Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa
File: XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa (raw, json)
Hash identifier: 1W1CVZL0BwZJqQJ2Az9Lw99cQ4qD2ObuWZrSKPc6/mA=
Subject key identifier: 5D:40:E1:29:56:14:9A:D6:4B:7D:C3:1E:BE:56:7D:80:21:B9:DD:27
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 019423D7A10B4D68E1AE0340E4335AFDCEC8
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa
Signing time: Wed 01 Jan 2025 21:48:41 +0000
ROA not before: Wed 01 Jan 2025 21:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199744
IP address blocks: 185.48.141.0/24 maxlen: 24
185.48.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:a1:0b:4d:68:e1:ae:03:40:e4:33:5a:fd:ce:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Jan 1 21:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d40e12956149ad64b7dc31ebe567d8021b9dd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:71:db:8a:cc:ab:69:1e:c5:79:a8:87:6f:
5d:9d:a6:ac:f1:5e:cc:39:0c:28:b3:ae:6b:ef:aa:
32:fb:d5:d0:f2:aa:a1:1d:dc:ea:33:4f:b6:22:14:
ba:0e:65:f1:e5:f9:47:32:58:10:f1:1b:86:0a:a8:
1e:ef:06:3a:bd:5d:c3:78:ef:ad:15:43:9a:44:cb:
33:87:3f:ad:a0:21:65:aa:18:03:ae:a2:54:8f:44:
85:04:45:b5:5a:aa:4a:71:8f:ed:b7:68:b7:98:58:
53:8f:24:83:77:c2:ba:c9:8f:db:dc:16:f7:cd:53:
5d:c8:5a:eb:77:0a:34:74:83:1f:6c:cc:3c:a8:57:
4d:d5:0d:09:d1:65:29:95:df:9f:69:73:1d:2b:c6:
4d:f2:0f:29:97:a1:0c:c1:ce:df:91:0b:8e:fb:c0:
5b:87:8c:7c:8f:39:cc:12:d3:75:22:53:3d:2d:3b:
5e:7e:a4:c6:2d:76:96:cd:f2:56:17:23:73:ba:06:
89:f2:b4:5b:dd:b0:66:49:b6:9c:25:bd:70:dd:c4:
c7:c1:8b:b3:4d:39:4b:e7:cd:5a:51:37:18:41:b6:
cf:91:66:3d:66:d7:0d:90:88:f2:2d:81:cb:92:ef:
f4:b0:5f:66:4a:26:45:1d:14:ba:8e:ee:eb:7b:48:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:40:E1:29:56:14:9A:D6:4B:7D:C3:1E:BE:56:7D:80:21:B9:DD:27
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.141.0/24
185.48.143.0/24
Signature Algorithm: sha256WithRSAEncryption
14:98:ff:a0:fb:f2:0c:31:84:7e:3f:92:4b:64:12:19:5d:ca:
c0:09:b2:68:a0:85:e7:b2:01:2c:d6:10:9e:a9:93:42:37:ba:
3a:c6:b7:88:05:b3:8a:01:1b:d8:b0:35:9f:77:47:d6:2c:38:
b7:37:f8:2a:48:1a:e0:df:37:d2:e7:75:bf:42:64:64:20:b3:
4b:e9:3f:f4:66:e3:0d:73:73:c0:2f:db:4d:1a:1b:51:cb:8b:
0f:0d:e4:56:a5:a5:35:cf:f1:b5:d7:7f:1f:43:da:30:b8:9d:
c5:df:0e:80:28:f9:7b:57:5d:b5:4e:56:95:9f:a4:47:9b:83:
2b:96:22:d8:0a:c6:5d:06:e0:c5:01:f2:92:d2:66:6c:4c:28:
20:79:c0:17:4c:bb:0a:33:6d:15:ec:94:db:f9:5a:5c:02:87:
6d:f7:a3:71:98:0c:e2:eb:a8:f7:44:f8:d5:21:3a:50:81:9f:
d3:57:c3:0f:cc:74:40:7d:ef:6e:1f:b0:5f:97:56:62:07:de:
01:a4:9c:ab:72:af:05:e7:a9:b9:5b:6d:49:fa:4e:ea:b9:7b:
ad:31:8c:86:83:5a:06:93:09:bb:1f:40:8f:bf:0e:60:09:fa:
00:47:ae:f0:23:9d:be:61:5c:d4:f2:b2:6e:30:c5:06:11:c8:
98:90:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:53 2025 by rpki-client