Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa
File: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (raw, json)
Hash identifier: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=
Subject key identifier: 1B:1E:A4:3D:CC:B1:A5:00:9F:8F:30:CE:AA:F4:CF:22:A7:E1:CD:2A
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 0194236A0EC787F22CE5D23B4C8AF134B2B8
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2906
IP address blocks: 37.77.184.0/21 maxlen: 24
185.2.220.0/22 maxlen: 24
2a00:86c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0e:c7:87:f2:2c:e5:d2:3b:4c:8a:f1:34:b2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b1ea43dccb1a5009f8f30ceaaf4cf22a7e1cd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:bd:66:b1:86:f3:7e:43:cb:b5:57:4f:f5:
9b:45:34:0b:4c:04:41:3a:01:dc:5f:cb:19:65:3b:
29:66:d0:22:5d:5b:4a:05:21:d2:96:ca:f7:ee:b1:
d0:64:37:eb:5c:a1:af:04:c9:a1:24:65:7e:70:09:
fe:ff:0b:08:cc:73:dc:1e:66:4c:b6:db:c7:51:36:
0d:7b:24:e1:81:e9:7a:6a:09:44:d9:2d:cc:c6:ab:
db:a7:7c:d1:c9:9c:40:db:7b:c2:6a:e9:6b:29:de:
53:33:e1:7f:a7:08:22:6e:df:ec:2e:1c:45:25:f3:
e9:85:ca:cb:07:50:06:e3:a6:49:99:85:35:9d:61:
2f:0a:77:bd:51:8a:fd:22:8e:cd:61:24:2b:b4:f8:
28:22:9f:c0:c1:4d:d9:40:1e:41:95:55:9d:de:14:
26:c4:00:8b:41:d9:7a:03:86:3d:ac:6d:23:be:b2:
c1:76:89:dd:bd:e5:e8:93:b7:2c:c7:0b:4e:3d:94:
aa:a7:93:5f:10:6b:d5:9e:51:ee:c7:8b:79:2b:ac:
e2:8a:d3:8f:63:21:49:09:a5:fa:c8:9b:d4:74:e2:
3e:de:85:2f:7e:d9:4d:1f:ec:04:ee:70:5d:46:87:
7d:11:80:60:11:69:68:10:8d:87:de:ec:cd:1a:d7:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1E:A4:3D:CC:B1:A5:00:9F:8F:30:CE:AA:F4:CF:22:A7:E1:CD:2A
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.184.0/21
185.2.220.0/22
IPv6:
2a00:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
95:70:2e:a4:39:11:9b:a2:fe:7f:c4:29:89:20:c7:3e:fc:92:
0f:af:7f:f5:a7:98:8f:d5:20:bc:9d:b8:d9:ff:c3:f2:84:9b:
33:a2:c1:54:58:06:d2:a5:d5:47:04:e8:09:40:f0:40:1d:dc:
78:aa:5e:c4:ee:d0:40:2c:ba:11:8a:52:3a:d2:6d:8f:1c:87:
b1:73:1b:44:fe:33:5a:ce:1d:ad:05:f7:bd:cb:81:79:c6:1e:
e5:d9:de:8a:f4:17:03:5d:05:1b:1f:61:63:de:66:70:00:d2:
56:8f:58:b1:8b:ef:f7:17:39:c1:9d:14:5a:9c:0d:65:82:11:
93:6b:29:c3:c9:8b:04:a5:d6:8c:0e:13:bd:1a:56:c0:39:aa:
b6:e6:23:7f:33:ad:a9:03:6c:d2:31:94:cb:00:08:7d:e9:ff:
99:16:d0:fa:1c:a4:8d:6f:4f:e4:96:49:28:9f:ba:a9:15:74:
05:bc:75:7f:2e:9a:1f:5b:67:ec:f7:48:34:97:b0:e5:c0:d6:
22:d6:b3:0c:c0:42:f5:f5:20:b4:e1:19:d2:fd:1f:ed:bb:5d:
cc:bb:26:42:16:72:ae:ef:96:18:af:5a:cf:5a:38:46:aa:3c:
5f:bc:0c:e7:34:61:96:0c:89:42:10:f8:91:6a:7a:3a:01:3e:
84:1b:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:03:07 2025 by rpki-client