Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/0XFcRE2rWQnfoqDYM0H0-V52aC4.roa
File: 0XFcRE2rWQnfoqDYM0H0-V52aC4.roa (raw, json)
Hash identifier: a09GdkUD4ozs/RG/G6SRFCs+PYoUDPgcQ6sVuY0FvBg=
Subject key identifier: D1:71:5C:44:4D:AB:59:09:DF:A2:A0:D8:33:41:F4:F9:5E:76:68:2E
Certificate issuer: /CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Certificate serial: 018CC42559BB938ED6BC08E0BF170981220A
Authority key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/0XFcRE2rWQnfoqDYM0H0-V52aC4.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9002
IP address blocks: 185.241.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:59:bb:93:8e:d6:bc:08:e0:bf:17:09:81:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1715c444dab5909dfa2a0d83341f4f95e76682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:5c:59:26:af:9d:f1:3a:f7:af:9e:a5:71:
6a:9e:e2:70:69:c8:ab:76:c2:7b:00:8c:57:b4:39:
5f:17:13:30:d8:7e:30:79:26:81:77:61:26:17:06:
26:95:7d:47:aa:89:ed:47:50:19:a3:43:a9:16:bf:
01:75:f6:a4:24:f8:ba:46:71:08:a4:72:89:a2:fa:
cb:08:f2:e9:1e:ac:c8:6e:2d:f0:7a:aa:77:e8:68:
6b:e9:59:17:5f:a9:b9:d6:b5:ee:3f:6c:7c:ca:c9:
f5:db:67:82:e3:68:e2:36:0c:e9:d0:8b:4c:61:dc:
8e:79:87:3b:a4:ea:c8:62:3e:4a:dc:84:ca:6c:05:
56:92:bc:5a:4c:ed:a3:8f:2d:81:a9:ff:6a:13:37:
8f:ff:ef:82:60:fe:0b:51:1b:c6:97:d6:05:99:b5:
79:22:2b:8a:50:e2:9f:85:8c:90:4f:3c:cb:dc:fe:
09:0c:30:34:a7:7f:c5:b5:f3:63:e3:63:45:72:63:
ee:ad:e2:d6:5a:2f:97:93:29:23:a3:3c:1c:86:0c:
28:15:00:29:ac:d4:73:e4:09:65:73:cb:f2:52:c0:
ef:3e:e1:db:83:11:e6:2c:5c:c3:d8:e3:d0:bf:f9:
35:42:09:46:a4:b8:e9:7c:cd:ce:e4:8e:40:7e:d1:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:71:5C:44:4D:AB:59:09:DF:A2:A0:D8:33:41:F4:F9:5E:76:68:2E
X509v3 Authority Key Identifier:
keyid:52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/0XFcRE2rWQnfoqDYM0H0-V52aC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bc:d8:f4:26:31:0b:48:28:9d:e3:59:dc:c6:d7:d0:17:cf:
6d:2f:02:10:f8:96:9a:b5:0a:35:0c:68:81:14:e6:80:6a:6e:
d5:ab:c6:c5:60:f8:fe:fd:d6:58:b0:2a:52:9e:bd:42:aa:38:
bb:53:69:f7:ca:13:29:1b:48:e1:cf:e7:ad:76:b8:6c:4a:c3:
bc:eb:8a:96:64:ff:65:d2:eb:02:6f:35:57:e5:a6:cb:78:1a:
c3:89:40:aa:f5:30:d8:c6:18:19:ef:fc:44:1e:a1:3f:fb:83:
2f:fc:6d:c4:ba:b9:08:68:73:78:1e:70:6f:56:02:77:ef:23:
3f:f8:da:6b:39:95:ff:d3:0e:3a:39:f6:16:3f:a3:eb:c3:23:
b7:e5:38:48:04:5d:4d:94:b8:b0:1a:f3:db:d0:f7:90:8f:d6:
e5:cf:8e:e9:9e:01:53:50:f8:31:ac:0b:c4:7e:2c:80:bc:c0:
42:14:f6:21:33:23:37:bf:78:12:5a:8b:f2:d3:0a:a5:76:7d:
6a:dc:a1:0a:eb:1e:8f:e1:86:05:08:4d:53:aa:91:78:b2:58:
5f:2d:d5:93:a8:51:7e:ae:46:67:59:8e:09:66:1a:dd:a7:58:
a0:95:ca:df:f7:12:84:a0:6a:01:b6:15:f6:cc:a7:0f:c0:59:
3f:79:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:30 2025 by rpki-client