Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/fKWVJTY44C7pCGjwUOliWqaQJVU.roa
File: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (raw, json)
Hash identifier: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=
Subject key identifier: 7C:A5:95:25:36:38:E0:2E:E9:08:68:F0:50:E9:62:5A:A6:90:25:55
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 0195B00D356DCE1C65F9A042998406CD1D13
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/fKWVJTY44C7pCGjwUOliWqaQJVU.roa
Signing time: Wed 19 Mar 2025 20:16:50 +0000
ROA not before: Wed 19 Mar 2025 20:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 185.241.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b0:0d:35:6d:ce:1c:65:f9:a0:42:99:84:06:cd:1d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Mar 19 20:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ca595253638e02ee90868f050e9625aa6902555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:f8:c4:4e:2b:67:47:91:f2:bc:9b:dd:9e:
69:4f:63:c1:57:3b:57:62:f5:55:b4:9f:62:28:ba:
3b:0f:b9:d7:66:19:cf:fc:35:4f:05:f3:08:7b:2f:
24:7e:1c:c5:1a:43:82:6f:eb:db:56:8f:2a:24:0e:
45:f8:97:2e:3a:54:98:d1:f1:3c:48:bd:0e:e5:eb:
73:a5:94:38:69:a5:60:95:57:13:3b:3f:f8:4c:fe:
c7:55:3a:67:67:55:62:e0:1a:51:a3:84:e4:70:66:
63:1e:22:a7:e2:2a:7e:62:01:03:ca:11:c0:92:95:
cc:7d:6e:60:67:75:07:8d:68:4c:0e:e3:92:5d:38:
3d:b8:e7:93:9d:ce:f5:2d:e3:be:0e:6f:03:02:fe:
d6:0f:43:54:1e:65:44:f4:73:39:79:dc:4e:91:7e:
18:84:0e:3c:e8:a1:a6:f7:94:20:03:47:9e:9f:d4:
6b:29:8f:ae:6a:53:0a:c4:b0:83:3b:3e:c6:28:e0:
fb:fd:e8:98:d2:53:9f:f7:52:3c:f6:4b:46:64:b1:
7d:9c:31:8f:d7:43:69:d8:cd:ec:23:12:42:7b:42:
15:b2:fe:d0:01:48:e6:8d:b4:ba:88:d9:c0:95:0b:
67:33:5f:fe:50:c5:02:39:72:e0:e7:78:f1:fc:c4:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:95:25:36:38:E0:2E:E9:08:68:F0:50:E9:62:5A:A6:90:25:55
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/fKWVJTY44C7pCGjwUOliWqaQJVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.39.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cc:a4:1c:2c:98:ce:66:fe:97:8c:e5:a9:ec:25:7f:31:b5:
5c:bb:55:5c:68:7e:15:f7:7e:9a:79:8b:62:6d:f8:6a:ae:be:
4e:ca:d1:7a:dc:20:24:98:53:36:e7:0b:71:f7:79:6d:20:21:
ee:7a:49:15:46:1e:49:7a:43:6e:d9:cf:69:49:e1:15:8e:76:
53:5e:27:52:d7:95:ee:bd:41:37:b8:79:11:1f:da:4b:3f:40:
6e:ca:ac:08:a7:3b:86:a7:6c:72:40:43:9f:d0:20:a7:2f:7a:
78:72:71:b4:0c:6a:47:73:dd:f3:b6:7c:2e:42:ef:cd:20:3f:
d2:21:d0:ce:fa:bd:db:8e:2b:2e:50:52:44:10:9c:59:e7:cc:
97:46:06:03:00:1f:84:9e:56:5b:8f:56:a7:a5:6f:08:ec:b9:
be:d3:33:e9:c7:1e:27:f5:29:18:10:21:99:63:77:9f:9b:ad:
2c:93:fa:99:ea:27:83:5e:57:10:22:57:62:68:13:24:02:cf:
b6:c9:00:fc:a1:ec:5e:89:1e:bf:fe:3d:91:31:52:ed:8e:32:
2c:09:38:33:d7:7d:e2:6a:68:47:2a:d6:8f:79:80:f3:24:9a:
21:d9:a4:84:43:51:2c:2d:09:09:6e:be:e6:dd:b8:03:1f:a9:
ad:96:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:57:52 2025 by rpki-client