Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa
File: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (raw, json)
Hash identifier: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=
Subject key identifier: 53:57:59:88:94:3E:B0:27:D9:95:CC:9B:37:01:C8:32:85:60:EE:65
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCE6C9669F8CFAC1F9D2193785A81E
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa
Signing time: Thu 02 Jan 2025 07:48:38 +0000
ROA not before: Thu 02 Jan 2025 07:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400486
IP address blocks: 185.161.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:e6:c9:66:9f:8c:fa:c1:f9:d2:19:37:85:a8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53575988943eb027d995cc9b3701c8328560ee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:8b:1c:2d:86:fc:cc:9f:59:c1:aa:3b:11:
30:68:d4:70:23:06:0a:01:d3:eb:de:f3:6e:db:76:
dc:f2:17:ac:7d:15:17:81:94:10:ba:20:3a:81:64:
ac:4e:1f:54:f3:20:05:fb:24:45:5e:de:e4:c6:be:
17:a2:79:4e:99:d2:fe:96:47:09:ae:22:24:ec:fa:
d1:60:37:4b:90:ca:8e:1f:2f:df:59:c1:8b:1f:fc:
d3:10:38:c1:17:36:f9:67:28:9e:5c:58:2c:08:02:
cf:b5:19:a9:d2:63:d7:a7:35:6f:67:35:0a:3c:2f:
26:86:97:a6:13:0d:7c:bb:a9:8d:b4:51:d6:f1:f4:
be:d8:b4:5e:15:69:67:ea:9b:6e:ad:74:e9:3e:53:
2e:e5:48:1f:31:cf:c7:04:3e:f8:a9:e1:77:bf:e2:
c8:62:f8:6d:0b:f3:14:46:28:7e:c9:03:b0:bc:2a:
fd:49:ae:fe:93:f1:c5:95:ff:f7:9b:93:4d:a9:18:
2a:61:67:66:12:7a:6d:87:9a:06:e6:15:c2:53:03:
ab:49:cb:16:23:4d:72:62:94:99:9d:2c:c6:77:99:
cf:be:d0:c9:ca:0a:f3:d4:13:e4:3f:82:f0:a1:b7:
7a:54:ff:a1:b6:27:db:1c:f7:20:db:0b:50:76:be:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:57:59:88:94:3E:B0:27:D9:95:CC:9B:37:01:C8:32:85:60:EE:65
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.189.0/24
Signature Algorithm: sha256WithRSAEncryption
40:00:9e:41:ac:d1:36:a7:d8:18:ac:7e:78:95:37:1f:8d:07:
74:22:62:6c:98:08:11:ce:31:a5:ec:51:b8:0d:ad:6f:5e:40:
07:19:d4:ff:46:7a:d9:67:d3:16:cc:d4:53:8b:bb:6e:d5:42:
a0:e2:36:c8:fb:72:ec:f0:80:04:48:70:3a:46:36:eb:e2:e1:
58:ad:db:82:35:af:27:a6:d9:7b:e5:18:b0:ab:53:87:9b:ba:
49:9a:62:9f:6a:ab:62:9c:76:0c:ea:f6:75:85:16:0b:b8:47:
34:a9:9a:df:2b:20:bc:30:17:bf:3c:0a:6b:b8:af:09:eb:64:
af:ad:30:24:d6:28:79:fd:93:32:47:a8:68:20:08:61:2b:58:
75:62:bb:a4:d2:13:0a:51:c8:af:17:8b:82:8d:bb:99:37:96:
94:f1:1d:4e:16:ad:b1:ba:06:f7:a5:18:d4:77:a0:6c:5d:b9:
f8:9e:4b:45:66:6c:ec:f9:4c:c8:d2:66:bb:31:43:db:a8:71:
e1:65:ca:0d:d0:87:b0:7b:cf:5f:19:5f:1d:88:21:b5:62:ad:
80:f6:85:0d:33:71:b3:dd:e7:4c:d4:ad:ee:d7:dc:1e:ed:d4:
60:10:dd:78:d2:a0:1a:a3:78:f0:04:ea:8c:bc:a2:ec:87:ba:
92:53:2b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:31 2025 by rpki-client