Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/JAyc3IZZlhE05kFH0gGLLaWCHBs.roa
File: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (raw, json)
Hash identifier: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=
Subject key identifier: 24:0C:9C:DC:86:59:96:11:34:E6:41:47:D2:01:8B:2D:A5:82:1C:1B
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 0194228D4B6EEB3ED4FA01FDCB2B19E05AE5
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/JAyc3IZZlhE05kFH0gGLLaWCHBs.roa
Signing time: Wed 01 Jan 2025 15:47:52 +0000
ROA not before: Wed 01 Jan 2025 15:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27647
IP address blocks: 185.148.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:4b:6e:eb:3e:d4:fa:01:fd:cb:2b:19:e0:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jan 1 15:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=240c9cdc8659961134e64147d2018b2da5821c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:1b:bc:75:8f:fd:0b:a8:e9:2c:06:cf:04:
6a:e0:a1:3d:4e:83:cc:84:ee:39:57:31:40:d8:d0:
06:83:7c:47:f1:c3:a4:55:0f:ef:1d:af:37:ca:a2:
a5:4b:9b:41:3e:ae:57:ca:2b:40:02:d7:c6:6b:c7:
19:54:22:f7:e7:06:08:9c:bf:2d:ec:aa:3e:2d:d1:
cf:a3:32:78:94:98:6f:42:24:5d:a2:d8:62:e8:ff:
56:45:ef:4d:15:aa:19:1e:c8:56:5d:e3:13:83:a9:
64:6c:e6:ed:53:d5:19:47:8a:74:3b:b9:85:b4:45:
1b:97:c6:5e:6c:e3:77:ba:b3:42:07:46:a2:34:32:
03:4e:a0:31:f4:0d:1b:f5:b1:15:55:8a:0f:5f:0b:
eb:f4:d8:87:e1:c7:63:c2:d1:bb:42:2b:f2:81:dc:
38:64:4d:53:cf:e3:dc:24:3f:c3:c2:ca:74:49:3b:
31:b9:6e:f1:f6:1f:6d:12:6e:39:3e:7e:3a:e5:48:
1c:3f:40:a6:54:b2:0c:3d:1e:5a:f9:00:10:ab:14:
77:3d:89:b2:ac:96:c2:cb:6c:fc:01:33:66:b4:f6:
4f:26:66:0e:73:20:cc:f3:8e:87:46:cb:b9:0d:42:
7c:df:81:4a:fa:51:05:da:2f:6e:16:d0:33:c0:09:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0C:9C:DC:86:59:96:11:34:E6:41:47:D2:01:8B:2D:A5:82:1C:1B
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/JAyc3IZZlhE05kFH0gGLLaWCHBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.180.0/22
Signature Algorithm: sha256WithRSAEncryption
87:2d:f2:3b:fd:b3:58:59:1f:33:f7:66:93:8e:56:7b:60:c6:
88:85:f4:4f:8c:43:7c:b3:f0:2d:f2:1b:75:97:2f:4c:03:80:
df:24:c1:28:be:36:ca:ae:31:47:87:4e:90:66:e8:64:da:61:
5d:5b:93:4f:fe:a1:a8:4c:be:fe:6c:c5:e2:26:0e:04:58:a4:
ca:c7:b4:1c:bb:f1:b2:25:68:05:f0:87:b1:dc:97:5c:a7:74:
17:22:4c:98:13:fe:44:88:7e:55:54:d5:3a:7c:9e:4d:99:37:
08:72:53:77:36:34:52:50:5d:04:a7:08:5d:56:e0:1b:2f:b0:
c3:b9:86:43:c0:5d:04:c8:3d:8c:99:7d:1d:69:af:e3:45:9f:
25:f3:e2:07:f5:4d:5b:8e:29:22:b1:fc:09:a2:24:2e:c4:32:
31:4b:f3:15:50:eb:d2:1c:d1:09:d5:e4:5e:a5:bf:2d:e9:62:
fa:ef:ef:3a:6d:c4:08:86:ae:23:71:f2:9d:ff:13:62:ce:ed:
fe:be:db:45:9a:de:63:29:fe:72:51:15:89:ee:7a:7a:45:82:
a0:a4:af:51:70:93:c3:05:3b:9f:86:c1:64:e5:9d:4b:39:3b:
83:11:7c:18:64:f4:be:e8:72:8e:a5:d8:7e:dc:50:3d:3e:7b:
2e:4a:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:03 2025 by rpki-client