Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/PFyByii-LGzRSy90jiJ5mw1207A.roa
File: PFyByii-LGzRSy90jiJ5mw1207A.roa (raw, json)
Hash identifier: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=
Subject key identifier: 3C:5C:81:CA:28:BE:2C:6C:D1:4B:2F:74:8E:22:79:9B:0D:76:D3:B0
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 019424457E64A092B92722DEFF9B96A48588
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/PFyByii-LGzRSy90jiJ5mw1207A.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41954
IP address blocks: 185.142.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7e:64:a0:92:b9:27:22:de:ff:9b:96:a4:85:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c5c81ca28be2c6cd14b2f748e22799b0d76d3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:e7:68:14:0a:fd:42:6c:c5:7f:ea:e9:2e:
09:01:c3:ee:be:bf:6a:11:7e:69:0c:07:89:c2:90:
f9:72:05:ff:b0:67:9a:3c:2b:41:0f:b7:44:6b:ed:
cd:bc:30:f9:8d:fa:f5:bc:0e:ef:5c:32:7e:90:e7:
a7:47:e7:9a:0f:a9:c0:e3:ac:fa:57:23:32:db:91:
55:9d:b1:df:1d:6a:66:86:17:0d:60:17:30:74:94:
0b:34:bc:57:c2:c8:cb:0a:24:68:82:27:b3:91:3e:
a7:ed:a8:71:de:60:96:55:f6:40:fb:64:fc:5f:0f:
37:1c:60:d3:a7:e4:29:41:a8:6e:cd:03:c7:e9:5f:
08:ff:83:2f:34:ae:25:94:17:1f:21:f3:03:c0:5f:
6b:3f:1e:8d:5c:49:cc:05:81:1c:ef:84:c8:2d:04:
ad:f3:b3:50:fc:c4:5e:95:82:c8:a3:53:94:9d:37:
fd:80:0b:cd:ed:77:cc:f0:35:f6:e7:c2:15:10:c5:
de:6e:97:3b:39:d3:e9:85:45:bf:ff:1c:6f:80:99:
3e:7d:c3:6a:16:cf:46:04:0c:02:d8:50:57:f7:b8:
5c:20:6e:79:59:26:7b:60:4c:eb:0e:ee:b7:08:36:
70:ed:ed:fc:aa:32:7e:b7:c4:ac:a0:ce:2f:3b:1e:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:81:CA:28:BE:2C:6C:D1:4B:2F:74:8E:22:79:9B:0D:76:D3:B0
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/PFyByii-LGzRSy90jiJ5mw1207A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.218.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3e:bb:34:89:9a:af:e2:42:22:eb:54:af:70:4a:c9:e9:f5:
f3:80:69:2a:e3:60:87:c4:45:cc:6d:d0:df:5c:af:b1:f9:96:
59:1c:97:c3:44:01:73:85:12:6a:02:69:7a:ac:f6:47:71:e6:
96:9a:25:0c:81:ae:ee:68:fb:7d:36:7d:b2:1d:7d:da:0b:4e:
c9:c0:97:16:d1:af:1e:f6:f8:5e:54:fa:8b:24:f4:7c:a0:f6:
9b:c8:8a:b7:30:42:eb:db:ab:2d:a7:5d:fc:d3:93:35:bc:08:
62:cc:61:80:ec:19:20:9a:af:8d:87:94:d7:df:3a:aa:09:b7:
c7:c7:0d:31:67:5b:17:d8:b1:7a:60:5f:05:a6:91:3e:31:de:
3b:9d:7f:a4:ee:0d:b6:8e:aa:41:e3:2c:5e:20:59:e1:be:38:
1e:ff:de:42:b2:3a:10:54:62:8d:17:08:bc:94:37:dc:3e:5d:
fe:5e:75:6e:d7:a0:c1:f2:98:6f:68:cb:e9:3f:62:21:61:83:
6c:0a:cd:cf:c6:73:04:ad:ea:47:52:d2:2a:c6:d6:7d:3b:47:
37:39:37:ee:1e:b0:29:cf:2b:b6:40:9f:4e:97:66:34:06:4b:
fa:29:37:29:d9:83:e6:43:bd:b7:f7:a9:3e:d9:3c:f4:c8:82:
b2:e2:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:42 2025 by rpki-client