Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sJ_43mBnsYcSpLe1Okphi2MYxeY.roa
File: sJ_43mBnsYcSpLe1Okphi2MYxeY.roa (raw, json)
Hash identifier: K53dQWV1f9PdFngkL4wEomnjQWLVrN/RacpQm2hghTc=
Subject key identifier: B0:9F:F8:DE:60:67:B1:87:12:A4:B7:B5:3A:4A:61:8B:63:18:C5:E6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD7940E31ADBE4582866B4E05E87E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sJ_43mBnsYcSpLe1Okphi2MYxeY.roa
Signing time: Thu 02 Jan 2025 05:49:31 +0000
ROA not before: Thu 02 Jan 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61230
IP address blocks: 185.67.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d7:94:0e:31:ad:be:45:82:86:6b:4e:05:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b09ff8de6067b18712a4b7b53a4a618b6318c5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:de:34:22:ab:e5:e0:f8:b9:69:90:bd:9c:
1e:38:f7:ba:e6:79:ef:78:42:88:7c:9f:2c:a2:a3:
91:f1:db:f8:f5:80:5f:14:bd:51:bc:0b:c6:61:be:
40:3c:56:af:ed:c0:77:4b:ae:fb:5e:3a:16:46:98:
31:52:9f:45:c8:d7:bd:2a:b8:bd:ee:23:10:b3:63:
a7:cf:42:b7:8b:69:9b:4e:09:48:fa:27:40:7e:fd:
71:e2:39:ad:37:b3:2c:07:92:b1:92:25:e2:6b:a8:
0c:ec:12:9a:d2:89:8c:39:a6:6b:e0:1d:f3:8b:41:
35:77:49:99:ce:a2:8b:87:f6:ce:5e:4f:aa:c8:a1:
d6:31:d3:de:90:eb:82:a5:ba:e3:0a:96:b7:36:e3:
50:74:23:79:d5:69:26:48:ce:4a:f7:c4:9f:aa:63:
a7:6f:c7:b6:bc:70:13:82:09:b5:95:8a:79:58:5f:
38:99:9e:40:d7:64:da:ec:48:7b:f9:36:17:80:1f:
80:37:eb:24:5c:30:5f:1f:b9:32:38:42:b5:a8:05:
1a:b5:b3:6a:b5:ec:ab:1b:77:4e:de:ff:28:b3:1c:
6b:a1:41:fb:27:15:4a:03:b1:30:53:d4:a9:7a:7b:
8a:b2:8d:49:17:8d:14:e4:59:05:26:d6:1b:4d:83:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:F8:DE:60:67:B1:87:12:A4:B7:B5:3A:4A:61:8B:63:18:C5:E6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sJ_43mBnsYcSpLe1Okphi2MYxeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.253.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6e:2b:c0:dd:b0:25:dc:ac:2f:1d:00:e6:66:aa:c1:bf:98:
a1:80:07:c2:1c:15:d0:87:9b:be:a1:bf:3d:01:1b:c1:7d:ff:
33:f9:22:03:11:37:42:44:10:f6:14:63:20:62:e6:d1:0c:f7:
4d:e9:35:96:6e:0b:98:50:0c:94:27:22:39:32:3e:a7:02:44:
0f:d8:7c:a8:d7:0a:62:f0:9a:a3:6f:a8:19:12:c4:dd:fb:a7:
08:2a:4b:9f:e2:34:f1:9a:e4:49:84:6f:57:0c:63:b0:76:e5:
49:5c:4e:77:46:91:d4:e0:fd:a5:0e:12:8b:2a:ff:f0:b2:9e:
f4:fa:4e:03:33:24:42:2b:7f:7f:8f:a3:41:8b:04:6b:5a:7e:
b0:47:25:88:73:a1:21:46:7f:05:67:26:d5:b4:ef:27:b8:1b:
28:bc:d0:17:ff:df:6a:b3:c5:c1:21:b2:1c:60:63:68:e4:5e:
60:67:2a:b1:af:8c:66:36:5d:3f:45:bb:26:e9:64:61:4a:21:
66:8b:11:c6:08:e9:7d:f3:a5:bc:e5:be:19:bc:78:d3:77:5f:
fe:c3:92:1c:24:8b:51:a3:57:67:97:12:84:a1:6d:f4:ff:5e:
6d:03:1f:4d:10:6a:af:0a:0b:81:01:bb:58:1a:e2:53:62:4e:
9a:97:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:37 2025 by rpki-client