Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/d_85lmU1RpGhphRgrIhRhEl6fKg.roa
File: d_85lmU1RpGhphRgrIhRhEl6fKg.roa (raw, json)
Hash identifier: VpMz8KT7GjSVAfis0Pkct4zgkIxNQjh2YesKqba5huE=
Subject key identifier: 77:FF:39:96:65:35:46:91:A1:A6:14:60:AC:88:51:84:49:7A:7C:A8
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 0194258EFBDF1E086765C3688D9FB7FBE9A3
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/d_85lmU1RpGhphRgrIhRhEl6fKg.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61148
IP address blocks: 185.48.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fb:df:1e:08:67:65:c3:68:8d:9f:b7:fb:e9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77ff399665354691a1a61460ac885184497a7ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:0a:b9:34:1b:bb:d9:c9:5b:81:3c:e4:17:
ae:79:02:dc:de:a5:43:66:81:7d:de:7b:a8:bd:ae:
8f:9b:3e:01:65:cd:48:99:57:d5:d6:b8:65:e3:55:
cd:e8:e5:71:8b:84:c1:fb:f9:5c:72:54:ad:40:47:
19:14:bb:87:b3:b8:44:ce:dd:05:e0:25:96:2b:f6:
f2:b0:87:f2:a2:46:40:8f:68:c7:72:08:c2:15:a6:
12:5b:9f:b9:04:74:9d:28:43:4c:a9:c9:01:6a:63:
73:9b:a3:6d:b7:4c:a8:19:ec:b4:ea:4e:c4:36:fc:
b6:bd:02:3d:69:88:0f:67:36:51:e5:1a:eb:88:6c:
af:32:ec:09:23:f9:1b:77:27:41:f8:3f:2f:f2:6c:
bd:2c:7b:d2:af:c0:3e:88:1b:05:67:80:45:cf:c2:
bf:49:64:6c:bc:9c:98:df:ed:21:ab:6f:c2:a1:23:
bd:0f:37:8a:5f:01:43:50:03:7a:74:7c:1a:4d:0a:
f8:b9:21:6a:af:ae:a3:52:77:fa:e9:a4:0e:29:79:
24:7d:f9:63:f4:36:11:41:59:92:91:5e:f4:4a:81:
28:e9:db:69:da:61:8b:fe:88:71:18:ef:6b:50:66:
f7:a3:62:2f:51:53:95:a7:81:d7:8a:9c:39:97:74:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FF:39:96:65:35:46:91:A1:A6:14:60:AC:88:51:84:49:7A:7C:A8
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/d_85lmU1RpGhphRgrIhRhEl6fKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/24
Signature Algorithm: sha256WithRSAEncryption
82:70:3e:ad:72:99:11:54:d2:07:eb:a8:54:bb:c2:8f:19:0a:
f3:88:09:5b:b1:bd:4d:73:45:97:75:f8:b7:fb:a8:26:13:a2:
a5:16:72:98:dd:d9:3f:0f:0c:e5:bc:6f:a7:4e:28:3e:48:33:
bf:f7:ea:f9:15:ed:d6:c9:ce:9c:a6:a8:9d:d2:00:9c:3e:05:
60:55:ef:3f:03:d6:92:fb:ec:61:48:18:13:a5:ca:33:0c:bc:
5c:5f:fd:14:a9:ca:44:c7:36:38:48:02:4b:cf:74:6f:c6:14:
f4:d1:ee:d1:c4:4c:7e:f1:20:dc:4b:59:bd:f9:ae:87:21:af:
68:af:a6:d3:99:f5:c5:a0:a6:aa:5a:5e:86:37:eb:58:d2:08:
37:f8:c1:2d:82:ce:c2:52:c1:14:f3:08:d8:c7:1f:25:a6:e4:
40:79:49:8f:6e:61:68:8c:94:2a:d5:6b:4a:07:d2:e1:2f:e4:
c7:57:47:f2:7f:32:dd:49:0c:67:20:4f:c2:d0:50:57:a1:6b:
ca:18:55:0b:ef:76:79:14:2f:a0:9a:0f:ee:06:e7:b2:cf:db:
7a:98:f0:9c:50:ac:01:d1:09:82:3e:8e:34:0b:05:28:9e:dc:
8f:27:83:0f:93:07:90:11:3f:60:5f:91:76:37:0e:c2:a6:40:
e4:01:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:53 2025 by rpki-client