Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c0e112-dfb2-44e8-8707-ffc6f0da4a9f/1/kAJyr4_hSQqVhv1REaOoVWs2p6s.roa
File: kAJyr4_hSQqVhv1REaOoVWs2p6s.roa (raw, json)
Hash identifier: HuCxhO/IzzgViOiWxfA5fPeB/YVNacwaBMSbkDxulnc=
Subject key identifier: 90:02:72:AF:8F:E1:49:0A:95:86:FD:51:11:A3:A8:55:6B:36:A7:AB
Certificate issuer: /CN=d2df48b8dc6c292eea8c805177fda674bf21973e
Certificate serial: 019544A47232916A84895B5FB39362F32362
Authority key identifier: D2:DF:48:B8:DC:6C:29:2E:EA:8C:80:51:77:FD:A6:74:BF:21:97:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t9IuNxsKS7qjIBRd_2mdL8hlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c0e112-dfb2-44e8-8707-ffc6f0da4a9f/1/kAJyr4_hSQqVhv1REaOoVWs2p6s.roa
Signing time: Wed 26 Feb 2025 23:43:02 +0000
ROA not before: Wed 26 Feb 2025 23:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51381
IP address blocks: 185.215.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:a4:72:32:91:6a:84:89:5b:5f:b3:93:62:f3:23:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2df48b8dc6c292eea8c805177fda674bf21973e
Validity
Not Before: Feb 26 23:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=900272af8fe1490a9586fd5111a3a8556b36a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:7e:e3:16:3f:36:14:82:8f:84:59:73:fa:
fa:73:81:f2:c9:53:62:87:c6:41:15:c5:08:14:24:
05:28:e0:67:79:bd:9d:78:a0:1c:42:08:45:80:78:
4a:65:80:61:7a:0c:11:4f:da:d0:97:b5:40:ba:f8:
59:b4:e2:ef:75:2c:04:82:06:d7:49:3c:4f:b3:b9:
3c:c1:c1:2d:68:51:19:89:b5:cf:19:a3:65:49:8f:
c4:bb:a5:e7:1d:3f:eb:9b:50:dc:9f:2b:94:fa:f7:
94:e4:0f:41:41:39:17:4a:c2:0d:f8:14:d9:9b:c8:
b9:04:07:69:94:d6:91:3d:da:5e:01:db:49:39:4e:
bf:fe:a9:aa:c0:28:73:cb:54:4d:c6:e2:66:55:11:
6b:ab:05:5e:e2:0d:55:8f:68:74:ae:e3:67:be:b0:
80:e5:71:40:e9:e7:65:f5:8b:4c:14:63:be:d1:7f:
0b:81:51:54:f8:de:c1:59:6a:05:09:5a:92:18:da:
31:c5:1f:e2:93:96:22:58:eb:ae:76:97:84:ef:b2:
8c:bb:ca:bb:85:a6:99:e8:4f:5e:22:40:2e:20:5b:
e9:8d:ed:94:82:03:fa:3d:9b:06:89:34:f4:a8:9b:
e6:c3:18:8c:54:99:c8:54:f2:8e:19:a4:10:55:a7:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:72:AF:8F:E1:49:0A:95:86:FD:51:11:A3:A8:55:6B:36:A7:AB
X509v3 Authority Key Identifier:
keyid:D2:DF:48:B8:DC:6C:29:2E:EA:8C:80:51:77:FD:A6:74:BF:21:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t9IuNxsKS7qjIBRd_2mdL8hlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c0e112-dfb2-44e8-8707-ffc6f0da4a9f/1/kAJyr4_hSQqVhv1REaOoVWs2p6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c0e112-dfb2-44e8-8707-ffc6f0da4a9f/1/0t9IuNxsKS7qjIBRd_2mdL8hlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.113.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0e:c3:99:eb:c0:41:b2:de:f0:b4:47:58:3f:a2:ce:fa:aa:
9b:47:7a:34:c0:f4:43:f1:ca:e3:ba:4e:be:7c:9b:71:a5:10:
ed:85:c5:56:db:3e:02:99:c6:90:35:80:c0:40:77:25:c9:21:
5d:d2:9f:50:b0:90:0b:e9:2f:86:e0:d5:2c:29:b2:49:99:09:
7d:2c:3f:ef:66:37:67:59:13:bb:d9:a8:47:2f:0c:c7:ea:71:
65:9f:3b:b0:1b:98:81:74:54:78:14:61:de:00:31:0a:d6:35:
fc:5d:a0:1b:73:24:c4:f4:7c:60:a2:3f:3a:52:6e:59:d4:0a:
1a:a8:0f:11:d5:e7:fc:af:f0:5b:73:89:bb:d9:da:8b:cd:93:
ff:69:2d:9f:0f:ef:0d:5d:c0:ea:1e:5e:8e:75:5e:7e:35:48:
06:52:e1:b0:30:11:cd:48:f8:3c:59:5d:7b:ea:57:00:c6:2d:
41:bb:15:cf:82:46:19:49:d5:ed:6e:87:d1:62:e1:26:51:65:
f1:4c:1a:62:36:7c:6f:07:53:86:4d:e1:e3:d2:3a:d7:e7:00:
c6:d9:79:03:8b:6a:9a:3a:9d:88:ce:be:08:cd:e0:26:89:29:
c1:f8:99:1d:49:19:2f:ad:a5:49:77:2a:d5:0f:8b:6a:6d:53:
24:57:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:22 2025 by rpki-client