Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa
File: kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa (raw, json)
Hash identifier: Ige6JVtN5a8l5mz2oj2KpBc2hcWUaNAOe9GreksnHjk=
Subject key identifier: 90:66:DA:2B:C9:22:2F:C8:43:EE:92:1B:89:09:11:97:FF:01:FD:83
Certificate issuer: /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Certificate serial: 01942369666D0909DA481423A63939010F01
Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa
Signing time: Wed 01 Jan 2025 19:48:17 +0000
ROA not before: Wed 01 Jan 2025 19:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34372
IP address blocks: 185.192.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:66:6d:09:09:da:48:14:23:a6:39:39:01:0f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Validity
Not Before: Jan 1 19:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9066da2bc9222fc843ee921b89091197ff01fd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:b3:7d:36:40:0d:75:0d:86:69:c1:cd:a2:
a4:7d:11:3f:d7:61:a2:44:11:03:09:64:8d:4f:72:
c5:fc:61:a1:5d:5e:86:30:6b:14:be:7d:03:f8:f8:
4d:96:3e:45:2d:f4:5d:51:44:fa:ca:f5:75:4d:a8:
dd:90:4a:09:f1:0b:3a:83:77:b2:00:29:f7:75:85:
6c:1e:bf:37:54:f1:bf:60:0a:01:22:ba:f5:9e:64:
ef:70:6e:8a:5d:5c:42:81:5a:ac:8c:e4:fb:8b:63:
7e:38:29:a8:02:30:4e:e0:03:c7:47:f9:3b:61:17:
51:ed:2f:9a:6f:59:07:d6:a2:fc:68:54:b9:5e:90:
8b:60:9b:38:bd:bb:71:97:93:15:99:88:46:17:19:
ac:03:d3:0e:46:84:14:27:0f:10:5c:ec:12:79:8f:
33:3d:d5:0f:c4:d8:f2:88:c9:17:a0:ec:65:c9:bf:
a2:a8:59:39:e6:ae:99:13:a5:ed:db:92:11:10:77:
77:1d:2c:f5:4c:46:d9:15:77:71:7a:71:f1:7c:29:
3d:27:f0:e6:f4:16:15:d2:88:40:69:b1:8e:72:c8:
1e:06:44:4c:2a:db:d8:3d:20:15:7e:c3:66:d8:3f:
cf:8d:5a:d9:dc:db:4e:4a:35:4b:71:3e:97:c2:ea:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:DA:2B:C9:22:2F:C8:43:EE:92:1B:89:09:11:97:FF:01:FD:83
X509v3 Authority Key Identifier:
keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ba:91:9f:a4:0f:42:95:8b:e1:38:bd:ea:67:04:6a:d0:9d:
9f:b9:fa:56:42:d5:a9:cb:0f:f9:e6:cd:6a:36:77:49:be:c9:
16:54:0b:3b:fa:d1:37:a0:a4:2c:84:fa:ff:d8:f6:83:8c:11:
f2:05:b1:a0:f9:9f:5a:f9:ca:fc:51:06:82:09:73:7f:1a:8e:
aa:bc:11:c1:a2:59:63:2c:7c:51:80:92:6d:dd:0d:3b:1e:32:
ee:a9:74:c5:8f:2c:b8:93:47:b9:b0:3f:68:87:e4:c8:81:8a:
38:4a:aa:3f:65:8d:a0:03:59:21:dd:11:9b:2c:96:1e:f3:0e:
e9:1f:00:7c:52:40:42:25:14:3b:76:7c:e5:3d:74:e8:51:35:
26:60:89:87:30:5f:be:28:96:d0:8e:25:79:a8:0e:0f:2c:4d:
60:39:80:8d:e8:6d:a2:77:51:08:2c:c5:d2:2d:f3:c0:69:37:
f1:e4:67:a2:12:bb:91:da:18:a1:00:51:bc:06:ff:7c:46:12:
e1:c4:65:f8:a6:99:14:71:be:d7:76:30:3e:09:e1:1d:ea:b1:
bf:fc:5e:19:42:b1:2e:2d:e7:a7:9a:cd:c6:e0:38:80:0a:68:
a4:45:62:de:b3:62:2d:93:54:5e:97:8f:c7:aa:53:cd:91:4e:
3a:3a:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:07 2025 by rpki-client