Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/KOMEO3ezWZumvxO1NtiiKTGYpqs.roa
File: KOMEO3ezWZumvxO1NtiiKTGYpqs.roa (raw, json)
Hash identifier: y/p4zYmrPrmcic5vga+4CRguxPQrr1LrQuRZ5F/An8A=
Subject key identifier: 28:E3:04:3B:77:B3:59:9B:A6:BF:13:B5:36:D8:A2:29:31:98:A6:AB
Certificate issuer: /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial: 01941F8C13953C06E90EE0C7836B18EDC3BF
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/KOMEO3ezWZumvxO1NtiiKTGYpqs.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212579
IP address blocks: 185.19.224.0/22 maxlen: 24
185.243.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:13:95:3c:06:e9:0e:e0:c7:83:6b:18:ed:c3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28e3043b77b3599ba6bf13b536d8a2293198a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:24:31:aa:ef:64:71:89:37:e3:81:c7:3d:
cf:cf:d8:e3:9b:e4:f4:30:d5:66:69:d8:20:ff:b3:
d4:65:54:bc:df:dc:7c:f1:a3:55:e3:db:0d:5f:58:
fb:a9:d7:61:9f:4c:9c:01:a9:44:a3:72:87:4a:c4:
d8:ed:fd:2c:b5:d4:dd:73:dc:86:a9:3b:94:64:fa:
e4:51:82:e1:77:d2:8b:de:03:93:68:ee:f8:42:6d:
71:86:eb:f0:98:c4:f0:fd:9b:f3:8f:cf:cb:fc:06:
2a:40:c2:82:05:a3:3e:4c:d7:91:4b:d1:8a:82:40:
bd:09:8b:f2:d5:8f:20:55:c4:57:c9:75:26:c1:b7:
12:f8:75:a1:04:ea:8e:49:9b:90:b2:98:a0:fe:dd:
04:b9:ae:57:71:14:66:ea:a1:82:07:bf:a1:eb:95:
96:59:6b:17:de:f5:38:0e:d1:b8:30:38:ba:1c:56:
57:1f:cf:71:30:75:a9:c9:4c:a5:0a:b6:ab:6f:ad:
b1:9f:1c:f8:87:e6:81:85:c4:8f:2d:e2:d5:be:08:
cd:ba:e5:d3:5b:66:20:ae:84:8a:7e:52:c3:6d:5a:
b5:71:a8:4d:d9:6f:f6:cf:94:b2:4c:7d:da:a1:78:
a7:ba:de:fb:04:bf:32:38:be:be:e7:ae:da:9d:fd:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:04:3B:77:B3:59:9B:A6:BF:13:B5:36:D8:A2:29:31:98:A6:AB
X509v3 Authority Key Identifier:
keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/KOMEO3ezWZumvxO1NtiiKTGYpqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.224.0/22
185.243.16.0/22
Signature Algorithm: sha256WithRSAEncryption
79:81:28:4b:27:c1:69:07:64:b6:71:f8:17:dc:d0:3e:88:b1:
34:b5:47:1e:69:88:22:a7:5b:0b:fc:ca:31:39:5f:9d:bc:ba:
ed:20:93:fd:d4:4d:e8:a9:c8:a2:59:d2:b1:55:40:f1:38:76:
51:2e:f6:25:85:50:41:c2:0f:f6:1e:e7:1b:dc:cb:eb:7f:d3:
d2:70:50:37:ad:92:51:1c:78:b0:65:71:b7:21:0c:a3:b8:a6:
20:86:2f:e5:bf:11:ea:3b:de:3d:b2:4b:92:14:4e:8c:f1:40:
c3:80:c5:17:2c:0a:aa:98:86:8e:7a:0e:cd:af:42:56:c8:d1:
7e:37:c2:1e:cb:13:2f:32:19:ae:d6:f5:5d:83:9d:72:57:5d:
a8:c4:97:d5:0b:eb:41:37:7e:ae:37:7a:ae:32:fc:9e:a1:b6:
6f:52:d8:b5:a3:d2:99:0a:1d:09:6d:a9:be:3c:eb:83:19:df:
cf:48:8f:a3:70:ec:ce:25:00:df:81:35:6b:fc:76:f8:64:7b:
41:73:15:4d:b9:2c:ae:07:ae:f8:e2:76:38:13:f7:f4:ef:c4:
0f:ff:4a:0c:b6:26:a4:0c:9c:a0:52:f0:75:35:bb:7f:74:d6:
e6:5e:96:d0:fd:a2:d6:bc:f3:7d:f6:70:53:d0:ac:3c:e7:25:
83:eb:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:53 2025 by rpki-client