Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/19DAfGYliqkV5rJhmPSe7AQ3rQM.roa
File: 19DAfGYliqkV5rJhmPSe7AQ3rQM.roa (raw, json)
Hash identifier: RrF/17deSuUc84uxsxDOgjgN/+mfc8wZ2qVKfPt2gdU=
Subject key identifier: D7:D0:C0:7C:66:25:8A:A9:15:E6:B2:61:98:F4:9E:EC:04:37:AD:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C16DDE3669B969660AFF0AF05C6C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/19DAfGYliqkV5rJhmPSe7AQ3rQM.roa
Signing time: Thu 02 Jan 2025 17:51:24 +0000
ROA not before: Thu 02 Jan 2025 17:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213893
IP address blocks: 185.218.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c1:6d:de:36:69:b9:69:66:0a:ff:0a:f0:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7d0c07c66258aa915e6b26198f49eec0437ad03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:d1:a0:0c:11:3a:1a:0b:f8:8b:8d:e4:1d:
6e:2d:12:f5:26:71:c4:75:53:2d:3f:51:7c:8c:b8:
c8:9e:a3:12:75:6e:56:00:82:17:c5:1f:cd:22:00:
c0:fc:21:d3:b1:cd:0d:7a:ac:6d:97:35:f2:85:e9:
14:54:ad:90:8f:69:e7:c0:96:38:0c:72:e6:8a:86:
db:05:05:e0:7e:89:89:f3:66:8b:14:25:53:5b:5e:
9e:f7:56:7e:3a:e9:4a:72:ad:70:bd:0b:f6:a4:73:
12:75:c4:d8:f3:78:96:0c:5c:49:8f:68:2b:32:7c:
94:8e:5a:9c:17:08:2d:97:b0:67:be:b6:b9:33:df:
e2:d5:51:99:52:4f:4a:77:cc:a9:63:ef:43:e9:ad:
07:50:62:c4:c3:b7:ab:71:30:1b:2a:ab:9f:6b:50:
0e:2c:2f:87:26:07:ad:ac:d4:cd:f3:a7:ea:f3:a1:
6e:c2:40:2c:67:24:8e:6f:3f:c2:65:55:f2:4f:8b:
a3:69:e3:54:58:9f:fb:7d:5c:8e:f3:06:33:90:12:
77:3e:bc:6f:04:b2:b7:71:b3:63:89:24:62:b7:8b:
e1:fd:81:e3:5e:3d:33:5e:84:7f:83:e1:66:07:c9:
a1:0e:f0:1f:44:b6:da:0f:63:ad:d5:ff:82:02:92:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:C0:7C:66:25:8A:A9:15:E6:B2:61:98:F4:9E:EC:04:37:AD:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/19DAfGYliqkV5rJhmPSe7AQ3rQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.137.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c2:f2:0a:58:a4:6f:8d:48:b1:b2:55:44:85:2d:f4:32:15:
b4:f0:27:f0:c1:8b:79:cd:5c:64:35:e1:07:02:45:52:e4:2b:
23:e5:b5:bd:8b:32:f3:40:0e:f5:ac:d0:32:66:47:d6:64:97:
65:a7:f8:26:3c:11:46:3d:d0:dd:64:f9:c8:30:37:10:30:88:
60:c0:f6:2d:9b:b4:dc:f1:94:05:37:fb:65:08:36:66:45:5e:
84:b1:20:56:23:83:19:6c:5e:54:7e:1a:df:44:f4:86:2a:6d:
91:d4:58:8b:22:eb:4e:2e:47:80:51:60:ef:bb:a5:22:de:9e:
62:37:a6:b9:6e:f2:75:f1:12:10:c2:41:b9:c3:37:91:96:75:
7e:c5:30:a7:e2:bb:f4:04:21:f9:00:10:21:4d:0b:43:a0:0a:
58:54:68:59:62:5c:eb:23:90:f6:6b:f3:75:93:9d:fc:58:54:
ba:49:42:f9:f9:f4:cb:44:c2:75:9f:45:d5:3f:e3:10:40:90:
77:da:2d:99:5a:31:ba:28:9e:14:34:ce:f2:da:4e:f0:56:33:
c9:82:a8:08:71:70:19:c2:dd:1e:cb:82:4d:13:09:e8:0c:5f:
18:e2:02:95:ae:83:ea:ce:ba:64:ae:e1:fe:98:60:8f:33:1a:
ae:77:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:27 2025 by rpki-client