Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/L_lziZvf0rcW2nhVL69U2cxHt5E.roa
File: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (raw, json)
Hash identifier: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=
Subject key identifier: 2F:F9:73:89:9B:DF:D2:B7:16:DA:78:55:2F:AF:54:D9:CC:47:B7:91
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019427485E21E06A85B1178A1E9B29C0A295
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/L_lziZvf0rcW2nhVL69U2cxHt5E.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51491
IP address blocks: 185.33.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5e:21:e0:6a:85:b1:17:8a:1e:9b:29:c0:a2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff973899bdfd2b716da78552faf54d9cc47b791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:a2:69:52:94:ea:3d:b0:08:a8:bc:5f:58:
17:91:e5:8b:c3:d8:d0:18:5c:32:96:87:db:6f:eb:
f8:1a:d8:e9:e1:44:1e:ba:22:0c:f8:81:71:80:25:
a4:d7:20:14:cf:26:29:23:bf:7a:0a:4a:73:b3:4f:
79:7f:b4:c4:a2:19:5b:a5:19:a9:09:41:74:12:68:
23:c3:56:c3:65:38:ec:1a:bb:2d:00:d8:f6:98:62:
23:a3:97:d7:cc:0f:e7:bc:57:b9:92:3a:27:80:c8:
be:92:cf:32:8a:b0:f3:96:d2:84:c8:c0:91:ff:e9:
77:02:a1:60:18:4d:0a:7d:cd:40:d4:81:f4:fd:91:
16:3b:77:00:dd:cd:4f:10:e5:f1:9c:a3:6b:9c:3a:
56:2c:f4:ee:5c:01:7d:87:c9:86:01:91:03:58:2e:
7c:43:e5:1d:3c:23:1f:51:f5:3e:b2:a8:73:a8:5b:
7a:9f:97:2a:ed:02:66:2c:3c:1e:ec:b8:8d:57:2d:
63:b0:ba:5e:b5:f1:a3:1e:00:a6:dc:e7:83:41:ea:
fa:60:36:e3:ef:f3:c6:85:e1:fa:38:98:2b:dd:31:
91:15:6b:f9:83:2b:92:3c:4a:6c:85:e3:6d:83:05:
87:04:d3:6f:e6:92:bd:59:1d:67:d0:1e:b1:ee:74:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F9:73:89:9B:DF:D2:B7:16:DA:78:55:2F:AF:54:D9:CC:47:B7:91
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/L_lziZvf0rcW2nhVL69U2cxHt5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.184.0/22
Signature Algorithm: sha256WithRSAEncryption
01:24:40:bc:cb:55:23:82:4c:94:f1:7d:f7:bd:8d:29:d1:78:
e1:1f:7b:1f:67:5b:02:bd:ed:37:4d:76:2c:48:41:bc:b9:03:
f7:d9:79:67:ed:64:cb:6f:1a:26:7b:43:1d:98:21:d5:3e:dd:
de:29:85:29:8a:1b:f5:aa:48:93:96:d9:0c:cd:3f:0f:03:d9:
79:5b:50:e8:b7:04:18:6b:8b:7a:3e:57:02:97:a9:55:85:77:
28:87:32:42:ca:e1:d0:01:b8:6c:b7:34:6a:b3:5a:26:46:28:
f9:c1:b4:80:ef:a3:76:77:8d:f9:ba:a9:7f:27:10:f4:96:30:
dd:46:d7:e4:7d:12:68:1f:8f:ac:27:21:09:ba:fb:6c:15:57:
06:7f:33:fa:d5:8d:6f:57:08:b6:91:db:d9:b9:96:19:6b:26:
70:d3:01:dc:e8:59:7a:b9:b0:19:61:69:f8:b7:a9:b2:76:f9:
ef:f8:f1:89:7f:97:18:93:1e:ac:29:a9:98:ab:3f:2c:61:0f:
0f:b7:65:91:f3:a0:79:84:43:43:2b:c6:27:3a:5b:0e:97:26:
1b:b2:51:83:45:4d:8b:91:78:8e:02:1c:9e:e6:11:7c:8a:f4:
9e:39:b3:7c:5b:1d:a4:f5:4b:5c:58:64:61:bc:3f:cd:6d:4f:
14:0a:d5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:35:50 2025 by rpki-client