Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa
File: rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa (raw, json)
Hash identifier: M8dZkYCwYNG6gph8xMmvBysHbD2sO8kxwfhDf7bdOCA=
Subject key identifier: AD:42:B3:90:25:9E:51:9B:87:64:5F:51:4E:27:7F:2E:D9:F7:36:03
Certificate issuer: /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial: 01942368C41974302BFCA42A47A04416DBF4
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa
Signing time: Wed 01 Jan 2025 19:47:35 +0000
ROA not before: Wed 01 Jan 2025 19:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205743
IP address blocks: 185.208.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c4:19:74:30:2b:fc:a4:2a:47:a0:44:16:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
Validity
Not Before: Jan 1 19:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad42b390259e519b87645f514e277f2ed9f73603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:ba:41:67:3f:c2:15:6a:4b:60:d0:31:69:
4a:d3:fb:dc:53:86:c7:da:83:36:bb:de:1d:79:6d:
4b:aa:34:84:59:5a:d4:ca:90:07:7e:53:f1:e8:83:
ad:a8:a2:6d:eb:ac:df:1c:20:a8:74:92:32:77:7a:
b7:66:c4:70:4e:1c:25:cd:68:1b:35:52:aa:60:44:
ee:17:68:6b:3d:56:b3:ba:60:b0:8e:c3:67:b9:1c:
db:e2:de:68:4c:39:6f:de:00:bf:31:35:b8:f8:47:
ac:04:8e:07:a1:3f:9f:28:26:fc:8a:fa:aa:24:d8:
33:b7:e4:f3:0e:a8:b1:31:46:aa:c8:ed:74:17:04:
12:81:9e:0b:70:8f:f2:ca:23:0d:b5:64:a8:df:97:
de:ba:d2:46:96:3f:61:30:5c:82:3a:a9:3b:1c:e1:
eb:85:9b:fe:52:cb:09:b5:68:53:f5:70:db:e8:37:
c8:87:2c:5f:b7:11:26:75:e4:c9:5b:ca:86:50:c2:
e2:7b:ce:48:b9:80:55:61:16:9f:19:40:81:37:09:
ed:af:53:d1:26:54:7a:e9:76:5d:23:73:42:d6:1a:
9c:9d:5f:51:24:eb:09:a0:de:a6:33:53:c3:b2:25:
0e:3b:c0:d5:7f:69:a4:df:3e:e3:02:9f:e0:24:15:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:B3:90:25:9E:51:9B:87:64:5F:51:4E:27:7F:2E:D9:F7:36:03
X509v3 Authority Key Identifier:
keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.4.0/22
Signature Algorithm: sha256WithRSAEncryption
25:89:8c:e5:3b:47:9b:79:91:ae:2c:8d:c6:c2:a8:6f:7b:38:
58:35:b0:10:2a:cc:20:de:13:f3:82:42:ba:2c:3b:33:11:0b:
20:ae:e8:a1:f5:7b:18:88:dc:74:27:55:1b:c6:88:12:7f:b1:
f2:40:57:d7:46:35:fe:73:30:4e:4e:8f:1e:ad:bd:7a:5d:77:
eb:24:0b:12:63:d0:ae:b6:6d:28:8c:11:56:f7:9d:ac:64:02:
ad:fd:43:d3:9c:b2:91:58:1e:a5:d1:86:3f:45:d9:fd:68:1b:
04:16:d3:69:f8:dd:f6:fa:49:53:4d:98:d5:d9:c0:ca:f2:9b:
ee:6e:9f:72:61:24:b0:31:63:7e:c5:b5:b9:3b:3d:d1:8b:e2:
6b:1f:ce:80:03:92:52:0b:1c:ec:3c:0c:ad:00:4e:1d:b9:22:
34:7b:65:8a:c8:79:f3:69:01:e9:6b:63:7b:18:66:a6:df:ae:
4d:95:4c:2e:12:4a:8c:e8:3c:cc:a8:f6:d4:1f:0c:cd:42:41:
0a:77:08:1e:35:dd:19:f8:00:cc:2c:43:4a:08:ef:6e:c8:27:
c2:5e:4a:bd:10:d1:58:f1:d6:5e:69:76:bf:6b:d5:9b:5c:8d:
4b:48:ca:e1:20:27:3a:18:5b:b0:76:69:ec:2a:b5:4d:07:b5:
87:01:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:11 2025 by rpki-client