Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/SEgDWEU92zAnfdKKSLnIVh9oR0w.roa
File: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (raw, json)
Hash identifier: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=
Subject key identifier: 48:48:03:58:45:3D:DB:30:27:7D:D2:8A:48:B9:C8:56:1F:68:47:4C
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 019424B25CAFB818CAF75EC0B9BBF74EA677
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/SEgDWEU92zAnfdKKSLnIVh9oR0w.roa
Signing time: Thu 02 Jan 2025 01:47:36 +0000
ROA not before: Thu 02 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199391
IP address blocks: 185.38.200.0/24 maxlen: 24
185.38.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:5c:af:b8:18:ca:f7:5e:c0:b9:bb:f7:4e:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Jan 2 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48480358453ddb30277dd28a48b9c8561f68474c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:a2:68:2e:12:cb:48:6c:17:e2:85:12:57:
bc:60:be:9a:05:c6:e8:fc:02:43:a2:2b:b7:fb:e7:
6b:9b:07:3f:83:75:c4:9c:bf:af:92:a2:5f:2d:af:
8b:83:64:b5:1c:9c:46:85:de:bc:61:1e:ec:a5:d8:
41:6a:18:09:8a:ec:d6:82:4f:cc:4e:15:6e:b2:c8:
31:08:e4:49:ea:a4:fe:de:9e:e9:34:c4:0b:cc:3a:
4f:c8:4c:c8:e1:c3:c8:f3:25:6e:d3:76:7c:2e:aa:
cb:92:2a:7f:c2:c9:a0:ae:46:23:7d:be:fd:1c:ae:
ac:e6:12:e3:d5:c2:6a:b7:7b:0c:ef:c3:e4:bf:ce:
63:7e:b3:11:6f:37:69:67:35:97:39:b5:da:34:dd:
7a:35:ea:a5:3f:d4:ed:00:86:ca:ad:cb:99:da:73:
eb:dd:da:a9:b0:94:f6:cb:19:d8:08:c9:e6:df:14:
a3:54:49:a3:29:4b:73:c5:df:6b:73:a6:63:b8:1a:
d2:3c:c5:80:7e:aa:ba:7c:8c:6c:32:bb:c1:77:d4:
be:13:8f:ae:24:66:30:5a:88:12:3d:a5:ad:4c:01:
a1:10:21:46:0c:1c:95:d5:a3:ea:4c:32:7c:ba:74:
54:33:11:20:2d:89:0b:3d:df:eb:31:09:e5:87:d8:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:48:03:58:45:3D:DB:30:27:7D:D2:8A:48:B9:C8:56:1F:68:47:4C
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/SEgDWEU92zAnfdKKSLnIVh9oR0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.200.0/23
Signature Algorithm: sha256WithRSAEncryption
54:0a:e6:d8:59:90:a2:cb:c0:09:bd:ff:7e:5b:b9:7c:b8:23:
9a:ce:e5:ac:65:63:60:42:97:80:b0:8e:d1:74:20:86:44:18:
89:35:fd:88:15:55:dc:cc:43:8d:9d:02:de:df:f5:83:83:5f:
75:4f:c7:77:de:9b:19:e9:b2:ca:4f:13:52:d6:ee:0b:f8:ba:
f0:6c:cd:d2:35:70:05:83:60:5b:93:cd:13:fc:69:75:21:fd:
df:08:27:e6:c6:be:46:28:49:29:42:9e:9e:c4:c7:c3:06:de:
2b:d9:17:86:2a:f7:0a:fc:1d:a4:83:31:9f:c1:66:49:e4:de:
76:b9:96:d2:12:03:9a:de:d7:62:cc:97:78:7b:e0:fc:6b:a6:
fd:01:e4:b8:d0:5e:eb:46:82:5c:dc:9c:87:46:18:fd:e2:b2:
5b:59:38:5c:f8:ec:50:b6:47:c8:f0:9d:2e:bb:cd:d3:d0:8b:
93:ee:55:8e:58:ca:f3:b9:b2:df:5d:e6:fa:02:6f:d9:67:4c:
4e:f5:eb:be:87:49:a8:e8:6c:53:11:16:70:96:1c:26:a0:e0:
d2:29:ed:58:88:09:77:a5:dc:90:c1:00:d8:a9:ef:0a:ec:a3:
ab:d4:5f:f9:5f:9a:51:45:c9:30:5c:55:83:16:aa:07:bb:e8:
d8:94:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:29 2025 by rpki-client