Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/4hnUUt9Ys_eQWvU2fA6JemX65dw.roa
File: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (raw, json)
Hash identifier: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=
Subject key identifier: E2:19:D4:52:DF:58:B3:F7:90:5A:F5:36:7C:0E:89:7A:65:FA:E5:DC
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019423D73A2BE9D63A395A54A8AB0A6041FC
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/4hnUUt9Ys_eQWvU2fA6JemX65dw.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60144
IP address blocks: 185.111.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3a:2b:e9:d6:3a:39:5a:54:a8:ab:0a:60:41:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e219d452df58b3f7905af5367c0e897a65fae5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:87:3f:62:af:f0:f1:63:af:67:10:c6:be:
bc:2f:c6:81:5e:d5:7a:2b:ca:62:55:27:5c:2c:c5:
2f:0a:ac:0b:6d:36:34:cf:cf:30:52:94:38:cd:c0:
85:7c:0f:da:20:07:25:99:53:50:ac:b7:fc:f8:05:
56:7b:9b:11:d9:13:6e:fe:6a:2f:fd:63:85:9d:85:
69:8b:b1:4a:c1:c9:0a:42:be:4b:af:c7:e3:3c:9e:
a9:2c:41:23:ac:80:7e:15:6c:33:e1:2b:97:30:e8:
04:76:02:94:31:6d:a4:16:33:f6:a1:30:6f:c4:c7:
64:19:92:12:c5:dc:e2:50:18:e6:40:79:76:67:55:
4b:8d:65:87:89:b8:af:61:75:e3:0e:24:99:e5:68:
51:7f:bd:48:05:a7:e8:84:b0:10:cc:da:63:e0:d0:
2f:30:ee:b4:5b:63:ab:9e:8c:0f:61:50:ba:2a:5e:
e6:80:86:82:df:e9:64:45:11:47:69:50:29:67:98:
01:d0:cb:5f:23:f8:85:f7:88:9b:3a:ad:cf:ef:cc:
f1:4f:42:b4:56:cc:cf:8f:3e:f4:7a:9e:7b:f7:cc:
c7:1d:b9:c7:93:bc:43:98:8e:3d:84:59:b1:9c:d0:
7e:4b:98:d0:7e:ed:26:a1:0b:cd:ba:fc:72:76:12:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:D4:52:DF:58:B3:F7:90:5A:F5:36:7C:0E:89:7A:65:FA:E5:DC
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/4hnUUt9Ys_eQWvU2fA6JemX65dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.235.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a2:f7:b9:45:1f:fd:f8:4f:b0:23:23:64:9f:b3:5d:b3:39:
eb:c1:3f:49:ab:fa:47:55:46:e6:33:92:a0:bb:ac:7b:47:5b:
a2:79:4d:07:06:0d:8a:61:a2:74:01:cc:9e:23:3e:b9:54:14:
0f:25:1e:69:2b:e4:34:72:ce:f3:d0:b7:dd:4a:9b:0f:4c:2e:
b3:d3:68:dc:1e:35:43:7b:78:53:2e:d0:2c:0d:9a:58:d1:fd:
42:57:c2:99:85:dc:e5:a5:98:55:d4:24:0f:50:da:0b:7b:1a:
3d:a1:b8:a0:4c:05:34:44:0c:9b:2f:c4:0c:b8:10:3e:e8:f1:
d9:35:b8:56:90:3f:a7:6f:4b:45:b9:c9:d3:2e:3b:fe:41:53:
f5:79:01:13:3a:0d:89:9e:2a:59:a7:3a:af:16:de:63:ff:dd:
40:ae:14:9d:1f:12:5d:c3:8a:f9:67:07:2d:15:30:ba:30:99:
bc:cc:58:e9:c3:0b:e2:7a:9f:2c:ec:49:eb:f2:8f:86:68:62:
ca:1c:50:b9:50:18:6b:b1:ca:5d:34:cf:e1:75:39:57:19:60:
49:f4:1a:3e:94:25:fc:87:d3:1a:16:af:67:0b:b6:85:c2:bf:
f6:71:cc:ef:d8:83:c8:67:b2:94:2e:e5:f3:33:7e:a6:6d:19:
4b:22:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:56 2025 by rpki-client