Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/kEveC8WkpMXtAhCjQYal_7N8cqU.roa
File: kEveC8WkpMXtAhCjQYal_7N8cqU.roa (raw, json)
Hash identifier: 36t2IiG5a0ru6GNWxSIKI2twOH4WabuzXbDN7PDUMCw=
Subject key identifier: 90:4B:DE:0B:C5:A4:A4:C5:ED:02:10:A3:41:86:A5:FF:B3:7C:72:A5
Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial: 019424B3A48533C18A8A9DCBAAD75E77D23E
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/kEveC8WkpMXtAhCjQYal_7N8cqU.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64406
IP address blocks: 185.72.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a4:85:33:c1:8a:8a:9d:cb:aa:d7:5e:77:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=904bde0bc5a4a4c5ed0210a34186a5ffb37c72a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:28:0f:b8:18:a7:74:59:2a:43:92:0e:5a:
b9:1e:53:d5:9f:8d:f7:3c:e5:92:07:f3:85:02:1a:
f9:14:c2:a7:7c:4a:f7:41:f6:3c:82:a6:98:0b:cb:
c1:2b:86:6f:13:95:03:8d:3a:83:94:8c:ea:3a:5c:
0c:ed:02:90:06:0b:f2:09:5b:6d:08:2b:4b:68:50:
2c:6e:76:ef:1b:46:5d:19:9c:2a:0d:6f:cd:a5:a1:
70:7c:c4:8a:d1:0e:13:d0:90:55:31:ef:f0:4f:e6:
0c:09:d8:07:1d:ce:c9:d1:73:32:4f:4e:6c:2b:b1:
13:da:42:ba:21:5e:e8:14:d6:33:49:e7:43:33:ba:
46:30:27:23:10:32:bc:26:4e:f1:77:05:83:6c:3f:
9e:71:07:b5:ab:16:df:fa:19:63:2d:1a:c4:46:6e:
10:4e:78:48:89:82:af:6f:0b:e5:88:7f:64:72:aa:
9d:10:f5:c9:3f:a0:7d:18:af:ab:90:8c:e6:db:a2:
84:86:d0:5a:08:15:12:a4:e1:0b:b1:79:84:ee:7e:
a9:4f:63:31:30:c4:3c:19:20:9b:74:e0:9c:e4:71:
82:51:20:4f:99:71:dd:05:ad:fb:8a:d6:b5:b3:c1:
70:94:5a:32:d2:25:f2:65:03:ee:f8:5f:9b:a5:a1:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:DE:0B:C5:A4:A4:C5:ED:02:10:A3:41:86:A5:FF:B3:7C:72:A5
X509v3 Authority Key Identifier:
keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/kEveC8WkpMXtAhCjQYal_7N8cqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.50.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e7:e0:c8:5d:b9:bd:0d:c1:9e:b5:52:a9:b8:57:a7:3d:e3:
a7:76:97:07:ca:bf:87:07:d2:c8:d8:ce:c8:66:8e:0e:8a:a0:
57:7e:c2:c5:81:95:01:6f:58:23:0c:d3:99:ac:ee:0c:1f:a5:
ac:86:61:ed:e2:18:a6:0b:36:17:af:a0:11:cd:36:09:c0:e1:
0f:3c:f6:c5:26:a2:b4:3e:34:79:4f:39:16:c4:e6:69:4d:0c:
6a:23:b2:0c:36:d3:f1:3c:6b:06:cb:e3:21:49:e3:23:8e:e4:
ed:eb:c0:f9:a0:57:f9:aa:fa:59:ed:09:2b:5f:34:a8:c3:8f:
4e:bd:cb:3f:e3:f4:13:47:ce:6b:74:5e:02:d2:3c:39:c8:2d:
03:b7:95:c4:e2:f9:52:0f:d9:d8:a8:a8:34:d3:c2:0d:35:b6:
54:8d:a0:6d:1d:6e:83:4e:22:3c:76:c5:4d:27:01:b9:ff:93:
71:b8:1a:07:b1:9b:b4:19:52:c1:04:66:d9:c7:cb:44:32:9b:
a5:48:7a:a4:f7:f9:0b:f7:09:65:e3:fd:32:09:9e:4c:fa:9d:
44:ee:cd:04:14:d5:9c:e7:4e:9d:a7:48:e5:71:dd:12:73:25:
2c:43:ca:97:b7:8d:b2:6c:c7:74:78:b0:ac:bb:07:27:d7:ca:
91:c3:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:31 2025 by rpki-client