Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/X35BdP6fZcPzqxMLjnciq7uISgs.roa
File: X35BdP6fZcPzqxMLjnciq7uISgs.roa (raw, json)
Hash identifier: X6IFONVs0ZqJ9lk+Np5sgqP+DTo255gzewtTiaP3PC0=
Subject key identifier: 5F:7E:41:74:FE:9F:65:C3:F3:AB:13:0B:8E:77:22:AB:BB:88:4A:0B
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 0194244492674B6997C8C6861F1827452655
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/X35BdP6fZcPzqxMLjnciq7uISgs.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.107.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:92:67:4b:69:97:c8:c6:86:1f:18:27:45:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f7e4174fe9f65c3f3ab130b8e7722abbb884a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:53:cc:ff:d7:e1:58:ab:54:d1:73:72:74:
73:c5:08:c1:91:62:46:4f:d9:65:7e:1b:5e:0a:f6:
5e:0a:9d:cc:47:c4:c2:02:50:d1:02:44:1b:eb:77:
61:fa:59:b1:23:3b:3e:35:1a:49:7d:c2:d2:57:2b:
ff:52:23:af:8c:76:cf:26:28:fd:03:a9:ad:cc:27:
fb:68:ae:1e:39:bd:e6:74:5e:f5:d3:f4:43:01:0c:
34:41:d8:a0:76:8f:3f:e4:c7:fe:ff:db:44:df:ee:
2c:fa:f4:e3:a7:a3:d7:36:21:29:35:c1:d1:24:16:
03:94:9a:35:80:96:f9:94:5e:55:fb:47:f3:80:81:
64:a0:f6:db:ce:f5:3e:30:38:28:53:cd:43:08:9d:
01:39:7f:60:4b:c1:d3:1a:98:1f:33:e1:93:c6:18:
dd:b1:f5:02:26:88:78:0b:8b:d1:03:f5:b2:92:88:
06:aa:ff:f1:2f:d4:f0:5a:d2:8b:fe:b4:5a:22:11:
bf:05:c0:8a:31:1e:c3:e3:ce:c9:52:9e:11:1d:79:
2c:49:25:55:aa:81:9a:b0:8a:c6:c2:58:a2:f5:17:
c9:be:2f:82:23:f4:53:39:97:60:7f:46:d1:03:8f:
7c:94:97:02:19:e4:cf:00:06:6a:a3:d3:f2:03:8c:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7E:41:74:FE:9F:65:C3:F3:AB:13:0B:8E:77:22:AB:BB:88:4A:0B
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/X35BdP6fZcPzqxMLjnciq7uISgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a9:94:15:a7:af:70:87:66:34:7b:e5:16:2d:8a:be:0b:45:
7d:c2:12:56:05:cd:8c:b8:11:ac:fc:93:d6:dd:26:91:77:ff:
e5:c3:4b:77:8e:f1:38:ee:4a:41:0f:1b:dc:dc:a5:dc:4e:a7:
4d:99:f7:28:70:e2:6b:9e:8c:ae:61:8e:96:b2:15:63:b9:2f:
a5:66:07:20:25:8b:72:03:09:d8:bc:6f:05:d5:5b:c8:8f:70:
75:15:d0:1a:34:c4:d8:11:d6:7e:dd:18:5f:9b:8e:ac:c1:44:
34:ae:86:53:a1:85:20:bc:a4:c9:6e:65:a5:2d:e2:65:3a:14:
49:3a:eb:f3:4f:08:50:8b:5b:e9:59:6c:94:51:7c:05:a7:08:
96:d9:41:c3:26:2c:b9:27:4b:62:9b:49:3f:e2:4f:fc:7d:72:
a4:1f:35:f4:fc:7b:27:55:8d:7b:e6:05:de:b7:83:17:de:4d:
1f:6d:29:69:a3:75:3f:26:54:48:d5:20:f4:9d:b5:cf:e1:df:
63:e7:10:21:6a:b4:6a:48:22:3a:67:48:1b:86:00:a0:3b:88:
e5:72:2b:25:8e:02:42:b9:59:0b:16:77:71:66:3e:00:d1:f3:
62:d2:d0:9b:24:2f:1d:4c:1a:3b:75:dc:80:2b:15:3e:0d:13:
ad:34:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:40 2025 by rpki-client