Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa
File: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (raw, json)
Hash identifier: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=
Subject key identifier: 20:A1:4A:09:6E:49:B2:E7:EA:A3:5C:3A:04:C2:68:DC:D5:4D:46:D5
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019426D945090D978D205051F2AAE20E70DE
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31549
IP address blocks: 185.166.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:45:09:0d:97:8d:20:50:51:f2:aa:e2:0e:70:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20a14a096e49b2e7eaa35c3a04c268dcd54d46d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:b3:4e:8e:4b:6b:9e:c3:41:75:fa:35:85:
76:d0:1e:6f:18:cf:8f:52:da:f3:61:21:fa:34:68:
96:54:b1:75:d6:3b:90:a5:78:ef:68:d8:b3:93:4b:
0d:9f:df:80:81:25:50:dd:60:d1:59:ad:53:61:a9:
48:8f:5a:49:91:0e:b0:68:d2:06:5a:ab:4c:48:e9:
59:19:ec:74:14:02:f1:8d:d2:4c:78:72:f6:12:37:
cf:a5:c9:71:b8:a1:84:79:89:a1:e3:42:68:3f:ef:
f3:84:b3:86:d0:57:64:3d:8d:1b:51:82:cf:ac:d4:
65:b2:94:b8:c0:b8:d7:b1:c4:63:12:78:e5:ce:06:
df:65:63:1d:68:e1:c0:f8:5a:e9:27:0a:52:57:b2:
d6:ae:ef:88:35:7a:d3:fc:4c:1e:c2:c2:7d:e7:a9:
15:8f:95:9a:da:1d:75:d3:89:2e:b4:fc:47:39:84:
33:88:c5:53:a3:67:9c:89:40:67:ff:a5:ac:06:75:
d9:6f:28:2f:01:1b:28:62:82:5b:e1:83:e8:81:76:
37:80:5e:cb:01:c6:9d:fc:a6:a0:35:da:db:b1:c6:
d9:06:35:9e:9b:45:78:c1:9b:0b:c2:17:ac:16:41:
d1:f1:36:b8:ee:c3:e8:61:86:fc:24:05:fb:d6:da:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:4A:09:6E:49:B2:E7:EA:A3:5C:3A:04:C2:68:DC:D5:4D:46:D5
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.113.0/24
Signature Algorithm: sha256WithRSAEncryption
01:04:14:10:14:ed:65:74:8b:ca:be:c0:dc:02:cc:17:44:bb:
f1:1e:57:68:6d:b7:09:52:e0:e9:f5:09:2e:d3:c9:85:59:40:
25:f2:07:a5:09:87:6d:26:93:8d:39:7d:a4:5b:7e:f3:f7:cb:
ad:55:be:89:a8:dc:c5:15:cc:8b:6f:c1:e2:e9:48:f0:05:1b:
42:15:ea:a3:87:7e:9a:dd:04:3e:c2:31:e4:d6:24:b5:a9:ff:
ea:d1:41:d9:43:a0:c0:cc:b4:54:ff:dc:63:7e:c6:20:ba:ca:
c5:65:25:10:53:5b:82:4a:54:a0:96:dd:a2:d5:81:97:42:61:
ad:1a:89:a7:0b:cb:82:e0:95:62:28:e1:21:cd:97:5f:17:04:
6c:3e:65:17:fa:e9:40:0a:e8:26:9d:0d:fc:6a:02:88:0c:2e:
f5:ba:0f:1a:f8:b8:a6:a2:9c:34:f7:c1:85:65:a6:43:1d:7b:
74:a1:74:72:9a:33:af:f1:fb:13:15:7f:da:a2:5c:be:38:2a:
7e:74:81:83:31:ac:4e:96:2f:80:ca:9a:1a:17:51:f6:1b:07:
a1:3e:39:9f:f4:24:d3:c5:8a:fd:a8:fc:3d:78:4c:1f:5f:7c:
d7:b7:0a:82:20:01:e1:e5:fa:2d:41:c0:39:a5:9b:d1:87:53:
94:74:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:16 2025 by rpki-client