Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/r24bse_L4kY_MIGYIsXFnBpXBhM.roa
File: r24bse_L4kY_MIGYIsXFnBpXBhM.roa (raw, json)
Hash identifier: 9NX6gBMNVMar3wVhlUY4teM7U08gktRboOUltFiq9DY=
Subject key identifier: AF:6E:1B:B1:EF:CB:E2:46:3F:30:81:98:22:C5:C5:9C:1A:57:06:13
Certificate issuer: /CN=53b42f7f210254ea472ac755a16472c52efc2a92
Certificate serial: 019420D6518E8E24DF44D4472AE8C98BB06C
Authority key identifier: 53:B4:2F:7F:21:02:54:EA:47:2A:C7:55:A1:64:72:C5:2E:FC:2A:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/r24bse_L4kY_MIGYIsXFnBpXBhM.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20668
IP address blocks: 185.94.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:51:8e:8e:24:df:44:d4:47:2a:e8:c9:8b:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b42f7f210254ea472ac755a16472c52efc2a92
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af6e1bb1efcbe2463f30819822c5c59c1a570613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:5a:80:6e:23:2f:9a:df:60:e3:8c:46:42:
10:e9:f1:02:91:4a:25:de:a8:fc:23:2f:14:08:ce:
f1:e9:f5:99:5c:fd:33:65:d5:a8:86:23:21:24:dc:
5a:9e:d9:5d:78:9c:c1:36:35:ad:65:71:d3:6a:89:
b7:e5:52:ab:82:25:22:12:ef:25:fa:63:33:e2:97:
68:05:01:57:e5:8c:73:7d:5e:5d:a7:ac:1f:08:8f:
9b:91:53:fc:98:7d:29:0d:33:3b:84:a8:f4:d3:3e:
4b:64:2c:e2:d0:a5:9d:bd:70:5f:82:be:6f:38:5a:
47:25:8a:94:2d:4e:d2:76:57:ad:c8:eb:42:6e:89:
e0:7e:0c:1e:77:5f:53:a2:75:af:be:12:2b:59:37:
b9:74:73:50:ba:d5:ac:97:62:e1:1b:e8:07:da:d4:
3e:8d:c1:a3:37:2f:39:2b:45:a1:94:43:b8:7b:13:
28:8d:0a:5f:12:3c:d9:31:21:39:34:50:9f:cb:c2:
02:c1:17:6e:32:1d:55:23:9a:87:3e:18:4d:8b:39:
35:a6:ea:49:79:2e:d9:98:24:40:da:91:26:40:60:
6e:48:a8:a3:c8:6f:2b:4d:77:39:27:e6:45:8b:24:
d7:c8:32:9d:68:46:3e:9e:5f:16:b5:05:6b:0f:8b:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6E:1B:B1:EF:CB:E2:46:3F:30:81:98:22:C5:C5:9C:1A:57:06:13
X509v3 Authority Key Identifier:
keyid:53:B4:2F:7F:21:02:54:EA:47:2A:C7:55:A1:64:72:C5:2E:FC:2A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/r24bse_L4kY_MIGYIsXFnBpXBhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.30.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:75:ea:0b:52:75:76:26:8b:ea:f5:f6:7b:2f:80:01:5e:5e:
ca:21:0e:2e:97:60:f4:db:4d:d2:a7:45:74:6e:86:4b:1a:61:
e1:05:cb:d6:8e:c0:92:09:c3:fa:b5:95:69:04:3b:41:0e:b0:
e5:e3:f4:c9:89:ef:71:3b:7b:6f:c5:d4:6d:fb:89:ea:e9:e7:
7e:99:34:db:de:2f:ac:ee:8a:6e:0c:0c:d7:5f:6d:39:03:bb:
3f:17:e8:f2:10:2f:75:3f:68:db:0a:a5:2a:44:79:48:e9:41:
5d:1e:d5:96:13:be:d0:fa:d5:89:67:95:71:cd:69:c3:9e:95:
b8:da:64:93:36:78:ec:ae:d0:e5:d3:ee:f6:09:61:2f:cc:0c:
fc:b1:96:56:a5:e9:61:7e:58:fe:ec:f3:f1:d5:fb:0f:f1:cc:
83:b9:f9:3d:87:41:20:38:20:06:1a:2d:69:43:e6:9d:a1:09:
de:a3:4e:00:cd:3c:0e:2e:ec:96:9f:d0:bf:bf:84:79:fb:0a:
c3:5b:61:62:65:7e:76:dc:2a:4f:23:47:fb:db:9e:9b:e7:41:
36:4a:01:e3:ff:ef:8e:c2:2a:f4:ac:5e:11:a1:ac:3a:61:3b:
2a:86:c2:72:a2:6e:49:de:b2:4a:77:18:05:b6:eb:6d:7e:cc:
b0:cc:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:51 2025 by rpki-client