Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N9gLvWdL4Ew4VY0vbf0qC3U9Y8I.roa
File: N9gLvWdL4Ew4VY0vbf0qC3U9Y8I.roa (raw, json)
Hash identifier: D3UfEQyZe25SHdKTKz12iMwSrR2hIP12RlRHxuIhCpA=
Subject key identifier: 37:D8:0B:BD:67:4B:E0:4C:38:55:8D:2F:6D:FD:2A:0B:75:3D:63:C2
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FAB84431A9532885F0C31A50F2D75
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N9gLvWdL4Ew4VY0vbf0qC3U9Y8I.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18796
IP address blocks: 185.177.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ab:84:43:1a:95:32:88:5f:0c:31:a5:0f:2d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37d80bbd674be04c38558d2f6dfd2a0b753d63c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:d2:b8:d4:53:06:cb:ee:ec:cc:96:8c:91:
2a:31:ba:5c:c0:f6:18:bd:18:73:2f:07:0d:62:e9:
a6:5b:da:da:30:ab:09:76:01:36:97:39:4e:1b:ca:
a5:b1:7b:ec:50:f5:d7:56:b8:cd:f1:dc:16:28:b9:
18:c6:1e:91:dd:8c:1c:66:d4:cf:5b:dd:56:ea:cf:
04:ee:71:46:fc:ff:e8:16:f1:c5:c5:30:1f:dd:39:
b0:15:0b:47:e0:3f:e6:2f:06:58:c5:a8:98:62:fb:
0a:9c:5c:d3:1a:ed:98:08:85:2c:bc:d1:de:b1:f6:
f5:be:2f:f8:59:85:2c:87:d3:5f:07:32:ad:cc:e8:
99:db:26:ca:c7:b8:a4:91:a3:a7:24:55:32:91:02:
4a:4c:6d:f4:89:5d:4e:d3:da:2e:f0:03:b8:a4:5c:
bd:f3:d6:0f:e3:a0:80:ac:ed:3e:35:bc:ff:88:5f:
33:26:51:f2:a1:48:10:25:e6:86:a4:d1:f8:5f:97:
ff:19:67:da:20:ed:4d:7e:d7:de:9a:a2:ed:7e:63:
40:43:b1:b3:fb:33:03:9f:a1:22:35:28:68:67:60:
e9:5c:55:f7:7f:02:7a:d9:bf:0b:84:e1:96:ed:83:
dc:ac:37:48:8a:69:d8:b8:02:24:7a:8d:57:f3:20:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D8:0B:BD:67:4B:E0:4C:38:55:8D:2F:6D:FD:2A:0B:75:3D:63:C2
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N9gLvWdL4Ew4VY0vbf0qC3U9Y8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:af:e6:53:07:6d:67:65:af:20:15:20:b2:1d:82:6c:9e:5f:
f3:15:61:54:d7:c0:42:2d:64:92:19:02:ef:da:38:6d:c9:61:
f2:52:98:07:ee:22:fe:1c:49:cd:b5:ef:14:62:c7:fb:f5:c5:
8a:a8:6c:86:98:a1:fc:89:39:21:de:2c:18:77:b7:49:ef:32:
8d:37:9f:23:23:90:d5:4b:ef:d7:29:79:63:ca:1a:15:fd:df:
a7:3d:a8:8f:ed:88:09:49:7c:f4:53:9f:f4:24:37:1d:30:ff:
fb:e3:90:1f:19:a9:d0:13:3a:05:d3:f4:25:4a:48:2c:9a:88:
f0:9b:57:8f:d4:f6:12:f5:3d:e9:53:90:4c:3d:f7:8c:da:98:
33:b9:cc:1d:bc:37:7c:5b:49:c2:22:44:24:9e:58:10:6f:3d:
13:3b:a8:e3:9c:0d:49:af:44:d7:a9:c7:80:5d:3e:ba:53:2b:
d9:c4:3b:96:29:c3:6c:37:5b:36:55:be:81:c7:e9:3f:ce:af:
4d:a6:30:86:48:b9:fd:47:57:95:2f:56:59:9a:42:fc:0c:81:
2d:31:e7:41:82:ea:5e:84:16:f3:b9:74:9f:d1:a3:b9:18:03:
58:3b:fd:16:f1:67:17:27:90:95:38:20:b1:07:7b:05:23:3e:
07:de:20:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6uEQxqVMohfDDGlDy11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Q4MGJiZDY3NGJlMDRjMzg1NThkMmY2ZGZkMmEwYjc1M2Q2M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jjSuNRTBsvu7MyWjJEqMbpcwPYY
vRhzLwcNYummW9raMKsJdgE2lzlOG8qlsXvsUPXXVrjN8dwWKLkYxh6R3YwcZtTP
W91W6s8E7nFG/P/oFvHFxTAf3TmwFQtH4D/mLwZYxaiYYvsKnFzTGu2YCIUsvNHe
sfb1vi/4WYUsh9NfBzKtzOiZ2ybKx7ikkaOnJFUykQJKTG30iV1O09ou8AO4pFy9
89YP46CArO0+Nbz/iF8zJlHyoUgQJeaGpNH4X5f/GWfaIO1NftfemqLtfmNAQ7Gz
+zMDn6EiNShoZ2DpXFX3fwJ62b8LhOGW7YPcrDdIimnYuAIkeo1X8yAfywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfYC71nS+BMOFWNL239Kgt1PWPCMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvTjlnTHZXZEw0RXc0VlkwdmJmMHFDM1U5WThJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubEZMA0G
CSqGSIb3DQEBCwUAA4IBAQCjr+ZTB21nZa8gFSCyHYJsnl/zFWFU18BCLWSSGQLv
2jhtyWHyUpgH7iL+HEnNte8UYsf79cWKqGyGmKH8iTkh3iwYd7dJ7zKNN58jI5DV
S+/XKXljyhoV/d+nPaiP7YgJSXz0U5/0JDcdMP/745AfGanQEzoF0/QlSkgsmojw
m1eP1PYS9T3pU5BMPfeM2pgzucwdvDd8W0nCIkQknlgQbz0TO6jjnA1Jr0TXqceA
XT66UyvZxDuWKcNsN1s2Vb6Bx+k/zq9NpjCGSLn9R1eVL1ZZmkL8DIEtMedBgupe
hBbzuXSf0aO5GANYO/0W8WcXJ5CVOCCxB3sFIz4H3iD3
-----END CERTIFICATE-----
Generated at Fri May 9 09:56:12 2025 by rpki-client