Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/86Yxs1ZizrJJJxd_CgUU7rNHToY.roa
File: 86Yxs1ZizrJJJxd_CgUU7rNHToY.roa (raw, json)
Hash identifier: +dc5Fhp2yn9rk5tqzBkSqU4zWkVrDQypGxi0GonySoY=
Subject key identifier: F3:A6:31:B3:56:62:CE:B2:49:27:17:7F:0A:05:14:EE:B3:47:4E:86
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7683F448EFF95F694306698EC3FF
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/86Yxs1ZizrJJJxd_CgUU7rNHToY.roa
Signing time: Thu 02 Jan 2025 07:48:09 +0000
ROA not before: Thu 02 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56850
IP address blocks: 185.248.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:76:83:f4:48:ef:f9:5f:69:43:06:69:8e:c3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a631b35662ceb24927177f0a0514eeb3474e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:ac:82:87:af:ce:8f:e1:2b:2a:06:70:67:
db:2a:52:4e:fa:23:b4:65:2b:2f:8d:ed:0b:67:9f:
48:7f:f4:74:50:ed:7d:b4:05:d4:55:c2:31:6b:a5:
c4:40:bd:e4:69:b8:81:9a:ea:79:2f:6b:44:75:51:
51:2a:9c:97:66:bf:1d:bc:92:26:d1:d0:67:d0:38:
34:bb:1e:00:f4:14:7c:1c:e1:f4:70:06:64:25:ce:
6e:90:f3:39:f5:53:9d:fc:22:5f:ca:f6:62:2e:37:
c7:e3:99:37:d2:92:7f:4d:2e:ee:fe:e1:1a:e1:d6:
ee:8b:51:b6:97:43:65:55:e1:34:74:01:be:0a:4e:
9d:39:ca:18:d0:b6:a0:75:ce:4d:e3:75:89:d4:11:
d4:31:f8:e2:69:01:4b:eb:1e:bd:d5:b1:f7:d0:4f:
ea:24:e4:a5:a3:26:0d:b5:e6:e2:a1:9f:70:bd:70:
f5:3e:17:8b:88:ab:6a:b2:da:9f:53:2d:02:8a:a2:
fe:e1:37:35:67:36:96:82:39:0f:47:79:fb:0e:d8:
c0:90:6b:1a:e7:51:43:cb:1f:5d:5f:19:50:f1:34:
b8:80:63:fd:56:6e:a0:7f:9c:b3:92:13:7c:e6:7f:
e8:4f:73:7f:3d:58:37:ae:13:f9:5d:83:a9:71:b0:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A6:31:B3:56:62:CE:B2:49:27:17:7F:0A:05:14:EE:B3:47:4E:86
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/86Yxs1ZizrJJJxd_CgUU7rNHToY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.184.0/23
Signature Algorithm: sha256WithRSAEncryption
17:9e:f5:23:c0:96:10:98:7c:f7:00:e1:5d:6c:89:67:bb:8e:
c2:0c:a3:55:62:8d:59:f8:ef:65:6f:a3:8f:d4:61:4e:56:5d:
5d:46:f1:bf:f1:b1:5f:cc:f5:84:a0:5d:16:81:e6:a5:96:fa:
05:69:2a:51:98:49:4d:4e:f3:42:1b:c9:5b:49:66:8d:7e:3d:
5f:77:3f:e6:96:5f:cf:ac:35:77:d0:bf:06:a9:a8:e0:13:fd:
19:ec:f3:2d:f2:7a:55:1b:02:b7:39:01:84:1d:04:13:a7:a5:
0a:52:54:8c:84:57:92:0f:f3:57:47:65:d3:19:41:d3:b8:5c:
0b:12:51:1e:f7:ed:34:b5:07:eb:40:b0:ae:4f:03:48:6f:f2:
8d:e8:b3:e0:21:b0:13:19:c7:71:e7:e6:43:e3:ff:3b:6d:d8:
ae:76:33:0f:67:c7:35:f3:c6:53:80:30:ea:6a:78:12:e6:91:
9c:9a:74:f2:c0:21:71:5d:f4:78:05:62:ab:f8:bf:a0:e7:5b:
d1:64:ab:46:e3:57:5d:13:e3:61:f3:a2:9b:03:f9:2b:99:a8:
39:dd:bc:17:0f:b8:2e:05:ec:38:52:e1:f2:6f:e0:2b:35:67:
cd:9d:1f:87:bf:be:87:8a:c8:b4:21:40:e7:77:87:fd:93:f7:
c1:a0:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:51:40 2025 by rpki-client