Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/SS113d4UMKkPVDPWmlqWck-x24E.roa
File: SS113d4UMKkPVDPWmlqWck-x24E.roa (raw, json)
Hash identifier: wgyXZKEbfAwwDp/GZ/OmNWIPZihNhq5vxfdpz8GgLCA=
Subject key identifier: 49:2D:75:DD:DE:14:30:A9:0F:54:33:D6:9A:5A:96:72:4F:B1:DB:81
Certificate issuer: /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial: 019422FC420CDC937D3EA1BB6C3309F4B4C1
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/SS113d4UMKkPVDPWmlqWck-x24E.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41960
IP address blocks: 80.73.246.0/24 maxlen: 24
185.73.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:42:0c:dc:93:7d:3e:a1:bb:6c:33:09:f4:b4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=492d75ddde1430a90f5433d69a5a96724fb1db81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:2f:6e:21:3f:b0:19:6f:36:4b:44:55:10:
1a:55:7c:81:67:6d:05:b3:f2:ee:5b:c4:32:b4:64:
ea:bb:59:91:be:aa:0b:cc:5f:f1:96:70:f3:13:f4:
36:17:4c:fe:8f:c5:59:13:0a:3d:d5:8c:14:d4:b3:
31:0a:f0:c6:ff:ad:9a:1c:05:cb:27:69:04:16:48:
9a:3b:db:fa:a9:43:31:4e:a2:cd:9d:6b:17:49:95:
e0:77:34:62:3e:6a:7a:6c:47:78:31:c7:ec:ea:33:
43:a6:56:42:69:c4:a8:6e:9e:84:bb:5b:ce:ce:40:
41:86:c6:64:17:4f:0f:d2:78:d4:66:74:be:5c:58:
d3:9a:54:d4:8b:36:32:ab:35:73:b8:9b:4a:9e:a3:
ba:46:e5:63:89:0a:81:72:0c:88:17:94:0a:1a:c4:
c3:1e:f6:07:c1:86:38:20:ce:b1:e2:27:02:45:81:
9b:18:2d:21:b1:29:61:da:e5:3b:7f:b0:0a:98:a0:
cf:7c:6b:64:b3:26:3f:62:c9:0d:67:50:49:13:10:
64:67:b2:0f:86:97:ba:31:8e:fc:1d:2b:3c:6f:a7:
66:15:41:25:ff:6c:3c:9c:79:fa:cf:e7:58:d5:2a:
f3:fe:7a:48:59:c6:d8:f2:2b:bb:2b:9d:27:66:b6:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:75:DD:DE:14:30:A9:0F:54:33:D6:9A:5A:96:72:4F:B1:DB:81
X509v3 Authority Key Identifier:
keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/SS113d4UMKkPVDPWmlqWck-x24E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.246.0/24
185.73.95.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1a:5e:d8:af:df:d0:19:05:0d:34:f6:a4:5d:3f:09:c7:ff:
d5:8b:8c:79:7b:65:df:c7:8c:3a:50:14:66:1b:c5:21:27:d6:
5b:e2:50:be:e0:df:e6:26:d8:a3:a5:58:f3:a2:00:06:8e:06:
09:c9:9b:8d:ff:6b:5f:0c:dd:ef:4c:0c:62:7d:cd:98:0e:32:
1a:a2:b3:e6:9a:f6:bd:bf:9c:5b:5f:08:6f:50:90:3f:67:8e:
e2:2b:da:0c:b9:e2:6f:a9:b7:32:e9:ce:e6:62:b8:9f:0d:65:
c6:94:8b:d7:57:67:a8:d4:34:db:2c:51:ac:4c:27:c7:dc:ce:
00:2e:96:2b:9e:35:a7:9b:15:d6:73:f0:be:c5:2c:95:69:fb:
05:4b:3a:7e:7f:56:4b:f7:02:e9:b4:0c:7c:d8:92:58:6b:21:
88:b6:52:6d:6d:00:2b:2e:8f:c4:c1:82:a9:38:61:f7:f1:49:
8c:e1:c2:de:ea:08:71:a2:17:1c:33:fc:ee:a6:86:4e:98:36:
38:ca:f1:ec:15:45:d7:f2:ba:ff:45:17:f2:a5:94:f3:fc:cb:
60:c8:f6:e6:47:8f:19:38:4b:15:6e:56:93:b0:24:8f:4a:c2:
2c:47:b6:d4:a7:8a:7a:8e:28:ed:f1:fc:c8:08:aa:14:1d:46:
38:b0:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:55 2025 by rpki-client