Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/393YoA_-TG1rJW7pJiXVZZOcLRE.roa
File: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (raw, json)
Hash identifier: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=
Subject key identifier: DF:DD:D8:A0:0F:FE:4C:6D:6B:25:6E:E9:26:25:D5:65:93:9C:2D:11
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 01942747974F6B9DC603181799BD5B105495
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/393YoA_-TG1rJW7pJiXVZZOcLRE.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21060
IP address blocks: 185.126.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:97:4f:6b:9d:c6:03:18:17:99:bd:5b:10:54:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfddd8a00ffe4c6d6b256ee92625d565939c2d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:36:4a:ff:45:b3:36:2b:be:7a:62:bd:81:
80:24:93:73:cd:1c:07:ea:bf:4c:5c:c6:03:41:e4:
25:85:7d:3e:5d:86:1b:c6:ea:dc:3d:40:d7:66:b3:
7a:2b:a5:81:9f:f3:dd:72:61:ed:a8:b8:9d:35:da:
57:55:20:fa:31:50:b2:e9:44:c5:9f:4e:5a:09:da:
5e:2c:7d:bf:d7:15:93:a4:e6:6c:52:11:43:b4:1e:
1d:4a:d4:7f:f9:47:41:53:40:76:dd:df:7c:94:2e:
c2:ef:a7:4c:97:4a:e9:d2:2b:ba:af:2b:81:6e:3e:
af:80:df:63:f9:47:65:79:46:6c:86:96:3f:14:e1:
2d:ec:f4:2b:bd:c7:7c:c3:b2:53:1d:d9:14:c5:27:
4a:ef:be:17:41:b9:79:a8:95:66:38:10:8f:c3:25:
61:da:4d:e6:2d:bd:2f:b6:cc:5e:16:fe:ab:a6:3c:
63:d7:85:23:4e:3e:8a:08:e4:62:f7:80:9e:f9:9c:
42:50:35:cf:cf:45:7f:ff:57:d2:b2:da:c2:a2:21:
42:90:28:72:87:af:03:5b:91:9a:08:03:32:bd:d0:
38:c0:3e:e7:86:26:ce:07:a8:9b:52:2f:ed:b5:10:
45:a5:12:4c:34:7d:18:1c:39:38:e1:54:fc:14:0e:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:D8:A0:0F:FE:4C:6D:6B:25:6E:E9:26:25:D5:65:93:9C:2D:11
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/393YoA_-TG1rJW7pJiXVZZOcLRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0c:29:3e:f8:e7:e0:4c:1f:fe:33:e1:e8:0c:7f:84:59:e5:
49:7e:f6:73:f5:d9:47:a4:ff:62:1e:fb:fa:f3:9a:d3:18:9f:
13:26:e5:a5:62:86:34:3a:08:68:a0:87:db:00:0a:21:f5:af:
2c:c2:c4:5e:b9:9d:8a:5b:69:cc:bb:96:ed:dc:45:71:92:d7:
95:12:20:36:c8:09:01:0a:1e:20:7e:57:b4:f4:1e:3b:b2:b9:
6a:b2:16:55:a8:44:93:d4:86:d1:b0:f0:6c:b5:17:c5:54:f4:
a8:59:98:f9:28:68:17:b2:99:5e:e6:a1:93:46:9f:3c:ca:1c:
d1:e1:bb:36:7a:92:c1:20:be:9f:e0:2b:28:b2:91:15:d7:ad:
6a:3b:1b:9b:f7:f9:c9:15:a3:1f:a0:a7:1a:6e:00:c1:a8:32:
16:62:57:4a:c0:f3:09:a0:a9:13:38:52:c1:24:96:a7:97:2b:
84:f9:23:d0:a8:48:e0:9b:39:9e:97:9b:07:e9:e6:2d:35:55:
af:a1:eb:ec:a4:70:bd:e2:75:69:fb:39:2e:cc:11:fa:42:b8:
a7:b4:0e:19:d4:57:76:cf:2a:3f:91:55:87:8c:b7:00:4c:b5:
c0:51:85:2a:20:23:dc:a8:3d:24:77:aa:4e:0c:61:56:82:8f:
b7:e7:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:56 2025 by rpki-client