Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/2W4793sjPA5QMW_mlfEBfSoM2Is.roa
File: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (raw, json)
Hash identifier: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=
Subject key identifier: D9:6E:3B:F7:7B:23:3C:0E:50:31:6F:E6:95:F1:01:7D:2A:0C:D8:8B
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 0194258F9709EE27C8083C79BA5EA347D87F
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/2W4793sjPA5QMW_mlfEBfSoM2Is.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 185.212.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:97:09:ee:27:c8:08:3c:79:ba:5e:a3:47:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d96e3bf77b233c0e50316fe695f1017d2a0cd88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:36:2c:b7:50:bc:89:2c:e4:71:f5:1f:af:
d1:47:cb:c3:35:a6:bc:f0:4c:62:36:7b:b0:6a:13:
01:6d:fb:a0:6b:a4:da:d3:e3:60:a0:cb:62:f8:9d:
5d:40:5f:be:35:00:41:39:64:c7:dc:b8:22:10:77:
d4:69:23:b1:86:83:ed:b8:cd:ef:10:3f:b1:cd:47:
e3:dc:62:dd:42:0b:fb:4d:14:75:f9:8d:4d:4b:63:
9a:90:39:7b:29:08:6a:78:a7:64:54:e7:6e:88:a4:
db:48:a7:ac:b7:0b:9f:03:78:3e:0a:40:be:22:17:
68:12:e9:67:72:31:4f:dd:bb:09:6a:7e:71:e2:f3:
76:70:49:6e:2b:c1:2a:bd:72:a3:cb:3f:6a:8d:06:
a0:6e:b9:97:24:85:30:5e:87:6b:b5:1a:7b:59:b6:
63:bd:9c:f7:d2:06:87:aa:4c:c5:cd:a2:f9:95:31:
9c:bd:6c:90:a4:96:d1:81:7b:3c:6c:34:d5:a1:91:
12:d1:65:43:50:bc:38:aa:ed:62:e7:6e:82:37:c1:
05:be:b9:90:91:42:66:33:a0:95:b3:3a:7e:f5:26:
61:ab:da:c0:75:bf:d9:8e:c8:2b:a2:65:9d:e4:8e:
16:14:29:41:9e:63:1b:7d:bf:6a:05:65:30:b0:3a:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:3B:F7:7B:23:3C:0E:50:31:6F:E6:95:F1:01:7D:2A:0C:D8:8B
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/2W4793sjPA5QMW_mlfEBfSoM2Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.34.0/24
Signature Algorithm: sha256WithRSAEncryption
49:02:85:6d:4c:fe:e4:33:d3:b2:65:5d:aa:ce:2f:ee:1e:b7:
13:af:3f:dd:88:9c:00:14:57:73:f0:e3:26:16:41:7c:33:4b:
86:14:1d:f3:0a:46:f9:a1:25:a3:eb:6e:4a:af:00:d9:81:74:
bf:dc:29:c7:ec:d0:89:21:6d:a1:c6:55:33:18:32:22:c6:cb:
8f:ce:5c:e2:f9:80:59:3a:f2:2c:09:c6:9d:06:d0:e3:f5:81:
60:69:4d:4a:20:0c:40:3e:c9:dd:94:12:a8:98:c1:7d:16:3b:
b3:c5:bd:c2:9e:18:48:9d:ec:c3:08:0f:1e:0e:0f:b8:67:af:
0d:c2:16:9e:51:a9:ca:cd:5e:02:59:69:64:be:e7:f6:8f:46:
2f:01:ac:84:01:63:cb:4c:71:50:ff:cd:10:32:bc:0c:49:63:
c3:33:ef:45:a0:61:c2:4b:82:41:4f:38:c8:9b:d2:04:8d:c3:
73:36:72:55:9f:88:a2:38:ed:06:a7:00:a2:4a:ee:99:8b:10:
db:d4:b5:18:32:74:6f:45:97:fc:1a:93:ff:26:e3:27:6f:c9:
f6:0c:8a:d5:53:cf:74:80:ae:64:57:a9:d1:06:ef:ec:5b:61:
9a:00:fa:17:18:40:ee:16:26:e0:84:b8:b7:36:e0:9c:2c:66:
83:75:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:57 2025 by rpki-client