Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/9oNER91IB-H_6dQzFG4aTa1cjVM.roa
File: 9oNER91IB-H_6dQzFG4aTa1cjVM.roa (raw, json)
Hash identifier: oK/++MF9suyvds/jQSLAoISxJwhmMBspKaCD4mfLYUA=
Subject key identifier: F6:83:44:47:DD:48:07:E1:FF:E9:D4:33:14:6E:1A:4D:AD:5C:8D:53
Certificate issuer: /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial: 0194258F530620D7271E361A89B7F500D01E
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/9oNER91IB-H_6dQzFG4aTa1cjVM.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44650
IP address blocks: 185.175.240.0/24 maxlen: 24
185.175.241.0/24 maxlen: 24
185.175.242.0/24 maxlen: 24
185.175.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:53:06:20:d7:27:1e:36:1a:89:b7:f5:00:d0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6834447dd4807e1ffe9d433146e1a4dad5c8d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:04:b8:2d:7a:ba:04:9a:a9:68:c7:bf:fd:
bd:e2:70:dc:e2:7d:51:6f:e1:a3:79:94:4b:9d:bf:
8b:7c:1b:d7:63:86:3c:ef:ca:bc:24:3f:43:1b:91:
62:5b:e7:76:47:b4:42:63:fd:c5:2e:d6:5a:1e:b5:
e7:1b:3d:26:f9:56:52:f2:0d:dc:a4:45:ea:a2:f7:
7c:7d:d7:f4:ce:4d:f7:da:46:62:95:8d:f5:87:8f:
1a:93:d8:c1:96:b5:22:40:1e:14:51:ef:5d:5b:96:
9c:3b:09:54:7c:fb:ef:97:44:61:ca:7e:00:aa:a4:
c6:c0:8f:61:7b:f2:5d:c1:14:93:47:b7:5a:fb:fb:
98:7d:bb:69:ff:be:c0:1b:c6:98:97:af:0b:7f:13:
6c:7b:29:95:d6:3c:29:64:48:23:3a:6e:c0:2c:ce:
70:21:c1:cc:9a:8f:f2:40:47:5b:ab:19:43:03:57:
dc:df:d9:83:a5:4c:f8:59:79:a5:b4:07:2d:e8:ed:
a0:aa:3f:af:3b:66:28:c7:ec:ae:3a:4e:f2:7b:94:
34:23:d9:22:df:2d:6f:56:7e:5e:23:ee:bd:f1:67:
48:e5:61:59:27:3b:58:19:c7:46:9b:a5:ab:16:de:
5f:ff:fd:87:6d:20:39:d4:b3:82:14:91:ce:a2:71:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:44:47:DD:48:07:E1:FF:E9:D4:33:14:6E:1A:4D:AD:5C:8D:53
X509v3 Authority Key Identifier:
keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/9oNER91IB-H_6dQzFG4aTa1cjVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:26:2d:04:69:b0:da:f8:d3:8f:f0:4f:41:bc:71:ed:4b:b1:
50:91:13:81:61:63:d8:a0:be:ee:60:20:2f:3a:c9:ff:88:52:
7c:62:de:f8:84:93:33:91:19:e2:1b:d1:9d:f9:7d:a0:f8:2d:
f5:f5:dd:d1:87:10:6f:4d:ad:6a:d5:07:02:d9:da:27:91:db:
fc:aa:19:6f:46:0f:8f:2c:4c:cd:c4:f6:c0:c1:14:2f:0e:90:
50:10:b1:f1:4d:30:9e:e6:8d:fa:ee:29:1b:52:9c:bc:bc:55:
db:18:4d:eb:1c:b3:81:58:92:f0:02:3c:83:f6:71:9e:8a:df:
8e:dd:da:96:42:39:b2:8a:34:06:04:62:5e:0e:0a:32:88:50:
99:76:11:02:a5:d5:43:16:d7:28:fd:a4:1b:dd:35:11:cf:a6:
c4:ed:38:15:db:bf:24:09:1c:0b:ad:55:fc:d5:a7:a4:bd:4f:
52:b2:c1:26:97:e4:7b:ad:67:22:15:36:34:96:07:0a:1b:dd:
52:a8:35:ae:2c:52:53:91:45:6c:d0:15:36:e5:ae:f3:49:96:
a4:49:0c:ea:93:4d:9a:35:6e:4c:61:af:b9:77:b6:79:48:48:
06:85:ec:3b:58:d6:b6:43:5f:78:30:22:1c:b0:c3:71:18:ca:
0d:bc:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:36:00 2025 by rpki-client