Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/k2hJkZDc_xeXo7A97oeeqJQmzBY.roa
File: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (raw, json)
Hash identifier: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=
Subject key identifier: 93:68:49:91:90:DC:FF:17:97:A3:B0:3D:EE:87:9E:A8:94:26:CC:16
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019427482E58E6D7C28A3E917A7BAA3C2B89
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/k2hJkZDc_xeXo7A97oeeqJQmzBY.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.82.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2e:58:e6:d7:c2:8a:3e:91:7a:7b:aa:3c:2b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9368499190dcff1797a3b03dee879ea89426cc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:17:4f:0b:52:cb:f2:90:cf:0d:67:26:03:
45:c4:98:17:33:56:23:02:bb:83:32:1b:f8:e5:66:
82:6b:8c:f6:dc:8a:32:61:4a:73:d6:c0:f9:a4:6d:
c0:a9:57:68:a1:ee:12:60:ed:69:47:a9:43:02:c8:
ce:a4:48:6d:5a:88:cd:ba:79:1a:9f:36:1c:61:e8:
51:d4:eb:3f:47:ff:3c:6d:51:a3:69:8a:2a:2e:d0:
71:be:62:b6:9b:f2:b5:bc:91:98:1c:63:98:12:ba:
e5:41:72:29:42:d4:7c:aa:a5:90:91:10:c2:c2:f3:
6e:ea:c5:bb:9a:5b:d5:60:7f:92:29:62:eb:6a:ba:
d3:48:75:ae:be:ea:17:ba:7a:2f:d9:7e:5f:f8:b0:
09:a6:f2:e6:0d:5a:9c:8a:52:bf:13:cc:c1:58:0f:
14:7f:d7:43:07:e2:ef:4e:1f:4b:bc:b5:89:85:ca:
d0:41:e9:e8:58:43:86:9f:ea:50:2a:76:13:1a:3e:
93:28:e9:da:52:5f:20:b6:f3:a5:ba:4a:8d:a3:38:
39:38:c5:45:97:77:e7:65:f1:97:3e:18:a1:0e:4e:
ae:61:d1:4c:60:18:1a:d6:cb:31:92:60:dc:e8:58:
58:6b:b8:2a:7f:86:7a:04:73:b1:7f:42:ad:77:d0:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:68:49:91:90:DC:FF:17:97:A3:B0:3D:EE:87:9E:A8:94:26:CC:16
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/k2hJkZDc_xeXo7A97oeeqJQmzBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.48.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8a:79:bd:89:74:59:7d:82:bf:5d:5d:22:0b:49:19:74:26:
cf:e2:a1:f9:cb:84:67:5f:88:52:00:1a:d2:3f:15:39:2d:2e:
be:48:81:73:fd:13:46:a4:fe:bc:f2:1b:2f:4e:3d:f2:1c:16:
21:08:0b:3d:33:9a:93:2a:74:f1:17:bd:31:90:1c:78:ec:a8:
e9:f2:f8:e2:57:90:2a:4b:34:86:a8:ca:5e:2b:1b:1b:ef:ab:
7c:47:cd:58:df:fe:c3:aa:0b:64:a2:17:71:c4:65:02:0b:d3:
19:e5:cb:6f:1d:08:26:3a:3c:1e:85:12:04:a3:84:5d:d7:cd:
98:2f:38:e6:17:d9:19:ec:84:7a:9a:c8:c1:7c:3d:34:33:90:
35:6a:68:11:b6:f6:d9:fb:45:ef:80:3c:51:45:c2:0b:9c:0f:
ac:4f:d7:f2:52:5d:a5:7f:bc:71:11:25:60:a6:4f:f2:cf:ee:
54:ea:4b:24:cd:01:6b:97:82:b1:f6:88:0e:bc:a3:21:99:3c:
02:3a:9a:db:ce:47:56:e8:d3:f4:4d:06:24:06:cb:c0:d0:fb:
1b:81:37:41:a5:64:3b:0b:16:ca:ff:a8:dc:bd:50:82:71:7c:
1a:68:23:cb:0d:12:4a:c5:71:76:45:09:6e:f1:49:b0:17:e9:
a9:7c:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:52 2025 by rpki-client