Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/4svHnSf_sr7y6eIJK3BRK9SrVk8.roa
File: 4svHnSf_sr7y6eIJK3BRK9SrVk8.roa (raw, json)
Hash identifier: 0wcX8zj99h2s6yKz3OoIm22S5m/XCY0eeuH1yfu5jbU=
Subject key identifier: E2:CB:C7:9D:27:FF:B2:BE:F2:E9:E2:09:2B:70:51:2B:D4:AB:56:4F
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 01886BE8959F8028D03E4431A4E0984E1503
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/4svHnSf_sr7y6eIJK3BRK9SrVk8.roa
Signing time: Tue 30 May 2023 09:06:24 +0000
ROA not before: Tue 30 May 2023 09:06:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62263
IP address blocks: 185.42.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:e8:95:9f:80:28:d0:3e:44:31:a4:e0:98:4e:15:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: May 30 09:06:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2cbc79d27ffb2bef2e9e2092b70512bd4ab564f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:bd:51:f0:4b:c3:0a:c1:27:ae:f5:94:d5:
f8:17:2e:d2:2b:30:aa:19:8c:df:8c:ba:8b:b8:5d:
68:c3:2e:91:9d:fe:ab:cd:ca:30:0d:10:e9:03:8c:
05:04:37:ea:0d:4a:d9:96:91:38:f1:33:dd:31:e3:
5b:26:a9:ee:9e:04:70:01:45:70:ab:14:e9:53:73:
cf:55:24:b4:00:c6:af:26:f7:f5:64:f9:8b:94:be:
9e:66:59:50:f8:55:ac:cc:32:46:87:9d:1c:33:0a:
fb:42:64:2a:cd:af:77:a1:31:e9:79:f4:2d:1d:7c:
5a:e5:05:93:34:36:c4:1f:7d:9b:78:0a:8c:5f:4c:
46:94:25:cf:25:59:3a:44:42:bd:f0:24:e8:90:c1:
de:1c:94:8f:19:16:a2:b0:c5:87:2f:e9:66:11:cc:
6e:3a:a1:f8:5b:95:39:dd:9e:6f:9f:73:fd:98:40:
84:5c:f1:7f:22:58:76:11:67:59:b1:45:67:2a:05:
3f:cc:6c:e2:96:3e:0d:45:e5:3c:41:23:21:1e:4f:
93:49:cf:b1:05:47:7a:c2:ba:cd:53:93:cf:5e:1b:
ee:6c:37:dc:98:3d:c8:22:b4:13:ce:be:30:cd:e0:
58:51:73:01:d8:d9:65:77:20:33:29:00:9d:82:59:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:C7:9D:27:FF:B2:BE:F2:E9:E2:09:2B:70:51:2B:D4:AB:56:4F
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/4svHnSf_sr7y6eIJK3BRK9SrVk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:28:06:c9:c0:64:76:18:3c:79:c4:eb:43:ec:38:da:98:92:
36:1b:62:74:9d:96:4f:94:b6:92:25:4b:a5:de:09:70:25:58:
2d:1b:ea:c1:dd:d4:fb:88:3c:91:2a:97:47:69:c8:4b:81:c5:
33:bf:fc:6e:98:4e:63:41:69:cf:81:18:87:03:3f:a3:e9:3c:
5d:6b:ec:80:01:61:e3:87:56:ab:71:70:08:2f:d0:99:56:ad:
36:b7:f6:7e:c4:f4:74:88:db:cc:ed:84:c1:b8:cc:28:d1:b7:
01:57:5f:fe:57:ab:68:8e:9f:28:ed:0e:b3:8b:45:51:d6:e2:
02:10:42:c0:dc:df:95:6b:66:f6:13:62:45:ee:be:6f:95:16:
2a:60:55:6f:31:26:d1:42:ba:df:2e:b2:a2:d1:8e:ba:7c:70:
fa:d4:6c:88:da:2e:ee:86:a8:8d:ea:fb:98:8f:87:74:22:8c:
2d:b1:ad:b8:f2:10:b2:ca:e3:cc:76:f1:9a:47:0a:f8:a7:dd:
e8:72:7d:c8:d5:87:cc:bc:2f:2e:6c:82:17:08:60:9f:0b:53:
6a:65:14:8a:6b:63:29:f6:ab:c9:18:17:c8:6e:0b:f7:db:5e:
43:15:77:6b:dd:1b:73:ba:6d:48:2b:21:b5:63:ca:5b:95:7f:
ec:dc:ed:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:24 2025 by rpki-client