Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/D5iZPHtIHYKSLlUoRqhHam3z4fw.roa
File: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (raw, json)
Hash identifier: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=
Subject key identifier: 0F:98:99:3C:7B:48:1D:82:92:2E:55:28:46:A8:47:6A:6D:F3:E1:FC
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 01942220036923CDE10BDB71B9B6E5A08E0A
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/D5iZPHtIHYKSLlUoRqhHam3z4fw.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273218
IP address blocks: 185.75.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:03:69:23:cd:e1:0b:db:71:b9:b6:e5:a0:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f98993c7b481d82922e552846a8476a6df3e1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:d2:fa:54:35:68:c7:0f:4c:32:15:c3:4e:
77:f7:e1:7f:ed:6f:0b:07:58:0d:7f:b4:1f:3b:1a:
36:16:70:27:87:d0:49:c1:57:01:9b:bf:ab:a7:40:
fc:ce:c5:5e:9a:9e:61:3a:93:d6:24:76:3d:83:fc:
39:85:56:96:73:99:e4:26:98:ba:da:17:c6:1f:d6:
72:82:79:ee:0f:28:55:13:16:85:0c:f7:0f:03:43:
06:13:a1:57:fe:a5:da:f5:77:79:8e:99:4a:d5:5e:
ab:83:86:65:d7:71:b9:99:1a:b7:e6:e7:69:70:cf:
0b:60:e3:f2:b3:ad:12:59:99:24:0c:bf:85:ae:f8:
c3:c0:00:da:3b:39:9b:79:72:1f:a2:9a:ff:83:35:
c3:22:59:3e:66:e3:5a:26:2a:c1:e1:a4:26:f4:ab:
76:89:23:52:c5:b4:86:58:b4:d9:1d:5e:0f:c7:5d:
df:39:48:c9:00:c7:71:e4:45:7f:05:10:63:35:8e:
22:c7:ba:af:c7:10:03:00:26:9c:2f:eb:36:53:34:
6f:f7:ba:51:10:bb:ba:ff:54:71:ca:67:7c:0f:65:
8f:c6:af:89:83:00:74:a8:71:9c:1c:58:2b:7b:d6:
dc:49:9c:01:a4:eb:8a:12:e1:65:6b:e4:e4:74:6e:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:99:3C:7B:48:1D:82:92:2E:55:28:46:A8:47:6A:6D:F3:E1:FC
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/D5iZPHtIHYKSLlUoRqhHam3z4fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.12.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8d:a8:7a:58:b6:a8:ea:05:f3:00:dd:3e:3c:d1:06:24:29:
e2:64:56:07:60:8e:76:76:4e:3a:3d:9a:b9:10:97:4a:35:3c:
82:1d:4e:18:fd:63:69:33:24:45:98:08:49:9a:cb:47:b8:a5:
39:4e:a4:55:1b:63:5e:bb:df:fc:d8:98:c8:8a:a8:52:06:3b:
4f:98:a1:35:9d:45:37:4d:18:2a:9b:11:e3:76:06:73:06:e0:
8f:a2:d0:bd:86:b0:24:ed:4f:cb:9c:73:a4:ba:a1:6f:ec:ba:
ae:7d:fe:92:d2:e2:ef:da:f6:e8:2c:95:b7:2a:5f:c1:d7:d4:
66:e3:78:db:3a:72:e7:79:ea:19:41:0a:e5:95:5c:3f:de:c4:
ca:29:0e:28:05:fe:7b:b0:33:19:53:f4:6e:a7:9e:f7:ec:87:
49:6f:2a:2d:be:45:81:ac:5e:3d:57:34:05:c6:7e:9a:5e:72:
cd:76:fb:c9:b3:83:01:d4:bc:ee:69:ad:c8:f6:57:b9:97:b4:
09:85:bc:9a:3e:25:94:66:49:67:ad:d8:52:02:a5:26:9f:98:
8f:c8:d1:d9:1e:d3:1a:c7:bf:8b:a0:ac:fb:d3:d1:b1:15:68:
5d:65:b8:ab:cb:42:5e:81:47:85:5c:f4:c2:7a:aa:e7:fb:92:
12:ce:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:00 2025 by rpki-client