Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa
File: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (raw, json)
Hash identifier: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=
Subject key identifier: BD:E1:07:5E:E8:88:82:F8:EA:4C:6E:96:4C:BB:E3:F1:33:75:63:D7
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 01942747F0BA5F9789DE63A8340B7BAD4548
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 185.112.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:ba:5f:97:89:de:63:a8:34:0b:7b:ad:45:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bde1075ee88882f8ea4c6e964cbbe3f1337563d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:12:15:10:3d:3d:0b:6d:95:8e:45:c2:c6:
fb:27:ae:59:e4:d4:26:8e:36:83:4f:4b:ec:70:15:
b0:af:f2:db:b9:29:d5:d5:10:b9:39:fe:da:d7:de:
ac:37:9d:1b:a9:3e:f3:24:a6:9d:ba:c5:8e:4c:8a:
b1:64:55:0b:50:d6:09:5a:e0:91:23:5e:35:31:20:
54:42:4b:80:38:02:52:83:11:27:98:7c:08:13:ea:
74:da:ec:09:2d:7e:ce:05:bc:cb:42:c3:f2:99:73:
fe:0b:62:72:5a:d7:b2:5a:ff:f4:ca:93:e8:67:24:
f0:7f:d8:5f:1b:30:46:60:41:9c:c9:49:b0:ec:e0:
a9:9f:5e:86:04:07:f8:f6:3c:e1:9b:57:f8:08:f1:
27:28:a2:25:ab:8b:2f:d4:83:1e:48:9d:09:a0:0c:
e1:2c:fd:38:02:99:64:c8:d8:78:4c:b4:6b:29:c5:
a1:10:41:2a:b2:50:be:b9:35:c2:f0:3a:11:50:38:
af:2c:ed:c8:3f:fd:4a:8a:6c:d1:53:fd:62:6e:16:
be:bc:d0:33:b5:65:4e:38:6e:f6:46:38:75:f1:36:
77:70:19:20:50:87:e6:46:2e:78:c1:fb:a2:5b:ee:
6c:97:b0:d0:7f:8d:9d:f9:e9:92:bf:34:3b:42:91:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E1:07:5E:E8:88:82:F8:EA:4C:6E:96:4C:BB:E3:F1:33:75:63:D7
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.72.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2f:67:0f:0b:23:9f:e8:80:cf:2a:cb:d1:42:d9:1a:0d:79:
12:f6:d1:41:0e:e5:fd:29:25:10:5a:ad:b8:50:18:0d:56:d6:
09:c7:21:31:7f:13:cf:14:0e:36:d0:b0:c1:5c:38:be:c8:66:
37:b8:ed:14:3e:ca:84:0e:88:60:ea:89:51:79:6d:e0:b2:3e:
48:67:46:e5:4f:ff:eb:12:00:4d:6a:35:15:98:96:40:09:43:
6f:fe:c0:53:2d:2a:68:f4:86:bd:5a:e1:0c:29:f9:11:a5:50:
88:09:42:b4:00:76:66:73:b2:fd:8f:a9:d9:a8:8c:e6:99:61:
54:ce:be:30:0a:7b:5a:de:1e:31:8b:5e:c2:26:45:f9:50:3b:
74:6d:9b:0d:11:6a:af:89:88:ca:f7:28:01:f8:94:2a:f2:97:
06:67:b3:99:98:28:52:c3:49:41:98:aa:75:49:be:7c:42:87:
44:32:49:07:da:63:ee:6d:b0:e1:1d:47:26:f1:3c:ca:bf:e0:
9a:2b:84:05:c8:8e:c0:d6:59:37:6f:2a:be:31:e2:10:bc:61:
fa:31:d8:ca:4e:d7:4f:2d:76:89:2f:56:46:f0:c5:7e:23:24:
0c:a4:f0:00:8e:55:92:50:ce:98:92:f5:e5:e7:1b:d4:c5:48:
84:e0:ec:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:49 2025 by rpki-client