Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1vVRQHdXkIXBHfo0qhoHppx77DU.roa
File: 1vVRQHdXkIXBHfo0qhoHppx77DU.roa (raw, json)
Hash identifier: cm+iyEp227tHWE3KsZsxqgzIc5VF/7+/NsYZAZfG+aw=
Subject key identifier: D6:F5:51:40:77:57:90:85:C1:1D:FA:34:AA:1A:07:A6:9C:7B:EC:35
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019427B63817F3FAA9F0C8D101968357F081
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1vVRQHdXkIXBHfo0qhoHppx77DU.roa
Signing time: Thu 02 Jan 2025 15:50:40 +0000
ROA not before: Thu 02 Jan 2025 15:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47516
IP address blocks: 185.23.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:38:17:f3:fa:a9:f0:c8:d1:01:96:83:57:f0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jan 2 15:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f5514077579085c11dfa34aa1a07a69c7bec35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:c0:bb:3a:74:f3:93:4f:8b:e2:86:de:e2:
61:13:e3:b7:af:70:c6:34:af:31:96:2c:ed:15:09:
21:96:a6:8f:c5:09:08:77:95:9c:44:5d:1d:a9:0a:
6a:34:0a:69:4d:65:7a:d1:0d:7c:8a:c8:c6:d1:89:
44:1d:a6:67:ff:02:d2:57:7b:24:92:e4:f0:6d:4c:
85:2b:26:e1:57:8a:bf:2c:cf:26:3a:ab:11:e8:e1:
39:51:09:40:67:c3:10:ab:15:d5:d0:6f:58:06:62:
95:9f:2a:e9:0e:2c:59:98:f8:1d:8c:df:eb:5b:b6:
e2:ec:32:29:1a:fb:67:15:61:e1:3b:66:42:64:7a:
c8:25:67:9b:f2:a3:fe:63:d9:d0:6c:1b:9d:3a:41:
dd:d3:40:4c:5b:e7:96:cf:df:27:9d:37:b4:3a:62:
53:46:b1:3a:6a:82:5b:fc:e6:b7:ad:5d:b9:2d:3a:
95:7a:3d:c1:46:ee:d5:ac:e0:6e:ea:5c:ac:d2:eb:
3a:94:3d:30:82:5f:65:01:00:97:1f:95:99:5f:c9:
e3:1a:05:53:9e:05:72:98:63:29:6d:cc:d2:c5:d2:
cd:cd:2b:94:ec:96:8c:99:a1:e8:e7:92:b2:bc:58:
29:82:9a:6e:2c:bf:89:e1:ec:70:64:bd:de:63:e3:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F5:51:40:77:57:90:85:C1:1D:FA:34:AA:1A:07:A6:9C:7B:EC:35
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1vVRQHdXkIXBHfo0qhoHppx77DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.239.0/24
Signature Algorithm: sha256WithRSAEncryption
83:62:25:5f:43:da:ef:2f:34:24:2a:ad:aa:be:7f:16:16:c5:
21:c2:79:87:02:60:bd:fa:35:76:22:b5:dc:2e:5b:33:4d:ed:
3e:9e:4d:02:ea:b7:f1:47:1e:8f:29:bc:f4:0e:60:a4:6a:66:
ec:b6:e9:40:7b:17:6f:e8:e3:dc:70:53:b7:6d:ca:c8:91:a7:
50:97:d1:06:73:cd:a7:12:39:72:70:de:63:09:9a:0e:7b:42:
7d:ab:d6:c2:c1:22:94:61:39:e5:da:41:c7:d3:2c:ab:2f:34:
c3:9c:5c:21:51:cb:5f:df:a4:8e:85:35:bf:e0:0d:cc:63:10:
9c:6c:70:e6:49:ce:40:fc:92:94:11:85:10:04:0a:93:d8:4d:
04:1a:dc:8d:19:2a:37:e6:ec:0e:03:a4:56:b6:9d:df:05:b3:
55:c2:65:d8:ca:c5:58:ff:1c:ec:e5:e4:f0:e7:cd:ac:e0:47:
06:06:3e:99:db:05:86:39:a6:2d:6e:2d:7b:1a:de:af:c7:13:
2d:40:bd:8d:2d:9e:9e:55:ed:83:37:4e:af:d3:34:b6:cc:bb:
93:0d:77:7e:e2:fb:a2:20:99:bb:10:b0:fe:48:73:9a:e3:c0:
95:eb:71:eb:cc:97:27:cf:31:b7:23:a5:94:ff:55:6f:80:c9:
62:2b:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:25 2025 by rpki-client