Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/900joE2kII87-kVZQYJE9AVHaUE.roa
File: 900joE2kII87-kVZQYJE9AVHaUE.roa (raw, json)
Hash identifier: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=
Subject key identifier: F7:4D:23:A0:4D:A4:20:8F:3B:FA:45:59:41:82:44:F4:05:47:69:41
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019424B27050F5493129B89E5E13B24F9EA8
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/900joE2kII87-kVZQYJE9AVHaUE.roa
Signing time: Thu 02 Jan 2025 01:47:41 +0000
ROA not before: Thu 02 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 185.243.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:70:50:f5:49:31:29:b8:9e:5e:13:b2:4f:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f74d23a04da4208f3bfa4559418244f405476941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:cc:1f:92:e3:25:77:26:3f:43:1a:e0:23:
06:4b:b9:0a:4a:66:32:ed:f4:b3:e2:2c:17:6c:59:
e6:7b:eb:60:a1:4f:75:70:b5:be:c3:30:ea:b7:25:
56:6f:3c:df:ba:4c:d4:d7:c1:d4:ad:d3:71:64:a5:
91:3d:5a:d9:91:65:da:17:be:44:c9:40:c2:a1:73:
9a:68:c8:70:0d:09:6e:99:c9:b0:6d:4f:78:29:45:
68:b3:d1:72:80:85:ca:86:3f:63:ea:2b:9e:a6:a4:
98:95:8a:9d:57:f3:39:ba:32:6a:dc:f0:9a:68:2a:
d9:98:e9:80:63:a7:a6:42:c2:79:2d:71:f3:34:34:
37:5d:46:56:6f:bd:02:23:7e:42:b8:23:61:e2:91:
23:fb:1f:d7:fa:2f:db:51:b0:ae:3e:cf:7f:db:5c:
42:fe:1f:eb:96:e9:eb:5a:2a:4c:90:d5:11:96:83:
4f:a9:4c:e5:21:db:de:9a:9e:49:ef:57:46:a8:7b:
b4:86:5a:c6:2c:a6:db:e0:61:3b:6f:e0:b4:7a:fe:
d8:a0:84:e7:be:29:8c:35:b0:2d:40:eb:11:fe:4d:
82:fc:94:c9:ff:70:46:74:08:7c:86:ff:bf:db:52:
19:37:05:2d:46:ec:af:52:b2:7e:5b:75:bc:fc:6e:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4D:23:A0:4D:A4:20:8F:3B:FA:45:59:41:82:44:F4:05:47:69:41
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/900joE2kII87-kVZQYJE9AVHaUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.152.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bd:2c:bc:82:e5:91:24:9c:74:ee:a2:f7:a5:49:fd:34:88:
fc:93:9c:8e:41:47:1a:94:c0:aa:bf:87:2c:31:cb:da:ea:01:
56:c0:53:4b:7e:fc:05:cf:d6:c9:d0:4b:b5:89:2c:1f:48:fc:
c2:8a:ba:95:07:e3:39:24:85:9a:18:83:a6:84:da:e9:96:d6:
dc:67:5a:78:5d:dd:ec:c9:50:bf:63:30:ae:de:f4:10:db:c2:
04:ee:dc:b9:23:ec:bb:82:4a:26:69:fd:5d:8f:f9:bc:4e:05:
b5:1a:dd:ea:34:f0:cf:40:13:37:44:c1:62:f7:89:87:05:e5:
15:55:7c:70:a5:76:b4:00:02:4e:ee:a8:bc:2f:ba:07:58:a9:
c1:42:f1:3b:62:87:79:e5:ea:6c:3d:44:35:87:a7:94:58:0d:
95:80:05:ac:40:22:a6:65:5f:cf:f6:4d:82:48:32:61:34:a1:
74:29:75:75:51:d8:72:7b:81:cd:3d:1e:5d:1f:45:dc:ea:e5:
51:2b:76:ab:57:63:95:f4:4d:9d:37:99:3e:1a:de:24:dc:cf:
54:04:2a:c4:de:5a:69:20:f4:82:7a:f5:24:f3:84:87:97:8b:
c6:24:5e:38:2a:45:5b:5d:7f:55:9e:6d:23:84:44:f8:0c:e1:
e2:82:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:46 2025 by rpki-client