Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/39NfMlHhrMH0zRyfZciiqR6mIWs.roa
File: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (raw, json)
Hash identifier: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=
Subject key identifier: DF:D3:5F:32:51:E1:AC:C1:F4:CD:1C:9F:65:C8:A2:A9:1E:A6:21:6B
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 0194236992D91C093BE6A71F246A467AF0C1
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/39NfMlHhrMH0zRyfZciiqR6mIWs.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202513
IP address blocks: 185.248.78.0/23 maxlen: 23
185.248.78.0/24 maxlen: 24
185.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:92:d9:1c:09:3b:e6:a7:1f:24:6a:46:7a:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfd35f3251e1acc1f4cd1c9f65c8a2a91ea6216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:0e:65:cb:f5:eb:0c:d0:a9:3b:23:e0:33:
fa:c4:b7:a5:79:9b:d4:61:65:1b:2e:5c:0e:45:16:
9a:4d:a7:eb:b7:2f:4b:36:1f:3b:94:6c:25:66:26:
8c:fa:ef:f6:e6:15:09:d0:79:d7:62:f7:cc:07:8a:
06:4f:18:b0:d5:1e:be:e6:4f:d9:a6:c5:91:a8:56:
0d:29:d9:0a:3c:59:85:3f:40:d9:53:79:f0:04:de:
e8:53:46:1c:91:d3:ea:16:ed:9d:b7:49:00:dc:b2:
3b:5a:23:55:07:55:89:b4:42:17:37:b7:2e:de:cd:
31:47:3d:f7:01:90:ac:96:99:13:e4:b3:6d:08:8a:
3b:5d:dd:d7:ab:99:69:21:b7:0c:8c:1e:34:22:da:
78:4f:be:6d:b0:5d:1e:62:43:68:03:2f:ff:d3:77:
59:b4:79:c6:4e:d2:16:ef:87:cd:f8:1d:97:4c:bc:
87:a7:71:3c:08:26:60:1d:66:e2:1b:a3:28:ef:87:
b3:58:ae:56:e0:70:60:ae:74:28:df:73:f2:a1:0b:
db:87:f0:9d:0d:b0:19:8f:27:43:7b:c4:5f:c5:bc:
03:38:d3:77:fc:9a:98:cd:e5:fc:96:2a:ff:3a:aa:
53:c1:ae:47:ca:da:8c:c7:df:ed:59:dd:ca:70:50:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:5F:32:51:E1:AC:C1:F4:CD:1C:9F:65:C8:A2:A9:1E:A6:21:6B
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/39NfMlHhrMH0zRyfZciiqR6mIWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.78.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:59:47:17:87:04:13:9c:6a:ad:66:c4:e4:6e:03:0b:a9:ca:
ea:f7:83:2e:42:82:9e:6f:ad:82:53:6f:b3:5f:8d:2a:d1:7f:
fe:f4:bf:09:d5:ff:50:58:80:80:04:51:ce:b1:f1:e6:fb:89:
a2:ce:c6:1d:2b:8a:36:18:5d:cd:26:66:42:ca:9b:4d:d5:75:
18:e3:d2:37:a8:24:89:03:ef:f8:35:f1:3a:05:92:9f:13:51:
bf:d4:ed:d5:42:cb:d6:cd:95:f8:59:6b:3d:58:b2:8d:44:73:
a5:18:89:cf:93:56:44:37:ee:66:23:cc:e9:b5:a5:a3:22:74:
7a:df:5c:64:89:38:3e:c7:e2:20:59:92:26:94:d4:cc:9a:e7:
6b:3c:01:3d:83:b7:44:2d:7c:da:bf:d2:b6:c6:e2:ef:f8:e0:
5f:77:58:26:66:a4:fd:3d:dc:55:07:2b:4f:b4:fd:e8:8d:bf:
3a:a2:89:9b:7e:09:33:c5:86:6d:12:99:36:9c:0b:64:22:57:
1b:37:ff:5b:21:57:54:da:db:8e:8f:dd:f6:5d:a7:12:67:91:
10:e0:80:75:bb:08:71:ff:05:09:28:10:08:94:7a:68:61:a6:
cb:09:ca:e0:f5:bc:91:d9:86:ee:e7:10:40:fa:2f:8b:a7:82:
34:b9:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:58 2025 by rpki-client