Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/iobCcR3UyoYrtXm2S8hRWxvM3zg.roa
File: iobCcR3UyoYrtXm2S8hRWxvM3zg.roa (raw, json)
Hash identifier: 3usXJWbHzs8K4G1qHJnvLDQutknaGmUnq2D6gx78C1o=
Subject key identifier: 8A:86:C2:71:1D:D4:CA:86:2B:B5:79:B6:4B:C8:51:5B:1B:CC:DF:38
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 019420D5DB8020700267FE2FBA1F498DAF22
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/iobCcR3UyoYrtXm2S8hRWxvM3zg.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41956
IP address blocks: 185.254.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:db:80:20:70:02:67:fe:2f:ba:1f:49:8d:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a86c2711dd4ca862bb579b64bc8515b1bccdf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:ce:c4:cc:e1:bc:be:30:f8:66:58:b3:ed:
d7:d1:44:87:83:1e:90:b8:be:29:70:5f:94:98:70:
0b:4c:3e:4b:e1:52:46:d1:33:4f:fa:82:75:16:07:
3e:7a:fb:24:44:4e:0f:a2:46:aa:30:eb:f9:7e:1b:
13:0e:ca:05:f9:68:26:c7:a0:25:11:68:e4:2a:c9:
09:87:54:2a:3f:0f:b7:a5:bb:4c:89:5e:e9:8b:f0:
11:d2:ef:bd:bc:8b:c5:fe:0f:99:2b:03:10:c3:f9:
ba:db:00:da:55:76:3f:8d:eb:96:99:b0:52:79:1f:
d8:d6:fd:15:af:63:63:7c:21:1b:4c:66:88:4b:c0:
91:18:70:99:73:65:63:93:ad:f5:6d:35:fd:d2:4f:
87:09:53:06:b2:9a:14:72:86:b7:22:48:f5:e4:4f:
c0:5c:e2:0d:c3:a2:26:39:77:4a:ae:ac:6e:61:ce:
10:03:32:a1:2f:14:aa:6e:b1:95:e0:90:4f:5d:5a:
15:55:ae:62:db:24:ea:4c:2e:23:ea:e5:f7:c7:86:
d3:bb:d2:58:cf:4e:c8:d3:c6:48:29:d7:7f:ff:e7:
17:47:8c:62:ea:76:8c:2e:05:04:3a:64:f1:05:2d:
2f:fb:83:eb:2e:18:bb:21:b8:8b:11:ef:51:54:bc:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:C2:71:1D:D4:CA:86:2B:B5:79:B6:4B:C8:51:5B:1B:CC:DF:38
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/iobCcR3UyoYrtXm2S8hRWxvM3zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b4:05:cd:7f:bd:6e:96:e7:da:7e:55:e0:b2:34:10:d5:77:
20:2e:f9:26:cc:c2:57:84:70:aa:69:49:d7:c0:0f:f7:16:68:
c2:55:65:98:ef:42:d9:50:7d:b9:1a:74:c8:c6:03:8e:0b:82:
4d:83:41:c1:16:6c:ea:46:1f:51:1e:f1:2e:f4:e5:79:12:46:
20:b0:ab:c8:fb:8d:ab:6f:7d:9c:b4:68:9c:bf:35:33:df:4f:
f7:9f:e9:7e:f0:75:d6:a1:84:b9:28:c6:95:74:dc:62:92:67:
81:0e:8a:b2:a1:56:5e:6e:db:0c:56:c3:ef:86:3d:2d:5b:cc:
e5:c1:22:88:3c:8e:21:ff:94:22:4e:37:c1:dc:cf:62:e2:d2:
99:c4:6b:3d:60:ca:94:06:cb:ab:03:76:11:eb:c9:4c:d8:d7:
27:c8:12:af:df:f8:a3:23:b8:91:e3:f7:dc:0c:2e:d8:f7:e6:
cd:eb:01:b7:59:bd:09:9c:78:0f:e9:06:6f:6b:a8:eb:61:03:
af:5d:87:22:3f:47:b6:22:e6:8d:35:52:2a:75:51:29:7f:ac:
18:93:6d:1b:0e:a2:20:8c:67:2b:e6:9d:98:41:c2:d0:2b:a5:
23:1a:86:41:eb:53:ab:ab:b5:11:c0:4f:28:9b:2d:21:4a:5f:
39:1f:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:44 2025 by rpki-client