Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/D93WpefA2fEKH5CwkxHRVKVVGDE.roa
File: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (raw, json)
Hash identifier: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=
Subject key identifier: 0F:DD:D6:A5:E7:C0:D9:F1:0A:1F:90:B0:93:11:D1:54:A5:55:18:31
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F1077A220FAE8007F4E269F6F301E
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/D93WpefA2fEKH5CwkxHRVKVVGDE.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.148.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:10:77:a2:20:fa:e8:00:7f:4e:26:9f:6f:30:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fddd6a5e7c0d9f10a1f90b09311d154a5551831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:50:50:5f:c7:7c:a5:68:3c:34:18:b9:6d:
24:b4:84:90:44:b6:d1:a1:64:31:17:12:30:7a:8e:
38:3a:a3:78:58:58:63:86:c7:8b:59:c6:33:54:cc:
e2:67:db:60:52:37:93:9f:f9:5a:d4:8f:41:08:1c:
3f:32:e7:85:10:33:02:d2:cc:4b:93:dc:44:11:bc:
37:47:ad:68:b3:d6:71:e7:a9:3b:f2:48:96:74:13:
08:f8:ed:57:8d:63:59:e4:0b:69:5e:15:4f:b8:35:
bb:d6:7c:c1:73:98:5a:c4:23:d8:83:d9:c1:15:1c:
72:f5:ed:6e:89:1c:74:86:0e:2e:18:7d:06:19:8e:
42:9c:36:e8:f4:b8:7c:26:72:53:26:a4:c4:37:eb:
c3:74:4f:37:b7:f6:6a:b7:6e:ba:5f:98:1b:55:3f:
31:36:a6:90:84:a0:20:89:25:96:5d:2a:e8:2c:63:
48:1a:75:7e:ee:bc:2c:77:a3:68:d0:2e:6b:a2:9c:
ac:2f:bf:88:6f:1b:ab:7a:18:58:9f:83:02:66:91:
a2:05:2e:4b:e7:ae:4a:82:25:3e:96:d3:ae:8c:2c:
df:47:76:2c:9a:97:82:0a:7f:28:79:a3:8a:62:a3:
8d:79:76:6a:d0:96:a9:bc:58:76:3f:7a:66:36:f6:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DD:D6:A5:E7:C0:D9:F1:0A:1F:90:B0:93:11:D1:54:A5:55:18:31
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/D93WpefA2fEKH5CwkxHRVKVVGDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.71.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0c:aa:b0:ea:0e:98:12:fe:44:6c:62:7f:89:70:c3:00:33:
9b:04:07:fa:26:c3:cb:32:53:cf:8b:99:76:3a:ba:bd:ef:a0:
73:ec:db:06:04:c3:b9:bd:07:fa:3a:2a:f4:58:e0:37:31:34:
29:ce:d4:cf:6c:ee:7a:31:0c:f5:37:8d:bc:58:3b:c1:fe:7c:
28:d0:48:11:b9:69:a5:79:b9:33:6e:e8:96:1c:72:1b:3d:62:
8e:66:3f:80:03:ec:dc:f1:50:65:18:34:c2:82:44:bf:c5:75:
fd:8c:f5:d1:aa:d9:45:3b:cf:c2:53:60:50:c7:e8:a8:98:29:
0c:ec:88:49:cb:da:af:db:d7:79:c9:e9:81:f7:69:79:90:cb:
66:2e:43:2d:fc:14:20:76:b6:1a:cd:a2:71:0b:5b:57:62:01:
ae:26:7d:b2:0e:a3:24:46:d9:4a:c2:e9:ee:fe:48:bc:64:2a:
8b:ee:ff:f1:9c:1c:84:f8:ae:21:5a:df:82:74:b7:6c:4f:7c:
06:31:58:3e:09:ab:6d:7b:7e:65:eb:99:df:4c:4e:62:61:5b:
02:ea:02:90:7f:be:7f:1c:f0:f2:1e:09:af:c0:22:5a:d3:02:
bc:89:7a:92:3f:45:3d:e9:0d:55:e7:6f:8c:a8:6e:37:4b:f5:
c7:a6:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:42 2025 by rpki-client