Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa
File: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (raw, json)
Hash identifier: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=
Subject key identifier: D8:D6:1D:8E:31:4A:53:0C:00:1D:7A:FB:B9:B4:89:BF:C2:B3:83:C8
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019421442A91D634F0CA7464FA7260A92AA3
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.191.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2a:91:d6:34:f0:ca:74:64:fa:72:60:a9:2a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8d61d8e314a530c001d7afbb9b489bfc2b383c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0b:8c:3d:06:4b:c2:95:89:49:da:ef:f7:3c:
01:eb:aa:c7:7b:35:85:59:e9:9a:d7:28:46:d1:64:
86:ab:6e:5c:ba:27:e8:b9:b6:71:c0:91:4f:d6:2a:
86:75:cb:6f:ef:97:8d:1c:81:53:8a:01:87:e4:d3:
bd:94:a9:a0:d0:8c:3a:ca:f1:49:cc:9b:ed:4c:af:
c2:96:f6:ee:40:1a:fb:1d:f2:80:da:ad:51:6e:b2:
92:6f:bc:4d:0c:26:2f:92:c4:06:c8:66:f8:63:2b:
be:a1:73:54:ee:5b:2a:4a:78:4b:4b:ce:1d:56:1f:
65:95:de:40:91:45:9a:2d:7c:68:ca:94:7a:1b:6c:
65:f1:24:4c:9f:bd:6d:8b:c1:b8:73:0f:fd:8c:91:
8c:88:28:bb:db:32:0a:9b:82:9d:70:8d:98:ee:92:
a1:1c:88:f1:7b:ec:9b:ea:f0:4a:a5:42:14:c9:e8:
74:7b:85:fe:b0:e4:f1:9e:8b:5d:34:76:76:2b:bd:
80:f2:c0:c0:30:7a:45:6a:13:9f:c3:c3:c8:24:5f:
f5:32:7a:25:6f:38:9c:94:52:52:e1:95:43:73:12:
17:0d:4b:43:5e:fc:49:65:a3:c7:84:a2:c3:21:7a:
02:88:21:46:18:dd:5f:48:34:14:a0:71:22:ef:dc:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:1D:8E:31:4A:53:0C:00:1D:7A:FB:B9:B4:89:BF:C2:B3:83:C8
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.20.0/24
Signature Algorithm: sha256WithRSAEncryption
94:09:67:61:32:7c:27:2d:bf:27:b3:72:40:14:95:b9:3b:d9:
d1:da:e4:1d:e5:86:c8:25:79:de:21:ab:6a:ec:0d:e0:ea:b0:
a8:4a:37:e8:f1:e1:dd:97:02:3e:df:bc:80:7d:53:d1:83:30:
04:d3:07:04:80:a4:60:c8:99:56:22:21:5d:7d:c2:d3:49:e2:
e5:b8:46:1f:60:ec:b9:91:72:81:cf:1d:5f:48:10:5b:15:f8:
5b:1a:cf:a6:87:8f:ad:44:5e:81:ad:e1:63:d3:91:9f:4e:20:
f1:60:10:cb:a4:c6:c2:ca:35:c0:be:e9:8a:13:2d:ad:ed:bf:
49:8e:a8:b5:68:d9:25:b8:4b:ee:72:12:fc:82:58:f7:da:5e:
04:2e:91:d5:22:82:0c:ca:93:48:01:bd:4e:4c:ed:a8:c5:d1:
42:58:f6:4e:b2:12:8d:f6:4a:e7:4e:9e:6a:71:c3:57:0b:b2:
14:29:4c:e6:d5:08:b3:0d:b0:64:97:c6:fa:1b:82:db:b5:99:
e4:53:c8:50:83:97:81:26:11:86:b5:80:9d:38:2e:ad:74:5f:
19:a6:d0:02:14:56:a2:f7:47:a2:21:12:3b:3f:c6:5b:48:d9:
77:9e:d4:05:ab:ec:67:d8:74:33:eb:69:74:79:73:6b:ea:b1:
f5:d7:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:36:23 2025 by rpki-client