Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa
File: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (raw, json)
Hash identifier: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=
Subject key identifier: 24:AE:03:AE:35:6A:25:91:C4:3A:CC:4D:B3:70:2F:09:9F:3A:2F:05
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 0194258F624063013DD8982B1E8650B6BE3C
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42065
IP address blocks: 185.26.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:62:40:63:01:3d:d8:98:2b:1e:86:50:b6:be:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24ae03ae356a2591c43acc4db3702f099f3a2f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:9a:b2:a6:bb:4c:32:2c:98:5a:28:54:35:
64:87:62:68:7b:ca:11:6a:e4:06:d3:69:ab:19:e4:
9b:69:d5:81:89:59:14:3b:e3:f8:dd:8c:e6:7a:3b:
76:13:d5:d1:4a:8e:11:19:da:d6:eb:8f:c2:f0:73:
23:50:00:49:9e:8b:5a:a8:f0:fc:e0:6f:69:cd:58:
5d:dc:93:52:b7:b1:18:2a:6a:c8:77:9c:96:b9:4b:
b9:b2:b3:1f:30:0f:66:2b:97:6f:71:07:2e:ff:19:
dc:b6:54:f6:1e:bc:7b:ca:cb:6e:e1:00:87:d3:38:
3a:09:62:1e:6c:f1:9b:5d:f3:4e:40:0b:33:7a:0c:
5f:4c:d2:ee:2e:24:9e:f5:06:0c:b9:a9:d9:0c:80:
ff:1b:33:e4:cc:c1:da:05:c1:07:f3:f4:29:59:9b:
04:16:e1:c0:ae:e6:35:e8:8d:36:d1:76:ca:ab:89:
e8:bd:b1:d5:e7:29:c7:03:5b:9e:b4:f0:b0:27:12:
a9:d3:1d:15:e7:78:5c:c4:02:9f:d0:9e:b1:14:e2:
27:cb:cd:39:f1:74:d3:1a:2b:fd:54:e3:53:7b:c4:
dd:88:7f:58:31:19:ab:bb:9d:be:ff:ab:18:46:e2:
fc:fd:e6:87:85:74:23:77:c0:65:75:5f:a7:e3:d5:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:03:AE:35:6A:25:91:C4:3A:CC:4D:B3:70:2F:09:9F:3A:2F:05
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.74.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bd:22:4d:c4:7e:1a:7c:d8:1e:44:3f:e2:c9:54:83:3a:6f:
b1:60:2e:e4:eb:53:e4:8c:3f:c1:d0:e0:68:6f:ad:8f:09:05:
4d:7f:88:5e:00:a6:e5:5d:a0:e5:8f:b0:3a:a5:66:50:82:ce:
8b:b0:7d:02:17:d5:f5:ef:26:1a:64:17:82:e7:f9:06:d2:6b:
7e:0f:b9:66:2e:2d:ba:a9:9b:85:90:f3:ec:54:51:d9:e1:43:
12:01:87:e8:8e:40:ee:d4:85:c0:ea:8b:aa:d4:42:56:0d:f9:
2e:22:2d:e7:43:50:e8:93:2f:29:92:40:a6:2b:be:ed:c5:09:
d8:01:6b:4a:83:f7:c1:07:a3:19:9a:a4:c4:18:bd:ef:27:90:
ba:3b:29:c6:e3:27:fe:1c:60:ab:f9:3f:f7:f7:6b:78:b3:db:
21:dc:03:43:6f:d7:36:ac:6d:fe:ad:f5:95:5a:36:72:34:65:
f5:35:98:a7:e7:9e:a8:39:ec:9e:5c:3b:6d:b9:6a:00:d8:4f:
c5:7d:43:19:90:66:b0:02:08:be:55:9b:9e:b0:65:c0:6c:f0:
71:78:67:00:54:15:d1:55:e0:32:4f:ec:61:cc:3e:fe:d3:64:
8b:42:7a:22:0f:78:eb:c5:85:ee:c8:f3:fe:99:fc:dd:01:a1:
5b:2b:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:00 2025 by rpki-client