Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/2KciRHMBZb7uMEpkZe8Ezzv9_jU.roa
File: 2KciRHMBZb7uMEpkZe8Ezzv9_jU.roa (raw, json)
Hash identifier: fT7wsKFo86UfF4p+M8FRA++7BAykNuXnvlSM/JjU7p0=
Subject key identifier: D8:A7:22:44:73:01:65:BE:EE:30:4A:64:65:EF:04:CF:3B:FD:FE:35
Certificate issuer: /CN=4628bbcd6eecb518c8be8944652c03eedec0d1fe
Certificate serial: 018CC26D666D6D62A72F1F81987581245D98
Authority key identifier: 46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii7zW7stRjIvolEZSwD7t7A0f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/2KciRHMBZb7uMEpkZe8Ezzv9_jU.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35710
IP address blocks: 185.168.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:66:6d:6d:62:a7:2f:1f:81:98:75:81:24:5d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bbcd6eecb518c8be8944652c03eedec0d1fe
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8a72244730165beee304a6465ef04cf3bfdfe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:ea:86:0d:8d:5a:94:3a:c3:e8:06:f5:53:
78:70:b2:df:b6:9d:06:77:63:01:43:35:37:78:13:
90:e3:b1:5c:dc:f9:36:b6:09:a5:ab:c2:39:11:42:
d4:53:ff:21:63:cc:c5:42:fd:33:96:9d:7c:d5:73:
ec:e7:68:cd:35:3a:7f:a1:87:4e:4b:1b:2a:98:a9:
6d:dd:b9:d9:21:c2:a3:6b:13:5b:a4:85:48:56:da:
4e:fd:e0:aa:5f:d4:14:b0:b1:25:05:67:a9:66:c2:
0b:52:7a:9e:af:66:37:73:5d:cd:57:ec:c1:5d:ee:
b5:fb:40:90:cf:c3:f5:59:31:a9:4d:c0:14:c3:cf:
b7:e0:f2:b6:c4:78:ef:63:18:53:00:cd:4c:b4:0c:
9e:6f:19:4e:a3:bf:d9:45:2a:ab:02:29:93:78:21:
6f:f7:58:07:af:96:b7:cc:57:ce:3e:95:b4:7a:8b:
f1:27:4d:de:f2:5e:74:f9:a7:81:49:16:cb:aa:a6:
31:a4:6a:62:e6:98:af:75:bb:8a:eb:30:3e:c8:23:
fd:d8:60:b1:b2:41:ff:4e:14:1d:c5:0a:f3:22:09:
28:ed:05:f4:4f:a8:a0:0a:5c:99:fa:57:5c:f2:e2:
e1:f0:1c:a6:59:ef:cd:d1:a8:7c:d1:5a:bb:8c:53:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A7:22:44:73:01:65:BE:EE:30:4A:64:65:EF:04:CF:3B:FD:FE:35
X509v3 Authority Key Identifier:
keyid:46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii7zW7stRjIvolEZSwD7t7A0f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/2KciRHMBZb7uMEpkZe8Ezzv9_jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:07:c4:be:68:53:d4:fd:7d:ac:8a:b3:c3:0b:b7:fa:75:20:
cf:3c:bf:e3:6b:32:30:ba:89:3e:37:9c:d9:5b:44:4d:92:49:
d1:38:f9:3d:d9:89:ef:47:69:7c:1f:7a:28:02:db:63:d8:b1:
f3:61:c9:d8:88:9d:9f:09:33:30:d2:a7:9e:9e:90:4d:58:7e:
02:e7:7e:59:64:59:b9:c0:19:f0:cd:41:46:b2:2e:b1:2f:4b:
32:b6:3f:d1:b9:5f:81:36:04:ca:5a:1c:63:92:d8:56:96:e7:
4b:da:d5:f7:49:0c:7e:18:b4:ba:96:a7:73:ce:58:50:b1:72:
84:6b:a8:16:b3:72:43:6e:2c:36:58:75:6c:46:81:04:9a:ad:
13:d8:ea:3a:17:54:69:e6:db:fe:59:1c:d5:b5:a4:99:b8:3a:
33:b2:35:f4:83:83:fc:c4:fc:41:cd:41:17:e4:1b:09:06:90:
a8:cd:a0:eb:75:de:ee:ae:1b:00:9d:f3:5a:cf:15:9a:78:95:
20:ac:dc:67:6f:e4:ce:9e:0f:26:c3:77:83:68:3e:3b:c8:58:
02:79:36:b4:fa:22:f0:e2:74:76:2f:04:55:f0:4e:af:0a:3a:
cf:b7:f6:91:38:91:89:5d:39:2f:f9:9a:b7:a0:10:93:44:b3:
88:82:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:36 2025 by rpki-client