Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa
File: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (raw, json)
Hash identifier: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=
Subject key identifier: 2F:DA:3B:29:0C:49:3D:12:61:CD:E6:6A:1D:27:DB:9B:FE:C5:D3:EB
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 019423D6E314DD232D75447890BF12BE9008
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41026
IP address blocks: 185.56.244.0/22 maxlen: 22
2a02:5660::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e3:14:dd:23:2d:75:44:78:90:bf:12:be:90:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fda3b290c493d1261cde66a1d27db9bfec5d3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:67:79:0e:d8:7c:49:e7:63:aa:48:0a:47:
6a:1f:63:46:44:7d:4f:a2:d3:e2:7d:17:9c:c5:3d:
6a:9d:13:ab:e2:d7:c1:49:f2:b0:8e:d5:3a:06:9e:
e5:90:af:84:7f:ac:c6:c4:3d:e2:21:65:5f:62:72:
ae:97:40:32:55:16:1c:9f:28:7c:e3:b5:3b:6c:35:
8b:45:95:69:11:7b:29:48:d7:b2:0e:c1:fe:1f:04:
7b:40:4a:18:87:c4:87:fa:f2:7f:66:10:30:09:20:
6e:21:03:91:5a:33:06:0a:a4:2b:4e:0a:a0:d1:32:
75:31:f5:2c:0b:59:99:bd:33:2e:b5:5d:6c:dd:27:
1e:bf:be:c9:16:87:0e:56:38:ea:e0:ef:74:5e:99:
2a:9d:b6:32:cd:4b:44:bf:fa:9b:2c:96:0a:d7:c2:
ec:af:a4:7b:5a:b5:a1:07:f2:fd:84:e3:fe:57:0c:
ab:c1:21:51:0f:03:6b:43:e3:f2:28:9e:7c:e7:6c:
ed:f6:bc:a9:e2:3f:4d:4c:13:0b:19:b3:f3:84:a4:
f5:3a:91:9e:71:a1:eb:d2:22:9e:6c:82:43:f2:57:
50:3f:36:d3:cf:77:1d:8b:ec:b1:35:6e:35:a2:7d:
63:4a:fa:60:d4:8b:28:27:29:6b:15:d2:40:51:25:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:3B:29:0C:49:3D:12:61:CD:E6:6A:1D:27:DB:9B:FE:C5:D3:EB
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.244.0/22
IPv6:
2a02:5660::/32
Signature Algorithm: sha256WithRSAEncryption
4e:77:0c:32:dc:fd:cd:7b:9e:87:72:13:41:35:92:0f:87:91:
e0:2f:8c:d4:34:62:f0:8c:e3:84:ce:fa:e3:23:96:fd:64:bf:
60:b7:8f:cd:be:29:98:92:cb:77:e9:bd:5a:26:a5:b2:f3:3f:
3d:b7:7b:fc:65:c4:29:a5:f6:5e:bc:f8:26:77:48:ea:2f:b1:
7b:90:b6:e1:6f:ee:ac:80:f7:49:4f:e8:44:6f:68:4f:d0:45:
dc:5f:bb:87:de:3c:0e:51:e3:d3:8c:bd:0d:fb:f0:ef:24:2d:
2c:c3:3b:b7:80:86:d8:dd:98:4a:aa:99:f9:3f:04:12:b8:47:
72:c2:87:b2:0b:ee:1b:b0:e6:e4:2d:61:5a:df:ba:11:b4:3d:
0a:c4:45:51:a8:92:f7:2a:66:c1:1f:b7:a0:77:8c:ea:eb:b0:
ed:a5:87:ec:89:0c:0c:1c:83:02:de:ce:a2:09:e7:f3:de:fb:
05:7c:7d:35:a6:a8:56:2c:43:cb:b0:dc:72:53:f6:08:2e:23:
62:39:0c:84:62:2d:a3:f1:c6:26:db:46:31:c6:f4:1d:29:6f:
b8:1e:a1:5c:22:4e:6b:ae:80:ee:f1:bd:a2:2f:c1:af:96:be:
d1:ab:70:ac:e2:3e:0e:52:e0:42:5a:58:32:eb:92:07:08:b7:
3c:a2:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:36:11 2025 by rpki-client