Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/x5P0EDTdVktqZKkEboWB0PM5bas.roa
File: x5P0EDTdVktqZKkEboWB0PM5bas.roa (raw, json)
Hash identifier: r1ZTmgOlTkgzyPjFRQu4X4TsA76Y2Iw9iuXpWXvKbw0=
Subject key identifier: C7:93:F4:10:34:DD:56:4B:6A:64:A9:04:6E:85:81:D0:F3:39:6D:AB
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 019427B690A676A39BC814F5B9614F911AC5
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/x5P0EDTdVktqZKkEboWB0PM5bas.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49097
IP address blocks: 185.170.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:90:a6:76:a3:9b:c8:14:f5:b9:61:4f:91:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c793f41034dd564b6a64a9046e8581d0f3396dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:10:e2:6c:d2:a1:32:02:99:e8:41:0e:c1:05:
d7:1d:58:58:26:ea:b1:3f:9d:1c:17:ed:8d:0a:f0:
d4:44:9c:47:46:75:3b:2c:2f:b3:bc:e0:52:a1:fb:
b7:f2:af:e4:40:00:8a:dd:3c:5a:6b:33:d1:26:13:
d1:2e:c0:33:61:26:fd:50:8f:1a:dd:44:8b:18:d1:
d9:08:6e:06:96:a3:6d:ae:55:65:a6:a8:90:dc:82:
3f:3c:87:89:ca:8d:6c:b5:4f:a5:89:d6:67:8a:37:
d6:7e:7b:1a:ab:a6:e1:9a:35:28:8d:28:71:a5:a3:
c3:ab:d2:ea:6c:96:33:11:0b:61:70:2f:75:a8:3c:
76:cd:16:10:1c:f4:2b:f0:85:f5:19:e0:bb:27:e0:
d7:3d:ff:91:20:34:42:a6:6e:59:09:17:ac:4a:94:
5f:89:75:0f:42:9e:e1:79:a3:9d:0b:8a:bd:0a:2e:
32:15:80:03:43:b2:55:85:b6:dd:eb:59:3f:4c:8c:
4a:bd:64:db:26:07:ce:cd:f0:66:65:7d:32:1d:7b:
8f:25:c4:e3:c6:78:44:8a:c8:6e:5a:e3:66:e3:23:
19:f4:ce:d5:21:a0:ef:f7:ee:8e:5d:05:39:e7:64:
1f:f0:00:44:68:8f:0e:31:a3:b3:c7:3f:d3:9a:ca:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:93:F4:10:34:DD:56:4B:6A:64:A9:04:6E:85:81:D0:F3:39:6D:AB
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/x5P0EDTdVktqZKkEboWB0PM5bas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.24.0/22
Signature Algorithm: sha256WithRSAEncryption
55:ad:ac:d5:28:bc:6e:61:a1:a1:ce:f3:84:b3:fc:a5:47:17:
e6:ac:58:25:e1:85:9d:3a:da:ec:06:5d:75:44:a1:e7:f8:72:
71:d3:f3:8e:cf:f1:31:29:ff:d1:3f:10:22:e7:a7:80:2a:79:
06:51:2e:9e:a7:ac:c3:80:23:00:83:c4:81:ff:4a:7b:bb:f2:
60:73:03:58:a5:c8:14:12:e6:ad:06:6c:4a:4d:a4:5e:96:ff:
94:ff:8f:b5:03:42:a0:fe:eb:7a:fd:2f:8a:4f:60:6d:0a:ef:
e1:ce:4a:6d:4d:85:b5:8f:a7:06:39:6f:c5:b4:f0:f1:36:c2:
de:80:60:12:85:36:c6:cd:d4:08:b7:e6:d1:ce:9a:9b:ad:0c:
ea:d0:e0:a3:e2:b1:e2:f8:57:77:0d:db:ae:c2:80:89:15:33:
e4:fe:3c:35:74:02:f4:37:70:1f:be:d4:5b:f8:6d:cd:86:5d:
c7:bf:a2:61:5b:88:09:36:ba:b4:40:64:f2:d9:65:5e:8c:35:
91:62:90:da:32:cd:1b:07:2b:30:fc:46:81:9d:15:f5:ba:72:
8e:7a:9e:61:d9:43:77:39:36:67:97:1d:83:93:cf:13:13:75:
93:b3:d2:79:65:dd:52:de:64:62:f8:6d:c1:1e:0c:fd:e2:63:
e2:6b:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:31 2025 by rpki-client