Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/cV73S9vY_2EGIUA2L2rwbhN1bOY.roa
File: cV73S9vY_2EGIUA2L2rwbhN1bOY.roa (raw, json)
Hash identifier: lSeDgJAzaMV+QfWo+5V21V0n2DSzOk86137tpudy4tY=
Subject key identifier: 71:5E:F7:4B:DB:D8:FF:61:06:21:40:36:2F:6A:F0:6E:13:75:6C:E6
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01941FFA01DF7E40038D3A08D55ADCC5F26F
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/cV73S9vY_2EGIUA2L2rwbhN1bOY.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212641
IP address blocks: 185.179.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:01:df:7e:40:03:8d:3a:08:d5:5a:dc:c5:f2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715ef74bdbd8ff61062140362f6af06e13756ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:63:64:d0:f4:b1:63:2e:b0:36:19:25:4a:
60:65:ea:57:9f:84:a1:72:08:1f:99:1a:77:83:6d:
ad:b3:33:6f:b1:d8:0f:2e:5b:2c:13:26:29:bb:af:
b9:81:8b:89:41:d5:d7:31:de:ef:62:97:e5:79:56:
2e:df:b8:07:82:f1:36:18:12:c0:da:c9:c9:ca:23:
c8:00:a7:8e:28:e0:ff:80:47:6c:db:0e:56:c0:18:
bc:a0:4d:2d:2a:82:0b:b4:fe:dd:3f:d7:9c:0f:99:
0c:78:6a:75:a4:6c:fd:0e:b6:fa:64:ca:df:18:e0:
8b:87:d4:9a:81:fa:a5:fd:d7:e9:8b:fe:57:1d:72:
27:21:5e:90:8d:57:c8:f6:69:62:ef:60:1a:b4:c9:
cc:9e:0b:0e:5e:c3:7a:5e:97:5f:40:d3:62:db:74:
a7:95:a3:0a:6e:16:ac:ba:88:42:f7:e3:59:d8:1e:
20:93:88:2e:e3:14:e4:ec:44:ea:90:87:67:7b:94:
f7:50:17:f3:ec:f2:e0:32:32:86:48:af:66:3b:0e:
62:a7:be:84:72:ab:2a:25:d8:66:18:e5:d5:0c:fd:
5f:8c:9e:f7:da:ee:e9:2c:17:7e:fe:fc:9e:1f:2c:
06:1e:12:ef:cd:bf:5d:c4:75:35:f8:03:22:19:6a:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:F7:4B:DB:D8:FF:61:06:21:40:36:2F:6A:F0:6E:13:75:6C:E6
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/cV73S9vY_2EGIUA2L2rwbhN1bOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.214.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c8:a4:ba:cf:57:6b:51:9c:5f:ef:82:e9:46:c8:4c:43:a6:
63:cb:f2:88:e2:9c:6c:39:12:2c:0f:aa:d3:6a:f8:85:6f:c5:
12:d4:9c:cb:98:f6:71:1f:0e:33:df:33:4a:a1:a6:4c:70:cb:
0b:bf:b6:5e:d3:bb:bf:c8:a9:14:c1:eb:07:cd:59:51:b3:a8:
95:38:ed:79:fb:c2:e9:07:63:ce:4e:c3:41:b2:03:76:a5:3d:
4c:cb:11:96:a8:0e:74:98:ff:05:79:c3:71:e1:7b:e3:c7:32:
2a:dd:d8:e7:db:57:21:f7:07:83:73:e3:09:f0:3d:35:03:63:
2b:98:25:ad:ef:57:02:75:34:a8:d5:5f:a0:14:f0:3d:5d:51:
29:b0:76:1d:7a:1d:c6:70:5a:6e:5e:2c:be:b8:7c:5d:a0:a4:
b7:b6:c5:fa:93:91:8a:2d:62:92:4d:ef:d6:c5:e2:bd:de:bb:
68:4d:e9:20:89:f6:43:f2:10:38:12:2b:e1:34:5a:df:1c:bd:
19:4e:2f:f7:c9:3d:d2:ff:d6:43:e8:6a:34:d0:64:05:a7:cf:
8f:7c:08:09:ed:d9:16:ee:40:7e:ef:4a:41:cb:eb:db:63:ff:
36:18:af:3d:79:3f:60:9a:59:b7:7f:d9:af:b6:d4:80:b9:2a:
e5:d6:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:32 2025 by rpki-client