Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa
File: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (raw, json)
Hash identifier: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=
Subject key identifier: 88:B8:C2:2E:0F:18:D1:04:98:35:A4:34:6F:ED:C7:30:82:0A:0C:36
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 019421B1F569C593D98B0DA4C404F787E0DD
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51020
IP address blocks: 185.65.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f5:69:c5:93:d9:8b:0d:a4:c4:04:f7:87:e0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88b8c22e0f18d1049835a4346fedc730820a0c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:52:77:b6:d9:6a:ab:bf:48:a7:2d:26:57:
4c:ef:be:5a:ee:e2:80:95:dd:59:01:f5:4e:a8:ca:
6e:6a:31:d5:ae:9f:9e:93:9b:64:bc:07:5f:75:06:
69:58:fc:3f:18:4a:41:0b:27:57:2f:7f:36:af:90:
c3:8d:fa:19:5d:cd:be:44:9f:0d:f3:48:8b:3c:22:
4a:68:e6:28:6d:a4:75:04:ec:93:23:af:0d:6e:2e:
ab:0c:1e:a3:28:f4:7c:f2:c0:d1:2c:16:74:7e:b3:
fe:1b:f5:ef:c0:b4:a5:d5:3b:af:17:f5:32:b6:74:
e8:2f:a7:12:d3:db:c4:12:90:78:25:19:95:53:b9:
15:bc:aa:0c:4a:2e:50:cd:53:90:52:69:b4:28:07:
d4:85:16:fe:13:9c:4a:4c:dc:78:1b:2a:fa:15:e3:
53:d7:9c:1c:4d:22:76:39:e1:2f:98:53:d1:96:72:
18:37:e4:75:6b:bb:63:bb:7b:e9:66:ff:c6:98:11:
34:ae:70:5d:b5:c6:b7:2d:9d:ed:87:0e:a1:ff:4f:
3e:62:9b:00:27:25:28:77:73:fe:fd:28:6f:5d:d9:
f7:7a:44:fe:de:df:36:48:b8:42:1c:c5:ce:54:18:
c0:39:23:61:6e:09:3d:b9:f3:0d:29:80:e4:62:d2:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:C2:2E:0F:18:D1:04:98:35:A4:34:6F:ED:C7:30:82:0A:0C:36
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.252.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c9:b7:b9:a5:53:fd:00:90:1a:73:d0:27:3e:c4:5c:01:f1:
66:47:ff:cd:ff:88:aa:df:77:72:9e:77:7c:6d:c3:11:f7:ba:
67:b1:52:b7:d3:15:f7:f8:ad:15:de:c7:91:43:a4:7b:80:79:
30:1c:be:65:07:89:81:ef:8b:09:94:55:d4:f9:8b:1b:21:64:
0a:6b:56:e8:f8:d1:d2:83:95:65:a8:64:24:78:54:b1:0e:bc:
ad:18:77:21:70:23:47:a3:06:55:b9:6c:3e:b5:9b:d1:db:65:
34:44:79:6f:4e:6e:03:15:41:79:95:98:16:84:72:91:65:65:
63:8e:18:67:64:67:18:7e:91:c9:90:1b:5c:69:34:a6:10:22:
92:8e:4f:53:c3:fd:46:19:2b:71:ab:b1:b5:92:ad:3e:2a:6b:
a7:63:58:36:9c:9f:0a:76:37:1c:4e:83:49:f8:7f:64:b6:a5:
fe:e7:e7:12:4b:ed:7d:8d:50:16:eb:09:d7:de:72:3d:0d:c9:
23:46:26:32:c8:3a:88:5a:86:9d:07:ed:30:fd:87:be:4d:2f:
58:02:ee:e6:aa:9b:c2:ac:a0:bd:2b:ce:89:53:c5:bc:83:ac:
c9:88:e2:05:c1:f9:e5:fe:ef:4f:e6:53:5d:bf:07:cf:aa:44:
8c:ed:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:23 2025 by rpki-client