Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/c_fBLAYiSCoAC5RI9aGFFq_ESZc.roa
File: c_fBLAYiSCoAC5RI9aGFFq_ESZc.roa (raw, json)
Hash identifier: 3DEwScv441POXL3/KBw36z6dtyk1TTEbM4ZIil3VnMk=
Subject key identifier: 73:F7:C1:2C:06:22:48:2A:00:0B:94:48:F5:A1:85:16:AF:C4:49:97
Certificate issuer: /CN=70a4ed02536ee1a2a6c81eab78355473daf27114
Certificate serial: 018CC86F10ACB3669E948EBC1BDC34C6A985
Authority key identifier: 70:A4:ED:02:53:6E:E1:A2:A6:C8:1E:AB:78:35:54:73:DA:F2:71:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKTtAlNu4aKmyB6reDVUc9rycRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/c_fBLAYiSCoAC5RI9aGFFq_ESZc.roa
Signing time: Tue 02 Jan 2024 04:29:30 +0000
ROA not before: Tue 02 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 185.248.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:10:ac:b3:66:9e:94:8e:bc:1b:dc:34:c6:a9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a4ed02536ee1a2a6c81eab78355473daf27114
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f7c12c0622482a000b9448f5a18516afc44997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4d:4d:65:d1:02:c0:9b:88:0b:bd:12:fc:c0:
e6:a2:c4:bd:d0:7d:07:e6:5b:a5:63:5e:af:f0:91:
43:c4:6e:98:0b:0b:23:89:df:57:90:1b:de:f6:95:
42:d3:a6:32:ec:cb:73:3f:4d:12:57:4d:81:4f:a8:
49:ba:5f:68:b4:7a:0b:96:18:45:71:65:3e:b2:0a:
03:b4:c7:8e:af:41:13:b7:d0:47:5a:d8:25:ab:25:
95:b2:de:bb:85:eb:e6:c9:00:87:3e:0c:bb:be:cd:
36:ee:47:8e:c3:7e:e4:76:f3:c0:0b:67:6d:b5:ba:
b2:0b:e7:2f:c6:b5:bb:c6:87:1e:eb:dc:d3:a2:43:
b9:ca:1e:a8:92:ca:8b:e3:88:59:28:10:63:de:ba:
7f:30:c6:ba:45:7f:9a:29:94:e0:65:b2:49:5a:77:
53:e5:a3:f2:7d:aa:03:a1:44:7d:27:c7:3f:f3:71:
3f:bf:27:0f:67:de:0f:63:19:97:31:e4:db:c4:02:
71:c1:b7:5c:cc:8b:0d:c6:3d:bb:9e:45:73:4e:51:
77:a0:57:44:ce:65:36:21:5c:7a:44:8c:44:3c:d4:
4c:d5:01:27:73:98:5c:36:b5:86:e8:f1:85:4f:7f:
69:d0:09:8b:c7:95:db:de:bb:72:5c:28:1d:63:2a:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:C1:2C:06:22:48:2A:00:0B:94:48:F5:A1:85:16:AF:C4:49:97
X509v3 Authority Key Identifier:
keyid:70:A4:ED:02:53:6E:E1:A2:A6:C8:1E:AB:78:35:54:73:DA:F2:71:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKTtAlNu4aKmyB6reDVUc9rycRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/c_fBLAYiSCoAC5RI9aGFFq_ESZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/cKTtAlNu4aKmyB6reDVUc9rycRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.24.0/24
Signature Algorithm: sha256WithRSAEncryption
00:95:df:a0:4c:77:90:97:a6:58:0a:44:44:ca:ce:ad:d3:b2:
89:31:17:83:34:ce:b0:fc:97:fc:70:78:a0:8a:fd:9a:cb:b8:
e7:c6:19:2e:b8:27:d9:a9:98:a6:51:53:96:ad:d5:03:67:42:
8e:3b:d0:55:88:49:e4:b5:8d:67:60:c0:b4:52:4a:90:bb:f6:
9a:b7:0f:d9:d7:cb:56:c1:38:54:0c:f1:38:49:c3:9e:8c:63:
44:47:a3:8e:86:96:19:f5:31:2c:a8:7a:a1:8a:0a:01:96:54:
e3:be:2c:9e:5d:43:23:3b:d8:18:dd:d6:cf:5b:60:4c:95:ce:
7b:5c:7b:cf:f8:60:dc:1c:d3:1a:c3:63:00:44:de:60:05:10:
5e:7c:f1:53:6f:50:80:d9:92:fc:1a:aa:15:3a:37:b0:3b:d9:
45:ad:93:9a:ea:5b:66:0b:3c:09:1c:7b:c7:cd:4d:e9:43:84:
fe:18:4b:71:a4:fc:5e:e3:3f:85:9b:b6:f7:93:65:f4:96:db:
bf:ce:a9:54:64:9e:64:23:c5:f0:da:c7:9a:22:30:b0:f0:39:
9a:6a:aa:24:5f:8a:4f:3b:f4:16:4d:33:20:54:b1:a2:20:7f:
04:d6:c7:40:13:b9:fd:68:7f:f9:dc:16:df:99:f6:1e:ac:6b:
e8:7b:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:39 2025 by rpki-client