Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/1YxjtUV0VxQ7FeeJoaX779GpS0I.roa
File: 1YxjtUV0VxQ7FeeJoaX779GpS0I.roa (raw, json)
Hash identifier: m2jgH3Z5mBIhIUEsf+e/YJdKvhtB8ZzBEJ1TlZLrc88=
Subject key identifier: D5:8C:63:B5:45:74:57:14:3B:15:E7:89:A1:A5:FB:EF:D1:A9:4B:42
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 019423697B4559C61A087891521A4F51A38C
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/1YxjtUV0VxQ7FeeJoaX779GpS0I.roa
Signing time: Wed 01 Jan 2025 19:48:22 +0000
ROA not before: Wed 01 Jan 2025 19:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7b:45:59:c6:1a:08:78:91:52:1a:4f:51:a3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Jan 1 19:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d58c63b5457457143b15e789a1a5fbefd1a94b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:d8:2e:a6:34:8a:f6:c8:0d:ba:20:d6:94:
a1:bb:2c:fe:69:c2:fa:a2:30:a2:4c:59:8b:a5:53:
40:23:c3:d4:a8:10:5c:52:19:50:b0:5a:3d:65:ba:
65:3f:4c:e2:a2:87:08:cc:73:1f:c9:48:d5:0a:50:
6c:24:fe:be:85:28:79:37:38:c6:23:3f:f6:46:7f:
9d:06:83:ed:61:01:f6:56:67:8e:b1:89:bf:f5:b9:
e6:c8:e5:2d:fd:b2:aa:e8:b8:39:26:b9:c4:95:80:
04:8e:b5:0f:53:28:d4:4b:8f:7d:71:b7:58:c5:1a:
d7:7b:24:55:a8:07:71:34:45:36:f8:1a:b4:c9:77:
6e:18:0a:8b:33:f1:15:c8:2d:57:72:1e:82:06:e2:
10:5a:4b:77:64:18:d8:60:f7:20:f8:23:52:bc:e4:
6c:5a:37:b3:20:a4:2d:d0:a3:7e:0e:1c:59:6c:fe:
9d:22:98:9c:09:7d:58:96:f6:a5:cd:28:6f:b0:8f:
99:9f:6e:46:0e:2a:a0:16:99:68:5c:b8:d4:9b:c4:
f3:75:4f:78:6f:1f:5e:dd:6c:2b:4c:a0:de:51:c2:
2d:99:da:e5:46:18:1b:59:1a:75:08:a3:43:2c:88:
04:f3:a4:cf:32:4b:27:72:d9:8c:49:0a:5e:a8:47:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8C:63:B5:45:74:57:14:3B:15:E7:89:A1:A5:FB:EF:D1:A9:4B:42
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/1YxjtUV0VxQ7FeeJoaX779GpS0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
90:33:6a:0f:5a:93:55:4c:75:ab:50:39:f9:34:b8:3e:58:aa:
23:46:d9:ea:9f:91:e3:10:67:dc:7b:cf:a3:df:9f:c4:b2:7c:
89:08:3d:79:58:42:a2:61:b5:f1:78:cd:cb:a5:56:f2:b2:aa:
8b:c3:59:01:a9:69:ef:b4:96:52:15:03:c3:b8:19:d5:92:6c:
9c:3a:53:ae:54:74:50:4b:1b:b0:b1:90:be:4f:eb:d5:c7:35:
cc:7a:a2:da:12:32:ea:64:03:4d:29:14:3a:73:e9:9a:58:c0:
22:bb:fb:21:21:af:50:b1:9a:a7:f2:6c:60:08:43:8e:1f:fa:
dc:45:ad:7c:91:26:7f:d6:ce:99:8a:5b:3b:0b:ab:86:d5:96:
16:70:b9:c1:02:27:aa:4f:bd:25:df:38:0d:f1:cb:97:59:a3:
a2:37:d0:70:a9:b5:c6:b7:0f:c8:dd:37:49:41:75:03:fb:8f:
0e:82:de:f5:93:77:16:64:cf:69:62:e9:31:81:67:d4:22:bd:
57:6c:6e:50:90:74:03:63:60:8f:4c:21:3a:9f:53:5c:de:91:
ce:7b:ab:72:ca:bb:65:8f:cb:9d:bf:ae:04:b5:2c:8f:3a:47:
37:25:a6:6f:f2:a9:0e:71:ad:1b:5b:74:0a:3e:90:1a:50:4a:
9e:a8:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:00 2025 by rpki-client