Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa
File: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (raw, json)
Hash identifier: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=
Subject key identifier: 71:5F:F1:B9:49:7D:5E:E3:40:C3:62:2C:EB:3E:99:57:8A:22:33:8F
Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial: 01942444BDD9E709A8258C63904C251CF957
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206197
IP address blocks: 185.192.52.0/24 maxlen: 24
185.192.53.0/24 maxlen: 24
185.192.54.0/24 maxlen: 24
185.192.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bd:d9:e7:09:a8:25:8c:63:90:4c:25:1c:f9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715ff1b9497d5ee340c3622ceb3e99578a22338f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:18:bd:ca:04:8e:d1:3e:82:99:da:fe:63:
94:6b:5c:6a:4e:37:89:75:94:33:ca:28:2e:98:f0:
3f:36:3b:90:47:15:eb:e1:da:d1:30:29:e2:fd:42:
e3:f7:41:7c:ae:5c:45:97:9a:dc:ef:1e:a2:5c:66:
c4:6c:2c:1a:d3:1a:80:e6:83:55:33:2f:f5:c9:31:
aa:36:98:67:00:3d:18:2e:2f:38:e8:3a:b6:8f:4a:
48:09:f6:5c:9c:f7:0a:56:4a:5d:c4:51:7c:e6:b0:
ee:4e:f9:18:96:fb:af:b9:d9:0a:36:18:d2:23:ec:
73:77:eb:fe:1f:4c:6d:41:10:c9:af:68:2a:df:b1:
0a:8d:e6:41:ab:f4:65:b1:f9:ba:a4:3e:78:7f:db:
bb:46:af:4b:1b:bd:cc:36:eb:dc:96:51:52:55:0c:
f6:c2:7c:98:54:53:d1:6b:c3:9c:f0:01:56:2b:55:
ac:be:8d:67:8c:71:0c:b0:5b:43:df:25:9d:22:3e:
92:6d:a2:57:15:e1:27:9c:ea:3e:64:7f:1b:6b:9a:
5f:59:fb:b5:26:c5:b4:17:38:dd:ca:c5:12:00:d3:
27:4b:e7:47:f3:51:3d:e5:e8:e8:f4:d1:62:33:60:
e4:73:d6:82:8e:90:38:f7:61:ca:35:45:2b:29:ba:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:F1:B9:49:7D:5E:E3:40:C3:62:2C:EB:3E:99:57:8A:22:33:8F
X509v3 Authority Key Identifier:
keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.52.0/22
Signature Algorithm: sha256WithRSAEncryption
76:5d:41:7d:28:bb:1d:31:36:0d:36:fc:a6:34:94:17:39:9c:
2e:b0:8a:63:59:5c:86:75:da:56:c6:76:fc:76:2e:3a:ee:12:
81:6b:3d:94:5c:15:0c:18:0a:cf:9f:e7:88:56:49:86:f3:b6:
c8:2b:7f:0d:71:59:9e:6c:c8:8b:29:f2:ba:03:63:05:ca:fe:
06:0c:80:5f:10:10:4a:fb:56:de:5c:68:25:d4:16:32:c3:c4:
0c:76:70:17:d4:95:44:38:b1:b1:c5:2b:89:39:d1:b0:2d:36:
19:a0:0b:4c:66:fc:0f:83:b3:8e:bc:97:ae:07:af:e9:9a:59:
26:02:0c:9d:74:8a:b0:27:ec:ac:f8:83:f6:bd:be:8f:00:12:
fd:3f:05:29:f9:1b:98:30:bc:56:07:da:ac:dd:d0:7a:cd:4a:
4d:11:50:39:ae:4d:93:25:87:54:72:b4:8d:97:02:a2:10:67:
b2:f1:f1:3b:23:b2:34:eb:4a:63:2f:dd:7e:ce:63:34:a7:27:
11:58:14:f0:1a:f8:5a:7a:81:92:36:3e:3d:de:7d:9a:5c:16:
55:24:79:bd:5f:d2:09:45:da:e5:b7:64:e5:d7:d1:28:df:f0:
d2:83:57:83:f4:90:ed:51:9f:4d:13:48:ba:fe:99:2a:83:63:
16:4a:e5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:17 2025 by rpki-client