Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/PaGXnno3vgfbNXwyjeEIYw218dQ.roa
File: PaGXnno3vgfbNXwyjeEIYw218dQ.roa (raw, json)
Hash identifier: 1WHWIO7GjSeDkHrz9g0N/ijvmexmZHQZsK2xnmSDU58=
Subject key identifier: 3D:A1:97:9E:7A:37:BE:07:DB:35:7C:32:8D:E1:08:63:0D:B5:F1:D4
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 018CCA2B64B72E4AAED1B834D99554CA90AC
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/PaGXnno3vgfbNXwyjeEIYw218dQ.roa
Signing time: Tue 02 Jan 2024 12:34:50 +0000
ROA not before: Tue 02 Jan 2024 12:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42296
IP address blocks: 185.240.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:64:b7:2e:4a:ae:d1:b8:34:d9:95:54:ca:90:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 2 12:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3da1979e7a37be07db357c328de108630db5f1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:7f:2b:e1:d7:82:e8:72:4c:e0:ed:b9:52:
a7:51:0f:28:11:0b:67:f4:d8:1c:d8:2c:50:6d:24:
9b:b1:e5:ee:85:01:6c:71:75:0c:3d:ab:29:4a:f7:
31:55:37:9f:e0:be:15:06:a2:cd:03:8d:a6:dd:49:
c8:57:ee:11:c8:5d:27:cd:44:74:cd:50:e6:82:9f:
a9:ee:5f:ef:56:e8:bb:cd:88:2a:38:07:b5:14:05:
ad:3a:64:d8:44:07:6c:24:50:d6:55:1a:91:f2:77:
45:8b:bf:93:a8:d6:77:f1:e2:2d:71:28:2f:28:33:
d1:59:28:6e:52:73:80:6c:5b:fc:d8:b0:ea:c3:80:
81:52:5f:5c:b8:c7:87:b7:42:4a:ab:04:76:87:50:
e6:50:6a:c4:a4:b1:f6:93:c0:5d:62:6b:ad:0e:37:
95:fb:35:9f:11:01:9b:9c:99:5e:d6:0f:03:0e:80:
b9:36:c9:e5:0b:e8:01:5d:aa:89:20:bf:7f:2e:f6:
45:45:6e:60:cf:50:a1:c9:fe:7a:81:1c:1a:14:25:
57:da:d6:05:08:30:9f:a2:f3:14:41:a7:df:e0:88:
6b:37:3c:7d:83:0f:c5:de:0a:b4:28:71:a8:ea:6e:
55:73:fd:c3:bc:fe:78:1d:60:2a:46:d8:48:d1:c2:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A1:97:9E:7A:37:BE:07:DB:35:7C:32:8D:E1:08:63:0D:B5:F1:D4
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/PaGXnno3vgfbNXwyjeEIYw218dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.253.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5a:00:11:69:a7:b3:94:b6:a2:44:f9:1b:ab:93:82:cb:ae:
b5:a1:ea:f1:12:61:1d:3a:7d:0c:9d:a9:d1:53:e5:29:6f:d2:
6e:f8:ad:9d:c7:9b:f6:c4:15:64:03:0e:cb:3d:65:52:2b:3c:
da:96:3b:7d:f3:09:a3:eb:4d:ce:13:83:66:1d:bf:07:6b:80:
e1:e9:2d:21:2b:6d:f4:10:cc:a4:51:c5:65:86:9f:65:ed:1c:
d8:38:7f:ad:26:07:df:94:be:60:0e:fc:73:15:7c:28:ea:ec:
02:8f:b3:8a:77:df:4e:89:55:a2:37:96:e6:ca:dd:28:37:55:
1b:e4:b6:f9:7a:58:bc:0a:b8:34:b4:1d:7c:fa:13:3d:69:48:
ed:32:fb:ed:4a:af:78:26:54:7e:b9:15:81:f8:fa:ce:76:00:
3e:97:99:0a:2f:d1:d1:db:de:b4:ef:53:8e:f4:0c:f3:eb:0d:
4a:1a:eb:75:b9:09:33:bf:4f:32:83:02:28:ca:82:01:05:f5:
e2:65:b3:76:49:78:2d:44:e5:cd:17:71:a5:9b:33:18:50:ba:
5b:9e:fe:10:2e:24:74:03:78:8d:06:4d:d7:d4:7e:47:39:2d:
45:a2:9a:dc:c0:d1:e2:1c:fc:45:f4:e9:bf:b4:58:a0:4e:a1:
0d:9a:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:32:16 2025 by rpki-client