Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/9DOz_U29J25pYyeM86YxHr4X6eI.roa
File: 9DOz_U29J25pYyeM86YxHr4X6eI.roa (raw, json)
Hash identifier: m1/Q7PpupEiNgQObdS35HK/CHkZPlsg/AOIPZ9fZoyU=
Subject key identifier: F4:33:B3:FD:4D:BD:27:6E:69:63:27:8C:F3:A6:31:1E:BE:17:E9:E2
Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial: 019425FC1D17FDF2B981DF77CD914B229FBC
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/9DOz_U29J25pYyeM86YxHr4X6eI.roa
Signing time: Thu 02 Jan 2025 07:47:47 +0000
ROA not before: Thu 02 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206841
IP address blocks: 185.174.184.0/22 maxlen: 22
185.174.184.0/24 maxlen: 24
185.174.185.0/24 maxlen: 24
185.174.186.0/24 maxlen: 24
185.174.187.0/24 maxlen: 24
2a0b:b300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1d:17:fd:f2:b9:81:df:77:cd:91:4b:22:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Validity
Not Before: Jan 2 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f433b3fd4dbd276e6963278cf3a6311ebe17e9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:c6:b6:13:be:61:3b:2f:31:d6:a3:c0:12:
4d:d5:f6:ea:eb:c0:d8:99:44:ef:a2:3b:c0:45:e4:
b5:97:58:f0:3e:6b:10:ca:9f:6f:a7:b3:2a:da:21:
9d:8b:5e:8d:ad:6d:c9:80:88:31:8b:db:ba:61:b7:
ae:96:74:f6:b5:b3:d8:33:71:5b:53:f8:78:9c:ca:
f4:e1:de:39:56:85:69:c2:5a:f9:ee:11:ac:bb:76:
0b:84:6a:ec:65:84:e1:07:e6:46:b6:fb:c8:04:1a:
74:8c:5a:17:df:40:9b:ed:b0:9e:f4:e3:f0:3c:4b:
e5:26:eb:1b:3c:ea:d2:1c:b1:2f:6e:44:b1:ed:11:
93:42:64:b4:b3:76:0d:2a:29:3b:54:d2:f2:8b:30:
a7:7e:4a:88:8c:15:fb:57:b9:57:32:bd:ea:89:ef:
35:9e:68:62:83:83:7b:f5:d8:67:9b:65:4d:c4:34:
c3:e9:a5:a1:4c:77:65:f8:bd:67:01:7d:a5:d1:e1:
c3:91:93:97:85:fc:9c:52:c7:b7:e2:f6:e0:7e:db:
d9:47:00:8f:81:47:45:fe:ef:a4:63:07:5c:47:77:
92:c4:e8:d6:82:64:2d:94:37:19:6d:eb:9a:15:d8:
0c:ae:7c:12:0d:96:0f:6e:1a:0f:fe:71:ac:30:a6:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:B3:FD:4D:BD:27:6E:69:63:27:8C:F3:A6:31:1E:BE:17:E9:E2
X509v3 Authority Key Identifier:
keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/9DOz_U29J25pYyeM86YxHr4X6eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.184.0/22
IPv6:
2a0b:b300::/29
Signature Algorithm: sha256WithRSAEncryption
aa:7d:31:0f:60:dd:0d:92:5f:7a:ec:77:f8:d8:ce:27:71:3b:
ca:ba:9f:97:cb:75:08:32:a9:b7:0d:66:b9:d7:6d:b0:b4:16:
74:28:e7:ac:59:92:64:02:b3:1c:83:d8:28:b8:65:4a:e9:03:
b0:41:bc:81:c9:93:a5:dc:52:6e:b6:21:c0:88:0f:ba:5a:84:
7d:15:a5:d3:42:a1:95:d9:3a:e3:56:87:ca:db:81:50:c4:de:
45:1d:19:02:dc:2a:93:60:f3:a5:b3:5c:71:c2:1e:03:43:62:
b0:80:0c:44:cf:3f:8d:64:c9:30:59:9e:2c:b5:2b:e2:82:9a:
d4:5c:18:a1:e2:fb:37:1b:62:27:9a:f1:58:40:d8:ac:34:50:
71:d3:e3:4e:71:e9:a9:e5:f5:aa:32:65:94:bf:cf:5e:c3:da:
dc:c2:2d:fb:57:f2:ce:90:63:f8:22:55:e6:1b:18:52:86:62:
0a:43:85:60:e4:e5:3a:73:17:68:52:a9:bc:bc:f5:0f:73:ca:
c4:90:de:5e:c7:82:42:0e:20:d3:ad:63:80:72:ac:25:0e:ad:
ea:40:bb:4c:81:88:84:0b:a7:f6:2c:02:0b:38:9b:30:4a:48:
95:b4:6f:c0:57:10:99:86:72:70:64:2d:62:1c:85:4a:bd:b7:
88:a2:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:46 2025 by rpki-client