Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/1-37jQJX9JQ5FKk_I0ICZK_zHba4.roa
File: 1-37jQJX9JQ5FKk_I0ICZK_zHba4.roa (raw, json)
Hash identifier: ZXhcSVkFflEz3cfFR/44YJQ/mUzYM4H/JKsmEgDIQro=
Subject key identifier: FB:7E:E3:40:95:FD:25:0E:45:2A:4F:C8:D0:80:99:2B:FC:C7:6D:AE
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01941FFA016BEC7841042B9A074A0A5B6232
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/1-37jQJX9JQ5FKk_I0ICZK_zHba4.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212438
IP address blocks: 185.179.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:01:6b:ec:78:41:04:2b:9a:07:4a:0a:5b:62:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb7ee34095fd250e452a4fc8d080992bfcc76dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:4a:47:69:a8:aa:03:f6:d9:66:b3:d9:91:
c5:00:2d:e3:12:35:e2:59:c8:eb:d8:1f:71:2a:2e:
82:ba:d5:1b:01:73:f1:00:45:fe:19:2c:04:68:a7:
dc:2b:3f:6b:f8:2b:77:a7:ef:f4:c0:fb:08:20:9b:
8a:cc:5f:f3:c7:5e:87:0c:9b:40:5a:5d:16:c8:39:
a8:21:fa:42:01:69:ca:13:6e:8e:30:9f:53:c7:9b:
1e:14:1a:ad:32:f1:a5:46:7d:9c:0e:93:63:11:65:
c3:18:69:71:af:56:8b:94:d8:04:81:ac:c2:47:86:
b4:8e:4c:9d:87:1a:b2:97:6c:2c:45:d9:1b:8e:58:
82:1d:8e:65:96:53:40:80:06:d1:50:34:ef:f3:a1:
12:da:74:79:f0:dd:8f:ac:9b:0c:6b:13:8b:b7:d8:
d7:d4:08:99:51:a5:77:65:9a:58:7a:84:62:fb:20:
01:5b:0b:8e:bf:20:6d:30:60:e2:d5:99:8a:28:7f:
8c:3c:03:b0:7a:71:82:47:c7:61:46:b6:d7:43:2f:
8c:0c:e0:e5:18:74:fb:bd:a6:13:72:ba:cb:fd:22:
74:61:e4:bd:a6:ad:e0:c7:d4:b4:15:f8:ae:c3:9d:
22:aa:20:25:af:df:6c:61:df:6a:06:2a:75:24:53:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:E3:40:95:FD:25:0E:45:2A:4F:C8:D0:80:99:2B:FC:C7:6D:AE
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/1-37jQJX9JQ5FKk_I0ICZK_zHba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.213.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ca:a9:1d:fd:31:19:fa:6f:a5:d9:9c:4a:51:6c:a0:64:a5:
6e:e0:95:ee:c5:38:69:49:c0:a7:65:4d:3a:5e:c4:fb:f6:e5:
ee:de:52:38:be:38:76:d3:12:62:f6:4e:a3:48:02:64:a3:c7:
65:9a:fd:9a:4a:cd:31:0c:f0:58:99:fb:f9:42:91:3d:11:77:
b5:8f:a8:bc:3b:04:d0:c7:32:e7:f4:78:61:a9:99:58:58:2a:
76:4d:fe:63:b8:83:7d:40:f1:cc:58:a7:61:a8:67:d7:be:1c:
76:8c:9b:14:b2:6f:40:b6:c2:97:64:36:e7:41:37:d7:c1:89:
58:ad:a6:4a:0c:f5:23:38:99:74:b1:3a:3b:e8:f6:f3:5e:57:
67:cd:ff:ce:ef:9b:88:13:6c:fc:35:09:b7:0c:07:f9:d5:95:
a9:01:ee:e0:ca:0d:81:6d:94:c0:b0:8b:c2:3f:fa:2a:18:0b:
02:cf:7c:5c:79:ec:a4:2e:da:3c:e3:68:99:9c:59:d8:11:fc:
78:e7:8c:4b:55:62:e8:1b:37:ea:85:c1:22:1c:3b:5b:c8:b3:
8d:90:c3:60:42:2d:2d:38:cd:1c:47:40:a2:ce:2f:7b:fb:c5:
32:6f:ba:4a:b3:20:3e:cb:a3:9a:61:e4:a8:c2:6f:06:7d:39:
c8:d2:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:06 2025 by rpki-client