Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/K2ml9PW3Lewwaub3inZNbCpL6hY.roa
File: K2ml9PW3Lewwaub3inZNbCpL6hY.roa (raw, json)
Hash identifier: qsrNYrhU/aV8v0NoWkBZog3EBJfGsxKa/A7cunULvOg=
Subject key identifier: 2B:69:A5:F4:F5:B7:2D:EC:30:6A:E6:F7:8A:76:4D:6C:2A:4B:EA:16
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282432387BF522EDD6C91011953D28D2
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/K2ml9PW3Lewwaub3inZNbCpL6hY.roa
Signing time: Thu 02 Jan 2025 17:50:48 +0000
ROA not before: Thu 02 Jan 2025 17:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 269070
IP address blocks: 130.185.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:32:38:7b:f5:22:ed:d6:c9:10:11:95:3d:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b69a5f4f5b72dec306ae6f78a764d6c2a4bea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:b1:b5:dc:7a:b1:b1:d1:eb:9b:16:28:b5:
8f:84:4c:84:6f:8e:91:8b:4a:73:07:93:f4:ba:10:
98:e1:af:b6:3f:94:a4:37:13:36:fc:ae:7b:a9:92:
39:e0:6b:20:24:76:0f:7b:63:43:ba:e6:4e:7b:9f:
c5:ed:4b:fe:5e:fc:f2:7b:db:ff:cd:63:f7:5f:76:
84:d9:62:a1:24:c3:18:d0:1e:4a:ab:77:05:f0:ed:
73:f9:fa:a9:f2:21:f4:a9:24:7f:73:f7:bb:3b:98:
e4:73:89:74:f2:3d:ae:2d:77:cd:bc:5a:25:5b:05:
2f:96:36:6a:af:dd:85:3a:cc:33:89:85:e8:5a:e1:
d7:95:15:b4:69:32:e2:7b:99:6c:00:61:48:f1:69:
7c:09:84:60:00:fc:92:e3:52:ea:a2:ca:57:bd:02:
35:07:f4:e9:2f:42:52:5e:cb:37:52:4a:00:57:e9:
b6:b8:f4:f7:e4:fe:11:ae:18:52:26:3a:36:42:df:
d2:11:86:b0:ab:23:14:a1:8c:12:1e:22:70:53:90:
51:33:63:8c:3b:f2:8a:4e:da:e6:52:4d:89:81:cb:
6b:9e:b1:38:b5:c7:9b:6d:09:58:78:d1:8a:46:90:
41:3e:7e:9e:50:74:99:a3:27:65:ad:80:3b:75:55:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:A5:F4:F5:B7:2D:EC:30:6A:E6:F7:8A:76:4D:6C:2A:4B:EA:16
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/K2ml9PW3Lewwaub3inZNbCpL6hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:77:13:bf:da:d3:c9:98:37:42:23:1f:57:99:41:6b:3a:22:
45:5f:08:a4:47:32:0d:73:cb:32:30:0b:98:f1:36:10:9f:fb:
69:bd:6f:ce:2a:13:cb:3c:16:26:ec:be:7c:f3:20:c5:48:6b:
70:e5:12:da:d4:cd:ee:2e:36:15:c5:26:a3:b6:8d:40:93:df:
f0:31:10:eb:e7:13:cc:73:06:ca:3a:97:ca:d8:55:7b:96:5a:
14:8f:bb:f2:0b:94:46:01:e9:e8:12:bd:af:b9:7c:5d:4d:22:
83:d2:f3:e8:9b:8a:f4:ce:0b:80:96:79:ca:cb:dc:cb:ab:22:
96:cf:bb:5a:5d:53:b2:5d:86:8c:13:f0:c4:f1:82:94:3b:44:
44:d4:b0:10:d9:aa:9f:2c:0c:72:ed:07:c5:72:61:86:3e:4f:
33:75:9d:42:ce:43:c9:19:98:22:7f:d4:de:fd:42:cf:5e:3d:
3d:23:1d:2a:1d:f5:9b:2a:0b:a3:bc:fd:03:c8:00:ab:fc:f4:
c2:fe:ec:6e:91:20:16:48:dc:d3:6e:d0:df:54:b9:6b:89:1d:
eb:6b:cd:eb:ba:87:10:24:59:fe:b9:46:a9:05:6d:e2:f6:79:
8f:81:10:91:1b:7d:14:e2:6d:39:ca:bb:0a:cf:1a:22:df:3a:
54:7c:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:11 2025 by rpki-client