Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa
File: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (raw, json)
Hash identifier: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=
Subject key identifier: C5:7F:72:24:48:98:B4:EB:04:3E:4E:83:D9:9F:DD:82:72:46:EA:EF
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 0194266B5E0D0C689DA6A89642D485298BC6
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41088
IP address blocks: 185.125.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5e:0d:0c:68:9d:a6:a8:96:42:d4:85:29:8b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c57f72244898b4eb043e4e83d99fdd827246eaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:b7:cc:93:f3:ab:a5:0d:fc:63:65:c0:50:
1d:22:82:51:70:cb:2d:63:ca:39:f1:d4:9b:df:68:
8c:c3:9c:78:67:2b:6d:ff:7e:c9:a0:aa:a2:0c:be:
3f:af:ff:75:cc:46:07:35:56:2c:93:d7:d1:d4:75:
2d:ef:f0:85:c2:3c:fc:68:47:19:2d:fe:d4:7d:48:
f7:57:5d:b4:b0:e2:be:1e:dd:0a:4e:5a:0b:cd:47:
df:54:e3:52:76:8c:f1:77:0f:77:f7:2d:8a:9d:bf:
07:df:ca:fd:96:e8:7c:6b:fb:32:01:ed:1b:48:a2:
bb:eb:02:46:70:d6:3f:9c:d0:d4:da:70:fc:e5:1f:
19:dd:36:ca:47:66:85:9c:85:c2:94:35:8d:8b:97:
20:63:e5:8f:22:6c:11:54:98:51:b4:c3:4b:0b:f2:
c1:f8:82:ae:7e:91:dd:36:9a:ad:16:89:4b:8e:90:
80:dc:dd:7c:41:fb:3b:e9:b7:7c:4f:d6:d6:56:20:
0c:a1:af:49:0a:31:eb:b3:b0:67:d8:c2:ac:b9:5b:
d7:7a:eb:f3:d0:91:93:43:2a:fd:8a:1f:2d:39:af:
3a:28:47:ba:d6:29:c3:82:54:75:35:9a:88:44:16:
31:0c:e7:f9:ed:18:b1:dd:76:17:ac:fd:0b:b9:35:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:72:24:48:98:B4:EB:04:3E:4E:83:D9:9F:DD:82:72:46:EA:EF
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:0d:d3:bb:c0:f8:c8:45:37:cd:8a:ae:da:79:a2:cf:ad:98:
4b:d5:fe:18:01:55:2a:f2:8d:f8:1f:77:f4:b5:fa:ee:7e:66:
08:7e:f6:cc:34:2b:6b:50:d6:6a:e6:ba:11:2f:b4:2c:17:a3:
8a:f4:ca:cf:a3:be:96:53:92:68:2a:5c:38:a2:84:da:47:a2:
c5:2f:3a:c3:44:c0:99:c5:eb:b5:2c:0d:de:60:02:3e:99:d4:
d4:9e:c1:32:2b:5e:e6:9a:49:b5:f2:46:c0:a4:db:e2:bd:a5:
5f:eb:92:6e:60:43:aa:7d:12:f7:4b:f5:75:64:c1:1b:74:93:
e5:e3:7b:70:e1:ab:f1:7f:2f:61:ea:36:e5:0d:16:09:6b:53:
d5:38:df:cd:f9:0f:1b:24:29:da:10:56:0a:24:60:be:14:b7:
1b:dd:17:e3:d4:74:ab:e6:1f:82:23:64:7c:8a:24:27:9d:29:
7d:af:7b:81:4f:e7:eb:8d:dc:97:a4:e9:23:36:b4:02:bd:b5:
b0:39:a5:27:8b:e9:c8:60:ac:cc:5d:54:1c:05:2c:61:b3:55:
f1:a0:cd:f8:98:7a:92:cd:0d:99:f3:48:fd:b9:dd:be:5b:ed:
3d:a5:9e:78:11:a2:94:8c:f5:30:4f:c9:df:8f:4f:2d:d7:65:
05:14:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:26 2025 by rpki-client