Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/LJDUfh2zlZ_tH_G6HCU58zg5f4I.roa
File: LJDUfh2zlZ_tH_G6HCU58zg5f4I.roa (raw, json)
Hash identifier: LqY6hDZmTT8yYm5vXHX0GHlSL9eE6EX8ryuyXk0I54w=
Subject key identifier: 2C:90:D4:7E:1D:B3:95:9F:ED:1F:F1:BA:1C:25:39:F3:38:39:7F:82
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 019424B37645B5DC9392ECD366289DDF5112
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/LJDUfh2zlZ_tH_G6HCU58zg5f4I.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57793
IP address blocks: 185.19.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:76:45:b5:dc:93:92:ec:d3:66:28:9d:df:51:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c90d47e1db3959fed1ff1ba1c2539f338397f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:91:43:99:6a:c0:24:dc:0d:2a:c9:76:f7:
97:b7:7c:99:a4:83:0d:c0:46:a0:b1:85:f3:26:97:
35:11:c9:aa:ac:72:6c:79:8e:7a:f7:b0:59:98:84:
f9:bf:8c:e4:18:10:72:30:5d:c6:bc:67:ce:08:c1:
38:7e:57:ac:59:02:1d:78:65:f4:c5:8c:85:c4:b9:
12:f8:32:32:8d:6f:81:8a:25:e7:96:89:db:e5:ef:
48:8c:08:f2:db:ec:66:8c:5d:cd:ba:96:89:af:b5:
a8:7b:cd:88:cd:d6:b3:9f:39:3d:02:2b:bd:17:4e:
d9:01:81:b1:73:0b:3f:b0:d5:9a:a4:90:8b:98:72:
a5:b8:c0:4f:e9:d0:2f:62:75:4f:82:e9:83:97:be:
23:4d:3e:a3:a3:54:ef:87:68:bd:78:de:5c:cf:e7:
b0:86:38:85:7d:8c:36:cd:91:a0:25:71:64:48:42:
48:21:4b:1e:5b:ef:57:04:8d:0b:e6:84:6e:07:d1:
e3:0a:01:ca:b0:16:d0:b4:0e:6b:06:22:3c:41:7d:
ad:10:85:6b:bb:c3:26:27:10:2f:b2:e9:63:50:ad:
e1:63:00:5c:03:71:09:4d:ce:08:c7:be:4c:02:29:
bc:e9:ca:f0:57:c9:ec:90:95:26:d3:05:c6:b1:23:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:D4:7E:1D:B3:95:9F:ED:1F:F1:BA:1C:25:39:F3:38:39:7F:82
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/LJDUfh2zlZ_tH_G6HCU58zg5f4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.150.0/24
Signature Algorithm: sha256WithRSAEncryption
79:91:8b:c8:2e:f2:ba:98:17:48:4b:61:31:f6:da:a1:80:b7:
dd:51:d1:0e:bc:e9:b7:1b:9e:2d:26:0d:83:2e:ad:18:de:be:
5c:c0:38:22:1f:fb:c9:ca:a9:e3:20:62:f3:68:b8:47:f5:c8:
65:93:27:e6:44:95:0c:54:3b:8a:a5:8b:75:d9:98:8e:26:e9:
5c:ff:60:40:e6:a3:df:ec:d5:a6:b7:46:19:d1:84:b7:e3:00:
01:02:1d:83:fe:44:9d:99:f9:f1:ea:8f:bd:a0:bb:df:95:6f:
f8:61:fe:0f:9f:eb:ea:35:5c:ab:84:25:71:35:60:25:21:ef:
af:95:22:54:a2:00:ef:fa:c9:41:70:1e:21:63:45:30:d5:9e:
b9:c5:09:d1:b3:67:22:0c:2b:64:c3:04:69:64:5d:42:b6:83:
2e:db:0d:49:3f:98:4f:6d:a2:cc:ad:de:f9:d2:58:69:68:8e:
c3:a7:8a:ea:8c:73:5d:f1:5d:f3:82:64:ef:d5:0c:ea:3a:8c:
0d:8e:6c:27:b9:db:b7:e9:02:17:01:29:71:b8:74:74:58:4c:
aa:28:8c:1d:ff:40:d1:fc:16:1d:a3:80:b4:98:f6:e9:91:cf:
54:d8:d9:d2:86:b4:b2:d2:3f:57:c8:0a:c2:90:45:83:1e:0b:
c1:a5:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:32 2025 by rpki-client