Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/RLjtO4WLws3MKarmpX3B79Pzmv0.roa
File: RLjtO4WLws3MKarmpX3B79Pzmv0.roa (raw, json)
Hash identifier: RLl60cZgFxu9a6NXLgyb6ecIzVhRlbdWbPk9gmn7AP4=
Subject key identifier: 44:B8:ED:3B:85:8B:C2:CD:CC:29:AA:E6:A5:7D:C1:EF:D3:F3:9A:FD
Certificate issuer: /CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Certificate serial: 019428230D52B37AAB2380B147828F7CEBE8
Authority key identifier: E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/RLjtO4WLws3MKarmpX3B79Pzmv0.roa
Signing time: Thu 02 Jan 2025 17:49:33 +0000
ROA not before: Thu 02 Jan 2025 17:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398273
IP address blocks: 185.34.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:0d:52:b3:7a:ab:23:80:b1:47:82:8f:7c:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Validity
Not Before: Jan 2 17:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44b8ed3b858bc2cdcc29aae6a57dc1efd3f39afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:6a:ef:e2:22:85:5f:62:83:5a:c4:96:a1:
a3:79:8a:66:31:07:f7:2b:1c:6d:6b:24:04:6d:70:
1d:e1:e2:24:7c:8d:8d:29:b8:a3:a5:64:0d:e1:04:
1a:eb:5e:b8:4f:14:11:38:33:cc:5e:e4:21:1c:1f:
73:0b:e2:b2:10:29:88:81:34:95:2f:37:e5:86:39:
b6:51:76:8b:a9:ab:4c:eb:f3:8e:da:a6:97:99:ab:
37:57:2d:72:82:bf:3b:4e:7b:cb:78:d8:16:ce:73:
89:51:d8:29:34:b0:f1:92:af:32:e0:45:2e:77:ee:
42:76:cd:2c:71:38:58:24:cd:62:17:47:b2:f3:52:
b5:32:fc:78:37:6e:f8:2a:4a:3b:75:c8:18:61:03:
a7:fb:08:ca:c6:19:9e:bb:32:dd:c5:ba:94:db:6c:
fe:bd:1b:d3:90:14:2d:ab:8f:46:a0:3e:5f:23:68:
46:10:f8:bc:65:30:43:14:76:f1:8e:eb:d3:4e:86:
dd:de:74:0d:fc:40:a5:98:7d:19:8d:48:95:b2:f5:
ab:3d:86:3b:14:1b:6a:7a:48:6a:94:c7:2a:1c:4c:
fc:7f:3d:20:7b:55:a4:bc:f2:13:09:08:0f:83:77:
aa:fc:af:32:34:cb:58:a9:86:23:c3:8a:9e:c4:b5:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B8:ED:3B:85:8B:C2:CD:CC:29:AA:E6:A5:7D:C1:EF:D3:F3:9A:FD
X509v3 Authority Key Identifier:
keyid:E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/RLjtO4WLws3MKarmpX3B79Pzmv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.200.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cc:93:c5:06:d4:64:41:9d:27:6c:40:42:2e:d5:53:53:9a:
8b:6b:67:17:06:23:50:34:37:2d:ac:34:bf:d9:d4:4a:d8:24:
ee:91:88:c0:9c:2e:05:72:97:69:e8:62:84:32:a9:bb:b3:97:
76:fe:a1:3e:cb:fb:b0:d8:21:0c:6c:9b:53:44:53:af:ea:7c:
24:5f:e0:65:04:1a:84:bc:f1:8d:c9:94:58:2b:e9:13:4b:6a:
40:79:a6:2a:5c:2c:1b:08:37:7b:b1:36:ce:d3:fa:9a:59:7e:
b8:83:37:ce:21:a0:24:e2:0c:7c:2d:ec:44:f5:91:34:e8:02:
93:b3:97:7f:97:19:b4:d8:5a:e9:67:19:95:cc:0c:43:32:a7:
e9:e9:5a:86:94:c0:38:f1:4b:c8:29:87:e8:ec:69:4a:24:ab:
ca:be:c6:9a:96:a0:e6:35:a1:99:6c:3b:b9:7a:f9:19:38:52:
7e:3e:37:37:e2:30:83:9a:ed:ac:9c:d6:9d:97:7b:45:e7:6a:
b4:df:9a:0c:7c:28:35:c9:0b:06:1b:c6:55:23:d1:ca:7e:dc:
ce:c2:f4:88:7e:e9:7d:d4:9d:d1:6f:68:d0:f2:33:37:dc:78:
16:d7:6b:d9:de:e9:d6:bf:61:00:7d:f8:b8:07:c3:d0:38:ec:
cd:44:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:37 2025 by rpki-client