Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/tBzdDQaUYLJT3Lok_fo9sJPXWeA.roa
File: tBzdDQaUYLJT3Lok_fo9sJPXWeA.roa (raw, json)
Hash identifier: v05CcdVHIFy5WgWaKj3N9IG2n8glH+Z6XFN+UN+ogBM=
Subject key identifier: B4:1C:DD:0D:06:94:60:B2:53:DC:BA:24:FD:FA:3D:B0:93:D7:59:E0
Certificate issuer: /CN=9adc1290226b8f5b267764fb9565c0bc19833697
Certificate serial: 019427482DE1F11CD217C71F411A4935A872
Authority key identifier: 9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/tBzdDQaUYLJT3Lok_fo9sJPXWeA.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202105
IP address blocks: 185.133.84.0/24 maxlen: 24
185.133.85.0/24 maxlen: 24
185.133.86.0/24 maxlen: 24
185.133.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2d:e1:f1:1c:d2:17:c7:1f:41:1a:49:35:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9adc1290226b8f5b267764fb9565c0bc19833697
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b41cdd0d069460b253dcba24fdfa3db093d759e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:bb:b4:09:9b:ec:81:04:52:8a:06:18:94:
f3:c0:db:81:d4:81:b9:20:55:0b:9d:85:c7:fd:96:
48:23:4d:c6:9c:f8:55:62:bb:af:74:d6:dc:f7:60:
b5:47:c2:d5:de:08:3c:15:f4:25:34:f3:1d:25:6c:
27:29:3f:52:0a:ec:84:d1:de:2f:79:0c:5f:30:68:
c0:02:f9:0c:85:6f:96:9a:17:04:43:1b:aa:67:12:
02:4e:fc:d5:80:54:a7:86:3f:98:4f:6d:31:50:cf:
c4:30:74:e1:ea:31:bd:68:a5:71:85:4d:26:3f:17:
10:88:c0:37:52:30:e8:da:4b:f0:d7:ae:27:e9:89:
74:02:55:f2:b5:c4:a7:a4:fb:54:58:d6:f8:ed:4e:
97:ec:7a:17:da:f7:e4:58:34:7f:2c:f2:3b:55:31:
c9:a3:6c:92:26:bb:72:a1:a1:65:79:b4:b7:31:19:
b1:ad:e3:38:4c:b3:ed:c4:7f:5f:08:7d:6e:3e:38:
43:9b:27:cc:6a:e9:26:c8:ec:ad:e6:04:02:65:4b:
79:f8:93:ed:54:9d:86:3d:9e:6f:41:33:bc:3f:9b:
d2:29:c7:2a:43:30:20:d4:41:ba:9a:c1:ec:07:47:
8e:e5:1b:85:e2:48:53:c7:b1:7e:f2:32:e4:85:fd:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:DD:0D:06:94:60:B2:53:DC:BA:24:FD:FA:3D:B0:93:D7:59:E0
X509v3 Authority Key Identifier:
keyid:9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/tBzdDQaUYLJT3Lok_fo9sJPXWeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.84.0/22
Signature Algorithm: sha256WithRSAEncryption
15:72:18:21:e5:91:cf:24:cf:24:fb:63:45:18:e4:0b:9f:a5:
21:d0:2b:50:a1:e8:58:9f:fb:17:d1:95:fb:ab:a4:7d:c3:be:
ee:e2:78:c2:bf:39:6e:03:1d:b0:e0:8f:58:3c:dd:96:db:64:
8d:84:55:f5:a5:8e:19:af:d9:56:c9:6d:91:b7:74:2b:fc:e1:
ca:7b:89:be:46:be:b8:d1:24:f3:fd:98:e9:d2:2a:fb:f8:36:
f9:42:4f:8d:db:71:b8:7e:0e:a0:e5:a3:f9:fa:71:70:8e:34:
c2:23:3d:7e:3f:a1:cc:b5:18:36:c7:2c:38:19:67:8a:24:8f:
38:c3:b2:4c:89:d9:b4:f2:4c:00:4f:a2:f9:c3:58:3f:40:ac:
6d:fe:48:34:87:cf:79:cd:de:8a:be:d8:bb:af:5f:1a:8c:03:
e0:be:2e:01:e7:b0:c7:71:f0:2b:5f:17:55:05:7c:ca:97:c0:
d3:3a:48:e0:09:95:92:e4:e0:1e:97:78:33:80:3d:51:27:4a:
e5:3e:a2:02:57:6d:64:8e:39:4d:61:2d:b3:12:6e:6e:9c:54:
43:7a:5b:3d:58:b9:3a:5f:74:02:1b:da:05:5b:72:fb:5b:c8:
92:fb:55:db:a5:c7:64:6d:fc:0f:ea:40:6a:f1:83:82:f1:2b:
9e:0b:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:45 2025 by rpki-client