Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/J4yPxhxYeUukMsJDdD90TMvRGYk.roa
File: J4yPxhxYeUukMsJDdD90TMvRGYk.roa (raw, json)
Hash identifier: G/VLrlA3cnhSjJ+GhZJhg/xoifjEIdfLH1UQUqw0kgQ=
Subject key identifier: 27:8C:8F:C6:1C:58:79:4B:A4:32:C2:43:74:3F:74:4C:CB:D1:19:89
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427485746379EF4D624EA5FC8684C0A52
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/J4yPxhxYeUukMsJDdD90TMvRGYk.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273208
IP address blocks: 185.229.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:57:46:37:9e:f4:d6:24:ea:5f:c8:68:4c:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=278c8fc61c58794ba432c243743f744ccbd11989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:ce:d7:b1:82:10:11:78:6d:ce:d8:b9:40:
ab:db:ec:c0:01:5b:9d:8c:a8:39:46:d1:a3:56:08:
09:b7:54:1c:f2:a1:a1:ce:94:e2:74:71:00:4e:c2:
43:09:49:3e:8c:06:f9:af:f1:88:d1:71:fe:8a:71:
61:92:75:5b:69:12:0d:3d:cf:18:9c:9c:5c:9a:7d:
ef:c9:7f:a9:4e:80:22:43:3f:91:53:ee:d5:94:44:
75:9c:e5:01:b1:58:2f:f5:79:ac:c3:54:dd:89:93:
fb:67:53:a4:d7:4c:e2:22:77:d8:e0:db:2c:bb:42:
40:48:9f:ee:52:10:c1:59:94:6a:f4:fc:a4:f4:b5:
81:74:d0:be:a5:74:8b:72:87:9d:93:d0:fa:f2:fc:
e3:de:00:54:d8:82:cd:e8:20:84:77:6e:8b:50:dc:
84:47:78:dd:c7:84:f4:05:2e:b5:b5:ee:31:8b:37:
ae:cf:36:5d:16:8a:61:04:93:d6:0b:8e:b9:71:0d:
b1:b7:56:b7:9f:de:45:d3:8c:54:b0:17:e4:13:6e:
ec:94:35:e7:4c:7d:33:b4:61:f4:ba:ff:89:f9:d7:
7a:9b:e7:6f:1a:7a:89:e3:e7:64:04:ea:11:44:a8:
a3:1c:0b:bb:1f:04:3e:6a:8a:4f:cc:95:72:6b:0c:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:8F:C6:1C:58:79:4B:A4:32:C2:43:74:3F:74:4C:CB:D1:19:89
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/J4yPxhxYeUukMsJDdD90TMvRGYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:24:f3:f1:d7:68:b3:4a:87:48:69:1d:01:80:21:56:44:e8:
a5:9b:41:a9:05:e1:5a:52:fc:a3:85:eb:a8:20:c3:d0:62:e0:
7e:71:11:5d:2f:b9:15:4e:fd:67:8b:cd:02:db:fc:56:d9:bc:
87:61:f5:7d:b2:f9:b3:5c:c5:2a:39:cc:e3:47:b6:ac:cc:e8:
08:a7:6c:c5:4d:53:32:db:fd:cb:a0:c3:61:04:a8:3a:a5:4a:
09:f4:47:50:ea:e0:a0:50:e4:9b:e8:61:8a:84:33:79:80:5a:
55:51:2b:bf:8c:c7:f0:1e:87:d9:44:4c:53:bb:fb:09:04:50:
f7:ab:a0:9c:a4:0e:7d:99:59:ea:3e:ba:7d:bf:c7:87:d3:ac:
e4:9b:0d:56:91:d6:b6:f9:9e:5d:12:4f:48:50:e8:5e:74:29:
71:0c:21:59:17:0e:7d:50:f3:b7:e1:96:ee:fe:a2:1e:7f:6d:
93:46:a0:d8:9d:fc:4c:c1:cc:ef:12:10:93:e5:84:21:5e:8e:
2a:9b:a2:8d:e1:19:03:9d:4f:37:38:56:90:2d:5b:6e:61:d0:
6b:5d:29:4b:54:62:02:7e:0d:b0:3a:f0:35:b2:63:92:7a:87:
75:99:0d:26:3b:3f:93:ab:32:e1:9a:44:3b:b4:c0:14:f9:77:
b6:99:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:29:34 2025 by rpki-client