Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa
File: RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa (raw, json)
Hash identifier: 7V4nDCtb0KwqDCqyA/QY/lvyHUYCIvkngjaYw/DzojQ=
Subject key identifier: 44:D4:82:DD:5B:2A:C7:06:39:17:60:8F:68:99:8E:08:AF:43:9D:9C
Certificate issuer: /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial: 01941FFA3A8C6FB12C98D92357931590D0FC
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202709
IP address blocks: 185.242.178.0/24 maxlen: 24
2a10:98c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3a:8c:6f:b1:2c:98:d9:23:57:93:15:90:d0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d482dd5b2ac7063917608f68998e08af439d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:5b:bd:ba:87:da:08:11:4e:56:32:89:b5:
38:76:c3:29:f4:9c:76:d1:0b:5a:77:ed:40:58:86:
01:d8:1a:8b:df:f3:3d:05:cd:5e:f5:6a:23:4f:89:
de:6c:39:8b:77:8b:5d:d4:6c:9f:e9:c9:92:30:1d:
72:e5:88:f7:4b:fb:5c:92:4f:1b:0f:3d:67:87:07:
0e:d6:3d:1b:58:3f:9c:f1:28:7f:01:92:9b:d7:31:
f3:f5:d0:ca:c7:7c:19:20:e9:2d:dd:6c:cc:c1:cf:
06:34:53:e0:f9:ea:53:1e:16:b8:cd:83:30:f0:d8:
a3:db:de:b5:ea:72:13:18:88:af:c7:81:b0:c0:5a:
38:09:55:60:93:62:fa:ca:40:14:f0:e2:91:91:5a:
7f:d9:f1:21:64:ad:5b:7b:c1:49:1f:a4:04:c4:c9:
83:74:df:d1:68:a5:b9:c1:99:ed:13:91:a1:00:ad:
76:31:3c:5d:ba:30:dd:6c:e6:87:f0:d7:ac:50:be:
77:6f:ad:27:8f:e3:a2:ba:96:9b:a3:bd:e8:12:de:
26:30:26:4c:69:71:e6:d0:4f:0a:d2:10:f7:ef:21:
18:01:48:a4:26:e9:62:f3:3c:71:57:ac:73:db:be:
c2:0e:fd:78:45:e9:bb:34:84:ce:fd:fb:23:56:c7:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D4:82:DD:5B:2A:C7:06:39:17:60:8F:68:99:8E:08:AF:43:9D:9C
X509v3 Authority Key Identifier:
keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.178.0/24
IPv6:
2a10:98c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:fd:0e:b1:e2:c8:05:20:ef:70:a7:be:85:55:b6:b2:07:e9:
6f:d1:58:48:79:9c:c0:56:14:70:c4:01:81:bd:33:b2:c0:95:
b8:36:6b:b9:6d:85:ba:b4:65:b3:e4:95:ee:55:ec:bf:51:e2:
0a:1d:ee:6a:e0:67:7d:c1:94:77:1f:69:a0:e3:4d:f2:66:bf:
76:21:6a:82:95:38:2c:5f:e0:dd:b6:90:5f:40:51:10:d5:3a:
eb:6f:94:a5:a6:7c:f6:fd:db:ec:45:21:f3:8a:8d:65:5f:cf:
29:01:44:8f:82:ba:3c:9c:06:f9:b4:f4:e7:eb:2c:11:ff:f6:
7f:0c:ec:9e:1d:71:a2:20:51:56:b8:b9:61:83:d0:fd:a1:af:
b2:3d:cc:cb:44:67:ac:68:89:68:7b:c7:e8:9c:2b:c5:be:82:
15:18:d7:c7:92:66:99:04:c4:1f:4e:d2:9c:9a:7c:7e:6c:61:
d0:aa:e1:9b:47:a1:38:80:0a:7a:27:83:a6:7c:1b:e7:df:c3:
ee:a0:c6:d2:8b:f4:49:1a:ff:57:2c:13:b3:1a:e4:2d:f8:06:
88:6a:98:b5:3e:7b:61:9d:3d:a2:a7:de:a7:e3:02:24:cb:8f:
73:a1:e0:bd:12:12:ba:02:48:15:bf:81:04:fa:99:cd:61:8d:
e4:d4:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:57 2025 by rpki-client