Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/S87F6thVxwCZscy_VovEDJcB8HM.roa
File: S87F6thVxwCZscy_VovEDJcB8HM.roa (raw, json)
Hash identifier: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=
Subject key identifier: 4B:CE:C5:EA:D8:55:C7:00:99:B1:CC:BF:56:8B:C4:0C:97:01:F0:73
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 01942444E28E785A7C0B79624997AA3A3E06
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/S87F6thVxwCZscy_VovEDJcB8HM.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262254
IP address blocks: 185.129.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e2:8e:78:5a:7c:0b:79:62:49:97:aa:3a:3e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bcec5ead855c70099b1ccbf568bc40c9701f073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:37:23:c7:84:a6:ce:6e:cf:73:af:0d:14:
f7:d8:80:2b:3b:e6:de:59:35:1f:fd:92:4b:23:6b:
e5:16:37:ea:6f:93:0a:f3:b4:17:42:76:f0:d5:69:
24:a9:d8:68:36:05:44:1d:ce:22:64:58:4a:ee:3e:
c0:7a:e5:52:4e:0f:af:2e:a6:41:22:46:ad:1b:0c:
86:e6:19:fc:6a:58:75:5e:d2:e3:3d:db:d5:17:14:
8d:73:c4:ee:3b:2c:b0:6a:f5:49:de:b8:09:6f:c7:
a8:fd:5c:42:c7:94:67:6f:d1:5e:5a:68:b7:07:be:
d1:d8:fe:13:a4:0e:9a:c5:3b:51:a9:ba:6d:0b:66:
8b:b1:f3:16:80:fd:75:98:cc:83:53:a3:ab:d4:78:
51:18:84:82:df:22:7a:b2:69:82:0a:7a:af:b3:e2:
34:1c:e1:7e:66:c2:54:f5:9d:63:90:59:7b:59:9b:
a4:86:01:5f:9c:02:fc:3d:cf:5a:2b:42:6d:8a:dd:
e8:33:23:ae:e0:c5:d0:10:b8:b3:6b:dc:a1:80:37:
de:9f:0b:97:6c:3f:b9:cf:34:b0:3c:29:a7:96:06:
6a:f1:36:11:d8:b9:ac:31:f4:3c:27:60:9f:65:eb:
43:5b:db:4a:f1:57:b4:6c:b9:d8:b6:8e:95:c4:cf:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:C5:EA:D8:55:C7:00:99:B1:CC:BF:56:8B:C4:0C:97:01:F0:73
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/S87F6thVxwCZscy_VovEDJcB8HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.48.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d7:05:ab:86:df:a5:1b:1d:11:4a:3d:55:20:93:98:08:ef:
db:8b:5b:46:90:8a:9c:cd:ae:4b:53:0f:a0:72:06:7b:b5:f0:
94:5e:99:07:fb:d9:69:81:48:1d:11:9b:82:be:22:8b:b1:99:
fb:85:94:7d:33:eb:75:56:b7:91:e1:85:ee:a8:fd:23:79:d2:
16:e3:75:d1:82:5a:5c:20:f5:71:5d:09:9c:98:9e:e6:31:36:
1d:be:51:37:e6:18:d8:d1:ad:fd:15:f6:e0:60:11:67:21:4a:
db:54:30:02:98:05:97:9c:30:f1:f8:9e:3a:48:af:7b:d6:43:
1d:d4:ad:d1:e1:c5:6c:54:58:ed:4c:fa:b4:dd:d9:19:40:3c:
68:95:1a:5b:97:04:79:a9:a7:94:a3:fa:27:7c:30:9c:26:f2:
86:de:15:96:6b:e6:9f:cd:d6:e0:f1:61:3d:60:90:ec:78:19:
b1:5c:39:49:d1:be:e4:e0:a8:fd:3c:d8:52:b0:71:52:77:0f:
ff:d3:1a:ad:8b:76:cf:86:29:20:db:2e:bb:45:15:14:f2:22:
00:9e:ad:c3:25:f5:fb:ab:f8:e1:3f:e9:a2:31:e0:66:9d:bd:
b4:a7:d2:96:6d:f8:a6:43:05:a4:21:86:3b:f0:be:5d:06:1e:
eb:84:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:33 2025 by rpki-client