Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xI5QJHfn67ze20EV1_Uvsi4iyDg.roa
File: xI5QJHfn67ze20EV1_Uvsi4iyDg.roa (raw, json)
Hash identifier: 91WpwIDX5raR9KX+KeyAloGN4a2+AkKNNViky5tMMBo=
Subject key identifier: C4:8E:50:24:77:E7:EB:BC:DE:DB:41:15:D7:F5:2F:B2:2E:22:C8:38
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 019470AF07FD632C40230D2E77C4C8551FDA
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xI5QJHfn67ze20EV1_Uvsi4iyDg.roa
Signing time: Thu 16 Jan 2025 19:55:06 +0000
ROA not before: Thu 16 Jan 2025 19:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.177.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:af:07:fd:63:2c:40:23:0d:2e:77:c4:c8:55:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 16 19:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c48e502477e7ebbcdedb4115d7f52fb22e22c838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:4b:ee:25:75:29:e9:bc:e2:80:b2:d6:fb:
3f:70:c0:64:5c:f8:54:28:83:d7:a8:bb:5d:ae:c4:
90:81:af:ce:37:a0:eb:f2:08:1e:f7:5b:62:68:ca:
bf:4c:24:b0:62:18:c2:00:5a:b0:4c:4c:d6:ca:cf:
bb:1a:c7:0c:ce:ad:2e:ef:c7:80:38:fa:cd:5f:32:
04:b3:a0:59:ef:97:3f:ca:fb:d2:4d:d7:ae:6f:ab:
fa:20:51:6c:c2:d5:10:19:9b:16:ae:55:dd:88:1d:
f5:b2:69:48:1c:6a:cf:b4:21:13:eb:29:fd:55:b8:
4f:ee:53:27:b9:ea:58:9c:22:41:f7:49:90:5c:d1:
7a:9c:d2:f8:84:73:55:2f:89:10:f3:d7:1a:40:b7:
42:61:d2:1a:0d:7c:79:0e:31:d2:18:bf:35:e0:fd:
74:bd:82:db:2f:f0:66:23:e2:ec:5f:b9:85:89:a6:
ae:c9:37:f4:fc:d1:7f:28:24:28:19:e3:42:a8:58:
57:91:a5:85:bd:72:1c:3e:39:80:5f:8f:28:71:2f:
5c:34:f6:64:fb:ff:74:28:23:c3:86:f1:9e:54:96:
4d:63:4f:6e:9b:c0:b3:96:03:e6:e9:94:b7:2c:b0:
5d:67:f7:31:1f:21:e9:17:c9:e1:73:a1:ae:10:39:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:50:24:77:E7:EB:BC:DE:DB:41:15:D7:F5:2F:B2:2E:22:C8:38
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xI5QJHfn67ze20EV1_Uvsi4iyDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
72:01:21:91:20:8b:9b:55:ea:21:a8:f4:78:05:cf:d3:8f:a4:
cc:a4:2f:86:da:19:a0:1a:7d:55:70:d6:7a:98:3f:0b:af:c9:
76:29:7e:5d:37:17:f6:50:fe:c9:62:13:22:0e:d6:bc:11:f5:
36:7e:a8:e0:dc:e5:7b:df:74:4c:b7:02:06:10:36:05:e1:37:
db:7c:3d:f2:d5:54:ee:52:48:43:8a:2a:7a:f1:31:37:d5:c8:
bd:2b:62:bc:ce:ba:b2:20:ba:5f:7e:37:3c:bd:3b:99:1d:e3:
22:5a:45:7b:01:f7:d6:7f:ca:13:33:94:52:0d:38:0c:ab:85:
01:8c:e9:05:19:b1:c5:77:e0:8c:ea:01:51:05:0d:9c:7d:96:
3d:79:25:cf:91:36:2d:3b:d8:ba:c6:f0:07:9e:9e:28:20:2f:
27:8e:5e:54:39:28:5e:d8:63:0f:b6:31:49:30:f9:31:27:17:
d6:40:f8:29:ba:4f:a6:5a:6d:5f:eb:fe:61:1d:40:ec:0c:18:
ed:97:0e:b2:87:0f:0f:a2:c8:75:ab:4a:90:5f:77:a1:07:17:
e5:4c:d6:77:ab:5e:77:40:51:20:3a:9d:05:0f:66:85:d1:f7:
7e:dc:a5:92:9a:30:a7:c0:06:92:4a:83:74:7f:24:c7:8c:28:
a5:89:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:26:25 2025 by rpki-client