Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa
File: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (raw, json)
Hash identifier: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=
Subject key identifier: A6:5C:19:F6:5D:25:56:D5:9A:F1:EA:D9:AB:A9:C4:F8:77:E2:2F:96
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019425FD85EAC68268E125F13F6120629E61
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa
Signing time: Thu 02 Jan 2025 07:49:19 +0000
ROA not before: Thu 02 Jan 2025 07:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.210.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:85:ea:c6:82:68:e1:25:f1:3f:61:20:62:9e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a65c19f65d2556d59af1ead9aba9c4f877e22f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:6b:d3:32:21:b4:b0:ec:f3:78:b1:ae:b0:
b4:d9:bf:bd:59:70:4a:7a:b0:6d:95:0d:40:cc:26:
48:f7:9f:d6:bd:db:4e:ff:bc:4e:74:25:03:57:fd:
0b:4c:44:09:3d:c8:37:00:a9:db:43:e2:d1:61:c5:
ad:80:a9:ac:f2:eb:72:7f:b2:5b:85:b2:87:de:59:
6d:0f:b9:a7:9a:47:ea:6b:42:3d:db:97:57:f0:d2:
07:b5:c2:3b:dd:bb:88:91:0b:25:ab:b2:97:09:a3:
21:f9:cb:ce:b4:62:a3:1b:ae:49:c1:23:02:9c:56:
79:93:55:41:8d:ed:9b:e5:62:84:33:a8:be:72:51:
26:68:35:d6:d0:ec:cb:c4:57:95:50:9e:2a:1f:9c:
07:75:ee:f9:0e:d1:d9:dc:c2:24:e0:7f:86:7c:29:
ab:48:af:23:5a:1d:07:9b:57:71:b0:be:41:e3:37:
ca:75:c2:11:27:c2:2d:be:c3:6a:db:c9:b0:b4:47:
59:5e:35:ec:66:c7:30:79:50:5e:53:66:5c:d6:35:
5f:32:de:28:85:a0:f5:25:ab:6b:4d:94:10:ab:38:
8c:e4:7f:15:c9:f1:0e:67:84:6b:11:c3:da:62:14:
61:5f:45:3d:21:65:b1:a3:ef:56:4d:61:c1:2b:8a:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:19:F6:5D:25:56:D5:9A:F1:EA:D9:AB:A9:C4:F8:77:E2:2F:96
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:df:e4:06:e0:4d:97:4f:c7:fe:70:95:69:e2:ab:d1:4d:d5:
a7:c9:63:18:0e:8d:e9:1a:7e:ce:50:4b:3e:0d:78:f5:4c:04:
29:b1:df:44:4f:72:f3:8f:8a:34:27:a2:f5:26:78:dc:66:10:
2d:73:0d:bb:af:d5:7d:c6:80:fd:07:0c:5e:79:08:1e:3d:26:
05:af:2f:6a:4f:6e:96:19:9a:8b:dc:73:77:ed:2e:4d:4b:c4:
71:37:a5:34:a0:2b:6b:b1:40:56:2f:04:d7:3a:d0:34:dd:e5:
f6:8a:ee:f7:af:d0:d4:d7:8b:0d:95:7e:f7:f3:2c:37:2e:6c:
88:53:c5:37:6e:03:4c:1c:a6:7c:40:32:39:12:88:0a:51:c9:
aa:e9:96:1b:2c:86:7c:dd:14:5f:b5:96:6f:b2:9e:3d:5f:b9:
58:12:8e:74:54:a8:81:f7:33:9a:4c:11:e4:7a:41:dc:b4:d8:
d3:e4:06:8b:13:f2:cf:6b:63:21:3f:1b:b8:0b:35:6f:b8:62:
b0:27:e3:cc:98:e3:56:05:51:1f:0b:b4:3d:5c:21:28:22:c0:
17:c7:44:01:ad:2f:96:87:5f:4c:78:d9:50:7c:fc:65:25:95:
67:b5:64:87:1c:f1:b7:a5:d4:03:df:e0:25:88:cb:0c:c0:13:
84:6a:7a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:39 2025 by rpki-client