Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa
File: v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa (raw, json)
Hash identifier: Y7iaJQnKOEgRwNsqfZadHFtG6v/ZxO1cSgSJLizeQ/g=
Subject key identifier: BF:D2:EB:B7:64:9F:B8:09:57:CD:5A:2D:E2:EE:CA:BC:F5:60:63:63
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019422FAEDAA01B0B5B85CEC728038599A6D
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa
Signing time: Wed 01 Jan 2025 17:47:37 +0000
ROA not before: Wed 01 Jan 2025 17:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41706
IP address blocks: 185.216.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ed:aa:01:b0:b5:b8:5c:ec:72:80:38:59:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 17:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd2ebb7649fb80957cd5a2de2eecabcf5606363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:d7:8d:c0:57:d7:a2:99:83:60:ac:a7:ba:
dc:02:db:69:29:2c:e2:ba:07:da:7c:20:71:4f:57:
88:cc:79:c3:80:6e:24:13:c6:5f:db:0d:44:cf:2a:
4c:b5:f7:71:03:08:8e:51:8c:71:08:38:14:a4:a5:
60:db:ff:5b:e1:00:4d:99:2f:e3:ed:8d:97:b6:3e:
2c:54:b5:c0:1a:c4:75:80:23:09:3a:49:69:78:f7:
18:84:ee:4e:3c:f3:b7:d4:f3:44:13:1a:3f:67:0b:
69:60:62:f4:ec:d4:40:f5:92:8f:0f:21:6d:1e:0e:
f9:84:7a:f3:96:04:90:d7:2f:9a:97:88:05:37:fa:
1f:8c:f3:10:f5:b5:8c:be:f1:e5:26:da:f4:f9:de:
78:6f:b4:d9:de:97:0f:c8:40:1e:db:84:c0:33:c6:
9d:3d:54:30:a9:14:29:d1:86:90:bd:e4:c4:cc:8f:
ce:5e:ec:cd:a3:6c:fc:e3:8d:83:20:5b:2e:b7:1c:
59:e9:36:3e:96:ed:ed:38:9d:79:93:ee:7f:bb:79:
65:ec:80:81:1b:26:13:7f:54:24:fd:95:df:c5:13:
0f:f5:e3:31:fc:60:8a:ff:34:be:86:03:6f:6a:35:
21:d9:4b:39:bf:3f:5c:f0:b0:f5:99:fd:85:b3:fa:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:EB:B7:64:9F:B8:09:57:CD:5A:2D:E2:EE:CA:BC:F5:60:63:63
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.103.0/24
Signature Algorithm: sha256WithRSAEncryption
71:54:83:40:9a:bd:8d:e6:44:74:37:3c:0a:2e:12:78:df:34:
9b:e4:5e:2b:0a:c0:23:20:d5:55:2f:e5:3e:4e:43:33:db:0b:
c9:da:4b:92:5b:50:86:d8:5d:3f:6e:ef:f7:fb:5a:50:1a:65:
7c:4c:aa:c4:a5:58:12:f7:b1:ea:af:23:77:d4:0f:87:25:0d:
4c:8d:f1:3c:23:f4:d4:6c:f8:a6:0b:b1:36:ad:4a:f8:e3:78:
69:59:81:9c:26:3b:4c:4c:d6:dd:1f:c4:1e:f0:9b:d3:1f:95:
14:5b:3b:8e:c8:e7:79:9d:2b:7b:12:8a:47:15:00:49:07:57:
b7:a7:22:83:2e:9a:59:de:0c:0f:86:0b:fd:7e:ab:55:27:2f:
4b:2a:b7:38:7f:f9:33:d3:2c:23:91:ab:f5:8e:c6:99:1e:cd:
7b:b1:47:51:49:af:e2:1f:d2:44:bc:03:2e:2c:69:4b:6c:27:
b0:d5:d6:95:88:b2:cb:b5:65:9d:7e:ee:ec:66:70:9d:b6:f1:
4c:91:9e:77:6a:55:61:cf:ba:a6:eb:b6:b5:b9:ad:2a:cb:cb:
97:34:16:06:77:3f:c5:20:01:38:4d:59:d1:b4:36:23:92:0f:
3c:7b:dc:5f:8e:bd:31:e8:23:c8:40:8a:60:f6:83:51:fc:44:
92:b3:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:28 2025 by rpki-client