Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa
File: 0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa (raw, json)
Hash identifier: +84Jtnm8y8lyPSa7rwRGvIOVFxMyvRwy6vUQccu0gmY=
Subject key identifier: D1:79:40:BD:D7:0F:E2:1D:55:D2:14:6D:9E:B4:35:F4:52:EE:14:8F
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 019423D7A1B7BBEA1A890E9E9DA07C366EB7
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa
Signing time: Wed 01 Jan 2025 21:48:41 +0000
ROA not before: Wed 01 Jan 2025 21:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206022
IP address blocks: 185.48.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:a1:b7:bb:ea:1a:89:0e:9e:9d:a0:7c:36:6e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Jan 1 21:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d17940bdd70fe21d55d2146d9eb435f452ee148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:f4:cb:42:4c:f3:19:11:3a:1b:18:1e:1b:
da:34:07:18:0c:9d:46:c7:25:7e:39:00:f2:e0:74:
40:fe:f4:0e:0f:27:59:58:5f:25:bd:29:e2:a2:78:
b7:11:e0:b5:59:ad:13:0a:9e:a6:c1:84:a9:de:84:
6e:e5:cc:bc:2b:49:13:73:e8:73:32:97:65:e2:1c:
7e:81:e3:49:86:1a:60:c6:64:b6:c9:4c:2e:da:9c:
0b:7f:4e:95:20:23:e3:bc:c1:44:b1:2b:bc:5b:a6:
15:f4:7e:f8:99:81:42:c3:83:d1:f1:c0:fd:17:48:
b4:d8:c1:3d:c7:f2:38:3a:17:0a:23:91:2b:cf:18:
e2:50:1c:a3:72:88:54:01:c4:39:b6:35:c0:fd:07:
35:b1:0f:ef:81:e2:7e:be:f5:45:54:08:e8:54:32:
aa:70:c4:cb:05:e8:38:4a:f5:5b:8f:90:b0:aa:d9:
c9:2d:ef:8f:0c:3e:04:b8:de:79:ea:47:2a:de:8b:
31:ad:87:03:20:67:14:07:93:33:47:76:42:3e:53:
d2:e0:86:11:d1:07:01:bb:7f:60:49:9f:cc:09:8c:
4a:f3:bc:07:08:be:e5:98:57:97:3a:74:f0:7c:5b:
56:2c:50:e8:99:90:6a:81:48:95:3b:d5:57:0d:1a:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:40:BD:D7:0F:E2:1D:55:D2:14:6D:9E:B4:35:F4:52:EE:14:8F
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.140.0/24
Signature Algorithm: sha256WithRSAEncryption
af:71:ad:6a:5a:a1:d8:20:39:d7:e3:34:61:2d:f6:2d:97:5d:
a5:85:35:81:37:5c:e9:0c:1c:9d:26:20:6e:82:12:30:d7:77:
ed:0f:66:23:f2:c0:87:8e:04:b2:bb:5d:5e:97:fa:cf:d8:02:
fa:5f:5f:6a:23:cc:97:94:b2:3f:25:b9:ba:b0:2d:01:1b:34:
65:1d:e6:0b:c6:bb:85:7f:ad:5e:2e:44:d4:aa:44:fb:56:7d:
fe:2e:b8:27:eb:20:fb:80:95:ea:8f:44:79:71:c7:e4:cc:14:
85:ff:e2:ae:1f:15:93:ce:3a:80:d5:d3:62:ba:ae:d3:56:dc:
2c:75:2e:2c:ca:36:0f:21:e2:50:72:76:5c:06:b3:c1:f5:07:
c9:08:8e:0d:17:db:6a:1a:b0:cd:3d:81:ee:60:6e:2f:ff:ad:
4b:d1:ca:fc:d7:5c:d4:12:2e:d2:01:ad:62:11:7c:e0:a7:f4:
0b:60:92:d3:0b:9a:cc:51:70:32:10:b8:e2:92:5b:c5:19:22:
18:6b:65:19:24:22:d0:35:c7:f6:0b:73:7d:ac:4e:9c:85:dd:
70:2a:7c:5c:78:d5:e7:55:5b:e9:a4:40:2d:40:45:76:3c:c0:
97:70:39:bd:83:aa:0a:e3:2f:e6:5e:02:a4:d2:ca:f8:62:84:
5d:80:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:06 2025 by rpki-client