Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/V2K-oZleXeUaxCNtSI8GJz8R-T8.roa
File: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (raw, json)
Hash identifier: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=
Subject key identifier: 57:62:BE:A1:99:5E:5D:E5:1A:C4:23:6D:48:8F:06:27:3F:11:F9:3F
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 019420D5A29DA8824DF5206B16ADF82C3ED2
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/V2K-oZleXeUaxCNtSI8GJz8R-T8.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200049
IP address blocks: 185.38.72.0/24 maxlen: 24
185.38.73.0/24 maxlen: 24
185.38.74.0/24 maxlen: 24
185.38.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a2:9d:a8:82:4d:f5:20:6b:16:ad:f8:2c:3e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5762bea1995e5de51ac4236d488f06273f11f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:69:38:d9:8d:f8:fe:56:39:74:2c:65:9a:
ab:f4:56:a0:ca:61:4a:2c:a8:cf:f2:a8:31:82:56:
be:5e:8a:40:89:8d:b7:37:bd:d0:bc:fd:f5:f2:ef:
65:3d:a0:cf:41:2b:fc:5e:c2:0b:fb:c4:4a:a4:ae:
69:ee:26:f9:f0:73:5d:0e:4d:e3:d2:6f:a8:85:a1:
74:da:b6:c3:3f:c9:8f:6e:68:03:e5:68:76:24:06:
40:43:2d:ae:d5:c4:b8:55:27:90:0e:c7:49:18:84:
54:75:c7:66:99:bc:ad:9d:44:36:e7:1c:e2:32:5f:
9e:77:d2:05:e5:a8:db:d8:37:ea:b8:56:fa:b3:7c:
fd:19:cb:3e:d9:60:d5:a7:fa:19:20:16:34:49:72:
62:75:86:d8:2b:f8:9a:95:5f:aa:a1:8f:a6:00:d4:
90:90:b8:61:bb:ee:d6:f8:d9:b2:fe:4e:bf:e5:2b:
3c:82:a6:76:59:ae:7b:d6:47:c4:37:9e:61:03:57:
f0:d9:61:8e:d6:1d:99:8b:ae:7f:f0:6b:5d:dc:0c:
1a:71:08:b7:46:60:2a:d5:24:09:91:9e:84:63:f0:
5e:11:b4:49:71:60:db:6e:0f:f7:8e:7f:da:75:b5:
1b:34:30:35:b7:3c:8d:a5:2c:56:c4:87:02:03:7e:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:62:BE:A1:99:5E:5D:E5:1A:C4:23:6D:48:8F:06:27:3F:11:F9:3F
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/V2K-oZleXeUaxCNtSI8GJz8R-T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:01:71:3c:da:09:bd:98:4f:b5:5e:f4:be:54:8e:58:fb:c0:
0d:59:29:02:6a:d7:88:f6:cf:5b:18:79:5d:b8:ae:aa:ca:cb:
ae:03:32:08:14:8b:f5:38:04:18:a0:9b:04:f6:88:6a:1d:69:
6e:06:cb:3d:07:46:4a:65:c0:11:13:f9:6d:b4:49:45:13:01:
66:e9:d8:fe:1e:4d:b7:f0:24:32:6e:8f:92:25:8d:36:a0:45:
58:d8:cc:c6:65:90:22:c7:e5:77:ca:6f:08:5b:e7:ce:43:0e:
18:91:de:5a:12:2f:42:98:3c:4e:1d:21:3d:f9:c3:55:0a:92:
ac:07:8d:36:dd:dd:0d:0d:dd:3a:b9:c7:73:4b:ad:f1:19:59:
bd:ad:70:5b:9a:a8:09:49:f9:39:e3:13:24:4a:65:86:01:3e:
16:e5:bb:da:88:ef:a7:57:91:17:c7:c2:cd:d0:ee:5a:e5:56:
4f:b5:8e:a6:6e:b3:5e:ff:17:66:78:e5:db:a2:ed:92:98:b0:
f3:9a:22:c8:c0:73:a3:65:7a:6b:0f:ec:ad:b8:9b:35:ab:cf:
89:f3:e7:4c:9a:83:d8:41:3d:2f:22:da:da:8f:89:15:0f:0e:
8c:a9:44:ae:9f:b9:60:c9:3d:88:23:39:56:21:ee:ff:98:a8:
ad:2c:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:09 2025 by rpki-client