46:66:7f:a6:d5:eb:e6:
29:9b:c5:43:87:37:fd:ef:99:c3:53:ac:4d:0a:21:cb:ab:ce:
2a:0b:ea:00:49:e3:b5:fe:e2:23:9e:8b:7b:b2:fc:11:64:e9:
82:6f:12:8a:8a:77:ad:4a:f4:f0:8b:25:0c:9c:72:ff:8f:c7:
04:8a:4a:54:bd:55:61:8c:da:a6:6a:19:d1:ab:49:d6:8b:ed:
e2:62:93:0f:ce:48:65:94:13:09:8b:d2:25:bf:1d:be:b4:89:
c5:11:dc:fd:c7:0e:d2:10:1a:16:e5:8f:ce:cd:89:78:1f:67:
df:62:a6:ec:c6:f0:4e:9f:b3:e7:41:90:64:ac:4b:8a:75:b8:
95:ac:ba:05:b7:a9:c5:27:f1:50:99:aa:5b:30:31:1a:a7:c0:
76:f8:da:f5:30:b0:97:70:be:fa:19:fb:29:a2:7a:7d:de:ec:
5e:75:d0:ac:b2:80:bb:33:80:64:1e:3b:56:71:ce:48:84:41:
0c:91:64:cd:a0:d9:bc:38:94:5a:69:f6:1f:8d:9c:0e:ba:c2:
f3:9c:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:29 2025 by rpki-client