Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/mw3UopCN0qCZSAFSL8iW1ka0EvE.roa
File: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (raw, json)
Hash identifier: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=
Subject key identifier: 9B:0D:D4:A2:90:8D:D2:A0:99:48:01:52:2F:C8:96:D6:46:B4:12:F1
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 0194258F61C86DCA4990D832CDAFB4713D78
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/mw3UopCN0qCZSAFSL8iW1ka0EvE.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31500
IP address blocks: 185.26.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:61:c8:6d:ca:49:90:d8:32:cd:af:b4:71:3d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b0dd4a2908dd2a0994801522fc896d646b412f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:68:2c:a3:61:14:36:05:ed:b2:38:b2:52:
75:c0:16:55:c6:ca:70:4e:15:02:a8:47:0b:28:9a:
5b:e2:e1:ba:62:d2:b9:43:9d:9c:fc:f9:d7:df:bb:
50:f2:f9:47:a5:3b:97:33:b7:f1:13:2a:db:24:33:
89:c2:46:de:ee:ed:61:b4:8d:bc:a1:b6:47:2c:7f:
24:f4:f4:34:b0:1b:02:2b:ab:2f:88:dc:a6:c1:5f:
ed:02:50:23:5a:88:bc:0a:d9:c9:9b:d7:da:d1:6d:
f0:a7:b7:a2:de:a0:f7:ef:ac:78:b8:4e:de:8c:a4:
93:60:f7:e2:d8:bb:cf:ef:9d:06:8c:b2:cd:b8:70:
06:33:31:d4:34:09:32:d1:e0:17:80:df:6f:3f:cb:
74:95:12:1c:34:53:c2:5d:5e:31:08:d9:f6:bd:ea:
47:7e:28:00:fe:af:ed:5e:d6:6b:37:54:6d:a6:ca:
5c:2e:ce:cb:25:29:f1:0d:8c:ae:b1:28:7f:ca:00:
b5:7f:9f:1e:ef:0a:2e:f4:4b:08:c4:05:8b:ec:07:
bc:19:b5:1c:8a:54:28:f7:26:53:4a:02:1b:61:d3:
5b:54:37:21:64:28:41:24:47:60:18:3b:2a:bf:80:
17:c6:59:9b:74:15:36:9f:14:5f:8c:28:65:23:45:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:D4:A2:90:8D:D2:A0:99:48:01:52:2F:C8:96:D6:46:B4:12:F1
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/mw3UopCN0qCZSAFSL8iW1ka0EvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ba:94:f6:9b:d3:11:63:fb:9f:f8:62:1a:de:d2:38:c0:7b:
f7:e3:f3:36:b0:28:0d:36:0b:7b:52:65:dc:0d:f8:34:c9:3a:
27:c3:9a:e7:68:88:e6:2f:92:b5:a1:33:cb:29:53:a3:fd:e6:
a7:63:2b:10:15:fb:03:01:75:53:c5:39:07:ae:59:a1:31:f8:
b9:8c:d1:af:5c:23:cf:26:bf:55:bd:0c:0b:5e:6e:b2:12:ab:
ec:ee:ec:99:b2:cb:96:5c:31:25:80:ad:f0:5a:b5:b2:89:d3:
53:2f:15:02:0f:10:64:27:70:2e:bf:62:77:21:4d:c7:99:f1:
65:8c:16:6b:d6:a5:54:c0:6e:68:c1:fe:ce:1f:7a:f5:4c:01:
c3:d8:32:1f:bc:bb:d6:4d:66:ba:78:99:56:f5:7d:01:cc:eb:
f4:a0:ea:1d:f9:b7:90:c8:e8:54:a8:25:3c:86:74:41:77:7b:
af:72:25:42:fc:6a:e9:dd:b2:55:d2:41:8e:d7:a5:c1:5b:06:
65:b1:7f:28:f0:6a:d9:92:5a:c5:08:54:00:8a:b1:2f:97:d7:
52:f8:ee:d9:6d:98:b6:91:73:5d:a8:72:cd:89:1d:01:8a:bc:
d1:92:1d:85:43:0d:39:01:5a:dd:29:52:02:fd:6f:3a:aa:0c:
b6:9a:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:15:14 2025 by rpki-client