Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/KyYkDGAKcLxBeobymFr8WHFkbsg.roa
File: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (raw, json)
Hash identifier: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=
Subject key identifier: 2B:26:24:0C:60:0A:70:BC:41:7A:86:F2:98:5A:FC:58:71:64:6E:C8
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 01941F8C23F238E8B23D9F0DE77AAF2E5AC4
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/KyYkDGAKcLxBeobymFr8WHFkbsg.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.152.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:23:f2:38:e8:b2:3d:9f:0d:e7:7a:af:2e:5a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b26240c600a70bc417a86f2985afc5871646ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:4e:7b:6e:15:c4:b3:53:7c:f8:b6:4a:f4:
a2:c2:28:61:78:ca:15:ee:8d:df:ac:fc:c5:26:f7:
f3:44:1b:a8:c7:87:8d:b2:2b:34:c6:bf:42:81:7e:
9d:c4:b3:26:d0:17:9c:13:ec:31:76:60:94:0a:2c:
a2:84:15:e6:37:b1:90:21:74:24:63:d1:df:ae:1e:
5a:f0:a3:53:0e:ea:96:e7:bb:f7:50:6c:c6:75:5d:
99:2e:7d:6e:9f:b6:7d:ce:96:68:78:80:76:ed:1a:
d2:dc:90:8b:83:ba:16:14:01:2c:c9:04:30:80:75:
0f:09:ed:b3:61:fb:42:0f:2b:59:86:6f:fc:cc:00:
cd:60:2d:c8:af:af:ed:46:59:57:8a:a7:af:09:fc:
5d:a2:9b:fc:1f:d3:42:0b:fe:7e:3d:db:54:31:f9:
2e:e7:50:d9:ed:e4:3a:09:a2:76:fd:36:20:4e:12:
00:9b:9a:d9:dc:2b:a3:2d:e7:e6:2a:77:97:fa:a7:
b4:a7:70:48:4c:0b:4f:fc:c9:ab:41:45:2c:61:33:
df:00:09:13:b7:7e:8b:8d:81:c9:d0:4b:78:7a:b4:
39:49:14:5f:38:93:94:a7:f9:ee:3d:ce:0b:22:2f:
44:d5:1d:4c:ba:1c:1f:9c:8f:86:55:9f:f7:a0:31:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:24:0C:60:0A:70:BC:41:7A:86:F2:98:5A:FC:58:71:64:6E:C8
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/KyYkDGAKcLxBeobymFr8WHFkbsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0a:34:52:19:a4:51:af:58:59:d8:52:5c:80:06:24:14:e7:
20:07:8e:78:23:35:64:12:82:29:54:f5:dd:3c:ff:85:a6:c2:
87:13:3e:e0:47:06:bb:47:d2:09:09:a9:63:ce:67:9d:b6:d3:
e4:aa:a9:bf:9c:68:b7:98:25:d4:c6:c6:87:f0:49:25:57:f8:
e4:eb:2b:c6:c8:b2:8a:76:28:7b:9c:46:db:e8:86:1d:69:3d:
60:78:62:07:77:9f:e8:fd:bc:80:14:03:3c:a2:79:69:8a:bd:
fe:45:cd:a5:c0:a7:84:19:ee:47:b4:38:92:fe:ae:03:dd:75:
8a:f8:24:f4:82:5c:30:1d:55:6f:1f:84:ff:63:0f:cc:17:9d:
84:36:eb:a3:64:0b:40:bf:15:92:b2:32:30:bd:6c:98:a6:8f:
e9:85:e8:ff:0b:fc:bd:8d:17:73:e0:39:83:06:6f:57:f5:0e:
68:84:94:39:b6:b1:46:75:99:7e:bf:1c:68:71:2d:63:1e:35:
8d:e2:37:d5:98:a7:2c:df:96:fe:2c:74:ed:a8:3a:be:b2:b1:
db:41:0e:5a:58:78:a9:1f:eb:c7:f8:f8:39:87:34:69:2a:94:
bb:49:9d:a6:59:f7:a6:04:30:31:b4:44:9a:0b:f0:e9:3c:cc:
81:ad:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:30 2025 by rpki-client