
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/sExRc2dR7few0ajzWya-igG_5sQ.roa
File: sExRc2dR7few0ajzWya-igG_5sQ.roa (raw, json)
Hash identifier: x0g4oCDUL1MHceqYgFC5m6FvOkoJoCVYAEii+qd8YCM=
Subject key identifier: B0:4C:51:73:67:51:ED:F7:B0:D1:A8:F3:5B:26:BE:8A:01:BF:E6:C4
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 018C2FEF022119387FB7F3411F5D29D6F84D
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/sExRc2dR7few0ajzWya-igG_5sQ.roa
Signing time: Sun 03 Dec 2023 13:47:21 +0000
ROA not before: Sun 03 Dec 2023 13:47:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205219
IP address blocks: 185.242.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:ef:02:21:19:38:7f:b7:f3:41:1f:5d:29:d6:f8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: Dec 3 13:47:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b04c51736751edf7b0d1a8f35b26be8a01bfe6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:2c:d0:67:c0:bc:96:ad:d2:65:d1:e4:67:
92:54:ab:26:a2:57:2e:b4:99:cd:76:cc:4a:be:c4:
5e:ad:60:ed:16:63:e1:dc:24:74:ee:cd:ec:23:b4:
a3:d7:ce:2b:ef:c0:0c:b1:88:65:3d:8b:a2:47:55:
f7:5c:5b:ae:7f:3d:97:9f:42:3c:8b:7f:60:0e:d0:
9c:47:97:0f:3d:da:45:bc:95:f9:b8:2d:77:2b:26:
9f:99:ea:a9:a3:92:d2:41:76:95:2a:17:a3:a7:d3:
6b:7a:d5:99:9e:cc:dd:63:88:5c:b9:93:80:d1:35:
02:09:e3:1f:22:48:d7:03:a4:bb:6a:1e:d7:e2:71:
18:5e:34:08:2b:f7:ba:ba:15:19:cb:b3:46:0e:c1:
dd:ee:69:48:62:da:24:67:b4:df:90:07:28:25:4d:
76:38:b7:d4:4e:1b:cd:f8:55:1d:7a:a2:a2:e9:82:
84:bf:89:ca:8c:02:ee:ab:bb:d1:22:e1:ab:f8:52:
75:03:38:7a:ce:3f:b9:d7:a3:38:d2:5c:6d:d2:dc:
4a:3e:42:87:87:e0:7d:24:d1:c0:72:93:98:b7:6c:
3e:cf:23:e0:3c:e8:99:2d:3a:c7:96:69:86:cc:93:
8d:e6:45:e2:3b:ef:01:a1:6b:3c:6f:59:62:08:42:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4C:51:73:67:51:ED:F7:B0:D1:A8:F3:5B:26:BE:8A:01:BF:E6:C4
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/sExRc2dR7few0ajzWya-igG_5sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ea:64:d9:be:4c:36:12:3d:8e:1e:08:be:9f:ef:42:e5:45:
5f:12:4c:c1:79:9f:75:c8:c6:ad:35:6c:b0:5c:cc:7f:8f:1a:
c5:a0:b9:5b:6c:50:04:0c:df:df:2f:75:59:6b:d0:ca:46:f7:
35:7c:3d:72:b3:1f:6d:62:30:06:a7:a7:64:d8:64:e9:27:ef:
9f:e1:32:ee:cc:f4:32:e7:35:e5:d0:d2:5b:32:08:0e:b1:d0:
d4:aa:dc:9f:8b:4b:00:35:d2:30:bf:31:84:28:3d:a4:09:96:
2b:74:9d:39:84:6a:fe:45:7f:a2:5c:3d:fd:17:3e:b9:47:65:
c9:76:28:06:79:dd:69:6a:d3:fb:2d:00:35:04:bc:38:1e:b5:
ff:9b:8e:21:41:72:19:74:aa:2d:aa:b4:bc:43:0b:aa:b8:1f:
40:1c:ec:29:bc:f9:ed:36:9c:62:53:c2:af:3c:69:36:d1:6b:
ab:ca:9d:62:f6:f3:7b:62:f7:cd:88:e4:e6:9d:62:de:4a:80:
65:bd:ac:9f:e7:c4:d7:b5:9a:6c:fb:7a:0e:ea:3a:11:39:bf:
20:49:7f:c4:d5:3a:57:a2:05:af:c9:2b:8d:93:8c:88:1d:5b:
12:11:44:4e:e5:15:74:44:e0:e4:13:ec:b2:65:a2:56:b4:ac:
e3:c2:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:42 2025 by rpki-client