Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/rPpO-fPVx8XfYvByx6grU3jDRqc.roa
File: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (raw, json)
Hash identifier: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=
Subject key identifier: AC:FA:4E:F9:F3:D5:C7:C5:DF:62:F0:72:C7:A8:2B:53:78:C3:46:A7
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 01942067E1A8D7F9505D07D1DDF268C1AEC1
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/rPpO-fPVx8XfYvByx6grU3jDRqc.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12637
IP address blocks: 185.142.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e1:a8:d7:f9:50:5d:07:d1:dd:f2:68:c1:ae:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acfa4ef9f3d5c7c5df62f072c7a82b5378c346a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:b2:eb:e2:79:a9:55:66:aa:30:2c:aa:a6:
01:60:08:b8:9c:f9:cb:9a:6d:c5:25:01:3d:e5:12:
86:57:d5:4c:8b:91:02:11:91:83:59:65:d6:57:bf:
00:87:aa:34:2f:58:95:df:a5:4c:7b:17:b9:d6:14:
82:03:7e:93:28:36:9d:c7:f3:b5:c5:47:ce:29:01:
ca:2d:05:84:42:89:c4:b0:db:3e:e6:28:2d:c1:17:
bc:54:94:b4:ec:51:64:00:96:4b:e9:cf:69:83:35:
eb:27:73:f2:bc:1e:36:e4:c1:6f:b9:fb:a1:42:ce:
09:7a:88:5a:c0:f9:28:b1:1e:88:0f:c6:05:3a:c9:
d7:66:e9:0c:8a:69:66:94:16:5d:55:bb:5e:b0:8e:
68:fa:d3:60:5e:71:6b:f1:c7:de:dd:c5:8a:b0:2c:
1e:db:50:11:00:81:1b:29:86:e8:75:38:2f:cf:a9:
16:87:4f:04:10:78:fa:1b:4a:e9:a7:9a:f1:75:36:
dc:0c:f1:82:56:e4:f6:75:2f:2a:ec:f1:e8:d6:2e:
0a:7f:6f:22:17:55:89:84:ee:42:c7:e4:9e:2c:a7:
80:19:d2:7a:51:49:e4:fd:be:25:99:d7:04:dc:02:
33:70:2d:0b:eb:27:cd:28:5d:a5:71:6f:fa:1d:ef:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:4E:F9:F3:D5:C7:C5:DF:62:F0:72:C7:A8:2B:53:78:C3:46:A7
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/rPpO-fPVx8XfYvByx6grU3jDRqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.68.0/24
Signature Algorithm: sha256WithRSAEncryption
42:41:26:e1:83:fb:c2:8b:69:96:40:02:45:f0:87:7b:c2:35:
07:66:26:eb:1b:63:74:6e:93:07:a0:19:4e:77:c0:4b:d9:73:
2c:7e:ad:0a:6e:a2:56:38:11:74:a7:46:73:1f:f9:60:19:e9:
7d:6a:3b:df:85:ba:5f:6c:86:f0:8c:5e:07:f2:8e:d5:d7:18:
c2:46:94:0f:27:93:ef:05:a6:81:e4:76:83:25:6d:68:42:ef:
93:c8:30:de:d6:dd:fa:bc:4c:00:1c:93:07:da:cc:88:6c:2b:
a1:37:4e:61:8a:c5:a4:42:b8:17:24:aa:ac:e5:b7:3c:7c:19:
43:35:ab:a0:40:c5:15:79:e0:1d:78:5f:ba:fc:c4:10:32:d5:
6e:78:11:7e:2f:ff:e4:f1:f4:c6:51:f3:5a:45:e0:05:eb:2f:
a8:72:de:79:f3:66:df:66:32:83:cb:ac:a7:5b:29:e5:3b:bd:
ff:b5:25:0e:52:23:2c:bf:42:a4:6e:be:f8:45:c6:f6:58:33:
8a:69:cc:0a:ce:06:48:8b:40:96:aa:e3:fc:6c:4d:aa:29:a0:
76:e2:1d:7d:5a:35:19:cd:88:d6:eb:1f:b8:64:85:ab:31:df:
be:96:95:70:21:63:3b:c9:4f:e8:cf:93:3f:55:8c:13:5f:76:
67:95:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:55:03 2025 by rpki-client