Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/k3MkBKIkrmXV8hBuw2gGPp_sASw.roa
File: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (raw, json)
Hash identifier: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=
Subject key identifier: 93:73:24:04:A2:24:AE:65:D5:F2:10:6E:C3:68:06:3E:9F:EC:01:2C
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 01941F8C81A601B1AB60CAFB4E52A7FDBD9C
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/k3MkBKIkrmXV8hBuw2gGPp_sASw.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39479
IP address blocks: 185.142.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:81:a6:01:b1:ab:60:ca:fb:4e:52:a7:fd:bd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93732404a224ae65d5f2106ec368063e9fec012c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:9d:50:6a:41:63:9b:fe:3d:38:05:b5:e8:
50:ff:c7:40:02:bc:3c:a8:f4:12:06:1a:20:5e:ff:
fa:76:08:36:07:a6:a8:a5:d4:ef:b8:b8:24:ec:3d:
6a:c3:33:48:4d:20:76:ae:bb:1a:6b:0f:35:33:ee:
30:3c:41:07:99:c8:dd:18:6c:6f:4e:87:3a:71:6e:
ca:a0:08:10:77:90:ab:2b:ef:49:2f:40:90:93:26:
8f:ed:4f:f9:fd:89:6b:74:8f:89:c0:d4:80:a2:aa:
6b:66:8d:04:71:9a:d2:b1:31:85:bb:75:7a:39:e6:
78:37:2a:34:58:e5:0b:e5:12:98:e3:d6:a9:58:58:
1e:1d:c7:92:da:d9:1b:55:b1:5a:67:c2:23:29:e4:
06:93:9a:ca:38:4e:b0:29:ab:5f:08:ec:86:e9:f6:
36:24:df:48:19:75:bf:e1:a7:14:2a:24:16:e2:58:
95:79:a2:85:52:ce:e2:8c:05:e6:1e:b0:d2:ed:42:
54:7c:59:a4:a8:2d:8e:81:f9:9b:e9:3d:0d:fc:b1:
40:b2:35:8a:33:50:5d:54:dd:ce:ed:2e:1b:7c:53:
cb:0b:45:a5:ff:fa:17:67:cf:e3:c2:b5:5c:d8:40:
7f:a2:66:eb:8f:62:51:11:55:cc:72:70:57:67:8a:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:24:04:A2:24:AE:65:D5:F2:10:6E:C3:68:06:3E:9F:EC:01:2C
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/k3MkBKIkrmXV8hBuw2gGPp_sASw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dd:0e:ff:78:ac:c5:31:f4:da:33:25:f8:c7:3c:f5:55:b0:
52:c6:21:fa:dd:ae:ed:45:dd:a9:41:f7:bd:b9:d8:2a:ce:0a:
e3:b0:4a:98:8a:e4:c0:e1:0d:c4:01:10:f8:28:d8:5e:3a:05:
57:1d:ce:a4:ea:9e:96:91:86:c3:6d:30:39:67:7e:4d:a7:9e:
bd:11:b1:d7:78:d4:be:9e:5c:c8:a2:d1:9d:0a:74:50:1f:3e:
03:00:d0:4f:2d:3d:45:f0:65:88:5e:a5:53:35:20:eb:07:2b:
72:50:99:a0:1d:00:ee:90:a0:ac:2e:5d:ac:1b:2b:1e:25:97:
b3:48:b6:5b:73:e7:ae:5d:91:8f:83:62:d7:05:40:23:8e:7f:
76:3e:b2:88:20:74:b9:93:a1:39:6e:46:d2:e6:47:55:f3:af:
dc:ad:77:61:1e:a1:d2:94:a0:69:52:b5:b3:60:e8:33:f5:ad:
4c:87:20:4e:60:97:af:6c:15:1a:cf:c7:75:ab:a5:66:bf:79:
8f:3f:3a:74:5b:5e:e9:a3:01:e1:e0:d9:18:30:46:67:64:55:
72:3f:56:3e:5d:2a:3e:1a:3e:2e:3f:1d:73:7d:db:6a:af:c3:
f7:67:0c:57:f2:41:d6:c1:31:02:90:00:ba:63:fe:03:90:97:
7e:22:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:13 2025 by rpki-client