Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TRb8pyi7Cuvhki1ZqhqyxguwWG4.roa
File: TRb8pyi7Cuvhki1ZqhqyxguwWG4.roa (raw, json)
Hash identifier: kaRufk49tf+Opw8NLMJMjIb6AtSq5hMvYNyNYVlrtM8=
Subject key identifier: 4D:16:FC:A7:28:BB:0A:EB:E1:92:2D:59:AA:1A:B2:C6:0B:B0:58:6E
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B2449C59FDB2B2013B7BEAF06B8534
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TRb8pyi7Cuvhki1ZqhqyxguwWG4.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214886
IP address blocks: 185.242.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:44:9c:59:fd:b2:b2:01:3b:7b:ea:f0:6b:85:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d16fca728bb0aebe1922d59aa1ab2c60bb0586e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:81:e2:51:aa:6e:e8:3a:e2:a3:70:22:01:
e3:ba:88:6e:12:bd:bb:2c:38:a6:2f:c6:30:88:0c:
33:a7:36:e1:3e:58:a5:5a:0a:a8:31:7d:72:b7:f6:
03:ee:5c:31:a8:34:0d:d3:87:0d:0a:03:99:ba:0a:
23:3e:e3:90:02:c2:15:7b:ca:26:0b:fd:c9:c9:b3:
b4:2f:1a:aa:5c:5b:9f:ef:17:63:9b:7a:7b:cf:b0:
77:91:5c:d7:c8:dc:22:46:f1:cc:5a:3b:e3:cd:b5:
20:7e:9e:18:bc:75:8c:99:60:df:9a:59:2a:47:73:
01:25:01:db:5c:58:8f:0d:e4:95:55:7a:aa:d9:60:
a7:c6:82:e8:72:72:73:8c:8a:a6:76:09:dc:81:00:
29:93:e3:5d:1f:c1:ff:70:e4:17:9b:f0:bc:e2:18:
9a:18:8c:06:31:bc:9a:df:0f:d6:ac:38:34:a0:28:
d8:b9:70:bd:e8:5b:0c:c6:ff:4d:41:cf:7e:af:6b:
ec:99:1b:7a:a3:08:23:30:30:33:f5:6c:0b:22:36:
43:ad:0b:b7:81:6d:17:a4:7d:ab:76:1f:c1:97:c1:
1b:17:34:22:68:39:73:5b:88:22:96:22:1e:af:85:
78:5e:c3:a9:b1:cc:a7:7f:cb:34:46:ef:28:25:2d:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:FC:A7:28:BB:0A:EB:E1:92:2D:59:AA:1A:B2:C6:0B:B0:58:6E
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TRb8pyi7Cuvhki1ZqhqyxguwWG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:37:2a:86:21:70:f6:7e:ef:2d:30:51:c4:2e:16:6a:78:59:
ef:b8:92:6a:40:53:91:96:c3:ea:92:05:d0:6e:d0:78:68:1c:
b3:f0:b4:54:6a:ed:30:63:32:e9:c9:8f:4d:8e:b5:ec:47:f0:
f8:89:bb:e1:95:b1:f7:ae:4f:23:2c:81:5c:38:98:16:90:78:
6d:ca:ff:e7:91:33:19:43:bb:a3:25:b4:6b:b1:29:0b:c3:93:
fd:4c:07:74:4d:2f:09:52:53:bf:1a:13:c6:81:b0:02:f6:73:
46:9a:45:68:47:2a:77:08:2c:29:ee:62:df:ee:4c:e2:af:aa:
69:53:85:f3:a5:55:89:41:90:27:17:0d:38:e5:3e:31:1c:fa:
72:c5:c3:2c:9a:dc:ef:92:9d:84:1c:3c:25:90:93:9c:9f:a3:
ba:ec:ff:86:4e:10:bb:6d:48:25:85:69:ff:39:29:87:80:54:
0f:43:49:04:cd:95:3e:4b:e6:5f:39:56:68:47:22:d4:2d:da:
04:a1:0b:4d:cf:43:45:0f:8c:a6:60:4a:5c:6a:10:48:56:03:
62:33:e3:21:f0:12:82:b6:0f:fd:b2:8f:43:7c:33:ff:eb:24:
e4:5d:9e:45:79:40:42:b7:66:e2:79:eb:bf:78:f8:99:ff:23:
af:73:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:52 2025 by rpki-client