Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa
File: 4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa (raw, json)
Hash identifier: pBs68ICaSbGSqyGLZ9bB1efuQfGC5WelauRjyqdWgTI=
Subject key identifier: E2:33:B2:0E:43:74:B1:88:07:40:EB:B8:1F:68:B7:04:F9:EE:C2:E7
Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial: 0194228D874DE46B0DDACF26DF4E92C19F0C
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16247
IP address blocks: 185.57.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:87:4d:e4:6b:0d:da:cf:26:df:4e:92:c1:9f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e233b20e4374b1880740ebb81f68b704f9eec2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:85:30:47:3b:2c:6b:1b:a6:6d:69:3b:88:
6b:95:8a:a9:1f:be:89:a5:64:4c:1f:1f:0b:03:0e:
21:ee:e7:2a:42:b2:a6:6a:34:62:86:c9:ec:3d:b6:
47:94:5e:02:de:b0:19:13:9e:39:36:6c:d0:ad:83:
62:13:c3:31:88:5b:a3:58:e6:7b:f2:fb:34:0b:0f:
cc:70:49:4f:3d:fb:9a:ae:76:59:56:c0:eb:88:00:
52:d8:3c:8d:1d:0c:d4:a3:57:56:44:e5:bd:21:6c:
87:34:c9:42:4e:a2:05:09:85:e7:4c:08:c0:35:9f:
c0:68:93:51:9d:52:ed:6a:b3:c1:d4:e3:ce:71:31:
eb:b7:f6:66:8b:49:38:52:c9:3c:a3:07:70:a7:93:
b9:7f:55:6e:3e:48:1a:67:d5:e3:23:d5:8f:48:c1:
eb:1f:4d:99:f4:d8:c1:c0:b7:b5:b5:7e:aa:bd:97:
96:74:1b:db:13:8c:4f:6e:8e:9a:4a:9c:a8:dc:13:
e2:d9:04:2c:20:3e:9e:ff:cf:13:03:48:6b:63:fb:
42:23:39:cc:ac:7a:6f:6e:af:67:11:c5:09:4a:24:
88:d8:f5:68:b3:fe:51:07:12:0e:16:f4:c1:a4:f5:
51:6d:bb:ee:82:25:6b:20:33:42:a7:c8:a9:b4:d5:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:33:B2:0E:43:74:B1:88:07:40:EB:B8:1F:68:B7:04:F9:EE:C2:E7
X509v3 Authority Key Identifier:
keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c0:13:0b:bf:3a:eb:7d:c8:c5:76:06:ed:9f:a2:89:19:da:
af:e7:f8:d7:21:ad:9e:13:ce:4c:00:44:28:9f:a8:4b:fd:f9:
16:53:a7:39:1f:14:fb:51:4d:ec:f7:56:1b:55:d4:04:e3:dc:
de:73:1e:87:ba:de:d1:96:b8:bc:db:1e:bc:ea:92:f1:18:10:
88:fe:b3:e8:c3:cb:6b:9b:8d:c1:4d:9a:8a:cb:32:62:21:aa:
c3:18:f0:dc:3b:e8:99:f6:b7:09:1a:07:36:78:72:a3:00:be:
06:62:02:be:29:eb:90:aa:4e:09:21:12:ce:ec:1b:49:6c:f9:
41:c4:33:b1:83:c6:d8:98:a7:f6:78:89:e1:d7:76:c4:ac:9c:
87:99:e3:55:37:2d:3d:aa:7e:2e:6b:15:93:94:23:27:cc:01:
a8:c8:22:7f:2e:f1:bc:73:92:51:03:ab:cd:7f:96:3e:37:2b:
45:42:c7:31:46:45:4a:35:60:4d:e2:df:21:9f:88:12:43:6f:
77:08:a6:56:06:f1:83:32:43:55:57:ac:ce:c2:2f:af:c2:19:
5c:9e:4c:e5:09:89:29:a3:b6:ac:c3:31:cf:38:46:54:95:64:
f0:40:df:97:0a:f3:58:7f:5d:f1:de:b9:4e:d2:fe:db:2a:63:
54:0a:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:55 2025 by rpki-client