Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/9H_Kait-j-Qscd6pOWC4j8dpNJg.roa
File: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (raw, json)
Hash identifier: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=
Subject key identifier: F4:7F:CA:6A:2B:7E:8F:E4:2C:71:DE:A9:39:60:B8:8F:C7:69:34:98
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 0194236A1F17CD83845D4EE7503CD09408E0
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/9H_Kait-j-Qscd6pOWC4j8dpNJg.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24634
IP address blocks: 185.44.152.0/22 maxlen: 24
2a04:9cc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1f:17:cd:83:84:5d:4e:e7:50:3c:d0:94:08:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f47fca6a2b7e8fe42c71dea93960b88fc7693498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:0d:31:c4:b9:cd:c4:0f:52:5d:ce:7b:4e:
7f:17:63:4d:83:dd:e0:5e:54:d9:63:4e:47:0f:14:
c6:e5:cb:98:09:4e:e5:83:20:e4:a8:74:6e:45:57:
db:44:42:4b:43:ae:b2:ee:b9:bd:14:74:0b:cb:51:
b6:8a:1b:a7:46:77:0a:1a:30:57:a8:df:82:c8:2d:
fc:2e:f4:c7:dd:8c:b9:64:7d:bd:21:6a:65:27:ca:
6e:cb:f4:40:a3:fa:11:a4:c5:76:ab:12:58:cc:44:
a0:87:23:85:d6:eb:ee:e7:e8:8b:bb:a0:4d:06:4c:
a5:be:a4:07:bc:01:ad:5d:7e:4f:93:f9:d2:95:8d:
40:bb:3c:a1:91:ca:d2:5d:15:dd:db:46:9e:db:e3:
b1:85:75:44:2b:69:e8:71:28:ec:7f:01:28:0e:b4:
3a:c8:78:0a:4c:fe:c5:a6:41:09:20:3d:81:88:e1:
ce:13:e4:1d:60:ad:88:cd:68:b0:36:c0:9b:db:7f:
5e:2b:0a:b4:c0:15:74:11:a6:b8:7f:fa:f7:3d:9a:
3e:b3:ae:f3:21:c0:f0:7e:6c:78:65:59:27:b7:7c:
90:3c:e8:67:3a:cc:76:2c:17:c7:ea:25:fd:1b:ee:
fc:23:52:30:c6:bc:31:5b:08:c5:21:42:d8:f7:ff:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:CA:6A:2B:7E:8F:E4:2C:71:DE:A9:39:60:B8:8F:C7:69:34:98
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/9H_Kait-j-Qscd6pOWC4j8dpNJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.152.0/22
IPv6:
2a04:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:6f:a7:d8:1c:5a:dd:6d:94:79:23:ef:79:40:f2:18:5c:d7:
b4:3b:e3:65:11:cd:36:a8:00:38:03:89:b1:8c:b0:31:36:f0:
af:74:72:dc:b0:16:53:03:1c:1f:94:b4:20:de:2e:ac:36:96:
ee:8d:b7:c3:06:44:fb:d6:3e:61:4b:e3:d6:2b:61:57:b7:7a:
4d:35:87:5b:a9:3f:ed:26:fa:f0:12:00:93:cc:f4:31:35:2e:
0d:97:6e:ea:82:06:44:7c:af:fc:18:eb:4d:cb:87:d3:b1:e0:
54:5f:6c:f4:1c:95:e0:e4:04:e6:9d:b1:51:11:cb:ca:77:66:
da:b8:c0:38:7c:38:86:a7:81:af:f0:bc:02:a8:1e:c4:25:12:
a6:50:2b:da:28:85:5e:2a:69:eb:a3:04:0d:97:73:3b:db:a7:
1c:94:d8:e1:a0:85:a0:37:bb:ea:29:c1:25:e7:cd:1c:88:95:
ce:d5:a3:63:76:52:f9:61:b5:42:f6:06:14:31:8d:21:c0:85:
7f:25:2f:4d:ec:16:9d:c7:37:76:48:2e:09:c0:c5:0c:0e:63:
c2:8a:a0:b0:c8:86:a1:7f:a0:9b:25:c7:dd:9f:1b:9b:bd:54:
b0:77:f5:e9:96:ca:21:c8:50:e6:4c:fa:0a:91:bf:d1:82:00:
f7:71:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:43 2025 by rpki-client