Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/Py8NBn2wKQtg0zHbcBysEwIXqks.roa
File: Py8NBn2wKQtg0zHbcBysEwIXqks.roa (raw, json)
Hash identifier: NTVpJIiHXmRF3xsTXgz/x/FsM7sCsul7uRQRW+IaP6E=
Subject key identifier: 3F:2F:0D:06:7D:B0:29:0B:60:D3:31:DB:70:1C:AC:13:02:17:AA:4B
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 0194214419188A73D2BEDCE4DB7EB705059C
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/Py8NBn2wKQtg0zHbcBysEwIXqks.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198394
IP address blocks: 185.12.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:19:18:8a:73:d2:be:dc:e4:db:7e:b7:05:05:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f2f0d067db0290b60d331db701cac130217aa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:a2:c1:e6:f5:b4:75:65:6c:b6:40:b8:f8:
b6:ae:40:8f:3d:30:74:02:07:94:04:32:9b:63:d9:
7b:20:9e:9e:58:4f:b9:53:9f:ea:8c:5e:cd:2f:fa:
a4:c6:54:b1:af:48:a1:a3:e5:ea:b1:fa:23:76:08:
58:62:e5:0f:93:bd:f7:fb:17:cc:cd:be:1a:45:50:
98:37:8a:a9:38:c6:7a:c4:3b:87:03:1f:9e:69:88:
7d:3b:5e:f4:f8:42:ea:69:99:aa:bc:a0:a5:2c:c0:
7f:9e:4c:b0:d5:3b:0d:f7:52:57:81:59:60:84:8c:
88:03:08:05:dd:ad:8e:a3:0f:41:22:96:3d:6c:40:
8e:8a:6d:eb:7f:ff:cf:0c:16:eb:9d:fa:74:d1:95:
46:32:5b:d8:08:83:f3:0d:d8:6a:dc:b2:72:e8:42:
14:ea:5e:4a:56:50:b4:fb:ca:cf:ae:0e:28:9f:3d:
cc:9a:1c:52:48:03:60:29:05:83:97:eb:b1:24:fb:
75:72:99:64:37:2a:ed:a3:98:9b:d8:d9:aa:87:3d:
a7:56:b8:84:68:51:16:45:c7:40:46:e7:af:d7:af:
a7:5a:31:ed:08:67:d8:95:d2:4d:18:12:37:d5:ed:
ef:b4:96:ce:e4:05:32:09:f3:5e:21:1f:57:e9:1e:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2F:0D:06:7D:B0:29:0B:60:D3:31:DB:70:1C:AC:13:02:17:AA:4B
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/Py8NBn2wKQtg0zHbcBysEwIXqks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.24.0/24
Signature Algorithm: sha256WithRSAEncryption
24:56:25:e0:70:e8:c8:0e:c2:57:fc:94:2e:91:f5:c4:15:4a:
e9:e4:17:0e:ac:61:6f:76:8e:8b:02:ee:bc:5f:cc:14:9c:f5:
24:79:ef:57:39:ab:93:71:60:80:e6:12:ac:aa:c7:70:eb:fd:
e1:1a:c4:58:7b:86:e3:6c:d5:40:dd:4a:09:5a:39:e6:3a:6f:
db:a5:db:a3:60:4d:24:21:85:52:50:f3:ac:ea:31:8c:09:88:
97:53:77:70:b2:cf:26:fc:df:e1:e3:c1:c7:79:d8:b8:fe:78:
a6:ed:20:87:de:7a:89:6e:20:a0:2b:f9:bd:13:6f:3d:ee:24:
4c:ea:38:71:fa:dc:60:65:e0:46:89:de:64:3e:22:ba:62:f0:
49:c1:f6:f5:53:f4:a7:e7:6b:b4:2f:7a:19:48:87:bb:21:da:
ed:e3:7d:ed:bb:2d:68:25:7e:5c:d5:48:46:b3:e1:5e:c5:a7:
f0:40:89:ea:30:42:53:d1:5f:09:73:07:c0:45:32:d3:cb:18:
09:d1:3c:52:7c:18:c5:31:59:17:17:b1:45:13:dd:c7:3c:1a:
37:2b:da:28:08:0f:eb:a2:9c:4c:a1:87:66:58:ab:f9:db:11:
12:10:27:83:d4:00:d5:d6:c4:e3:34:14:19:49:0a:83:60:d7:
dd:0b:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:51 2025 by rpki-client