Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa
File: 30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa (raw, json)
Hash identifier: TTYewcef5lOn0EHzwdEkvaED9fy4qKHbWldg8iBnGRE=
Subject key identifier: DF:4B:C0:FB:64:E2:F4:9E:31:EA:07:08:F8:41:CB:6E:B0:94:66:95
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019424B2DF31FEDC1A2D31F14C30B6CC369B
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa
Signing time: Thu 02 Jan 2025 01:48:09 +0000
ROA not before: Thu 02 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201531
IP address blocks: 185.243.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:df:31:fe:dc:1a:2d:31:f1:4c:30:b6:cc:36:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Jan 2 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4bc0fb64e2f49e31ea0708f841cb6eb0946695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:97:49:3f:de:96:16:c2:17:25:8b:d4:55:
3e:7e:ad:cc:7b:d9:47:0c:fb:ae:c7:62:1a:16:f6:
31:96:76:9e:a3:84:34:64:69:5b:b1:54:59:42:54:
af:c6:9d:93:eb:40:4a:9c:bd:30:6d:9f:94:3b:d5:
53:e4:73:24:8c:4a:17:d7:9c:85:70:6f:d9:2e:7b:
a5:d7:90:1f:3b:ee:7e:29:31:16:85:82:d9:c9:9d:
9b:46:c8:4c:13:2d:f6:36:46:03:7a:b9:ba:3c:84:
c3:f2:ca:e1:13:d4:42:5e:fb:41:8f:06:a2:8f:c6:
6f:20:b0:22:4f:a7:77:02:1e:de:5a:3b:51:8f:6a:
68:b7:e5:73:d7:c6:7e:0f:43:9e:79:76:e7:70:8b:
1e:f6:be:28:43:a3:f2:2f:9e:28:02:65:46:0d:4b:
87:95:a6:fc:54:ed:2f:07:2a:16:09:b6:9d:42:4f:
99:b1:6b:b0:0d:58:cc:31:50:4a:9f:27:c8:6d:88:
0b:a5:0b:f9:e4:06:49:68:95:34:e2:32:a7:e3:26:
e8:e1:c7:3d:11:5c:ab:1e:32:7a:67:b1:55:3d:f2:
45:95:84:05:25:fe:78:67:06:21:94:51:9e:05:29:
65:30:e3:4e:ce:e1:f7:de:0e:4c:ca:89:02:80:25:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:C0:FB:64:E2:F4:9E:31:EA:07:08:F8:41:CB:6E:B0:94:66:95
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:c0:a1:6f:cd:fc:ba:90:74:aa:1d:14:1a:8b:ca:25:b7:da:
86:f2:5c:d2:63:3a:73:be:56:99:0a:bc:2c:96:2c:a7:35:4a:
dd:26:8f:62:ee:05:ad:44:b1:ee:0b:75:17:00:42:a6:20:dd:
0b:2a:4e:b3:2a:f7:2d:c0:0d:f7:d9:a7:44:4f:59:86:1f:4f:
6e:00:04:9d:10:f5:50:7e:f6:23:8a:c2:5d:17:4f:11:b8:c3:
21:83:69:ba:eb:df:3f:1d:de:79:49:f0:67:63:56:31:da:7d:
9d:11:41:02:74:34:2e:d0:e4:7b:69:b5:51:5e:cb:c2:c0:bd:
cb:36:ef:98:b6:d7:c9:35:98:38:cd:94:50:68:4f:57:00:d9:
14:d3:87:f7:8f:96:ea:ab:32:1c:e6:18:1d:5c:b8:6c:81:24:
34:4e:f0:e8:04:55:5d:a5:19:2c:f0:43:cf:00:64:18:27:81:
e9:1f:54:63:c6:98:ae:5c:73:ea:16:3d:e7:9f:cb:b9:fd:38:
c2:c8:44:fd:fd:34:96:75:b8:fc:f9:51:db:38:d9:bd:ee:47:
fd:db:48:10:fb:38:6e:5b:8c:f8:eb:94:be:0f:05:70:8d:ff:
41:92:12:af:23:7d:02:0b:9d:49:49:0c:cf:ef:d2:ac:da:68:
b1:b6:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:46 2025 by rpki-client