Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa
File: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (raw, json)
Hash identifier: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=
Subject key identifier: D9:33:61:02:50:04:7D:D3:AF:82:31:97:E3:BC:5C:05:ED:1E:73:C4
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 01953521CDA44394DA508BFF37215FC01BF4
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa
Signing time: Sun 23 Feb 2025 23:26:02 +0000
ROA not before: Sun 23 Feb 2025 23:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213576
IP address blocks: 185.140.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:35:21:cd:a4:43:94:da:50:8b:ff:37:21:5f:c0:1b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Feb 23 23:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d933610250047dd3af823197e3bc5c05ed1e73c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:32:ab:1a:01:26:37:2a:23:31:97:e2:c5:
40:25:a1:6f:7b:0b:cc:3f:f5:4c:e3:23:30:e4:99:
55:1c:2b:9d:f7:6c:75:96:7d:79:3a:10:68:88:89:
39:b4:a9:57:dc:65:55:52:df:dc:33:67:35:14:fc:
52:ad:62:78:d1:e4:62:86:54:06:dc:eb:cf:25:2e:
cf:0a:7d:e4:49:ac:fc:c4:f7:bb:df:04:c4:0b:43:
63:78:e4:31:7d:71:d3:a6:b6:3f:7c:58:f8:16:88:
19:6e:06:18:af:1b:01:1e:ad:93:71:51:d5:ee:52:
c5:5d:21:9e:5f:b2:ff:43:c7:e3:d3:6b:ee:7e:f2:
e4:a3:a4:d5:64:76:3c:a3:29:45:f9:3b:db:e0:47:
19:ae:b7:8f:cb:db:f6:a6:15:87:1f:81:92:a5:aa:
c1:82:fe:10:f5:21:a2:f4:e4:55:0a:40:f9:18:4c:
a9:db:35:f0:8c:7d:cb:5b:e3:c1:da:04:1a:ba:40:
89:e9:b5:95:16:19:10:75:5a:2d:4b:c8:d8:06:f9:
92:31:c4:33:22:7a:d1:26:87:cc:9d:d6:1a:02:d2:
90:a7:00:f1:26:98:f1:3e:07:9b:0a:00:74:d8:7a:
91:ee:f0:00:52:68:61:81:d1:28:eb:60:96:ae:e7:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:61:02:50:04:7D:D3:AF:82:31:97:E3:BC:5C:05:ED:1E:73:C4
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.52.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7d:38:64:37:70:88:48:f3:26:5d:06:3f:a6:46:cd:cc:0b:
0d:0f:e6:88:e6:23:31:f0:28:e4:cb:fb:ea:f3:6d:84:c9:b4:
e5:e9:3b:8c:f0:c0:47:92:86:8b:5f:3f:68:16:b4:c4:3a:19:
48:2e:b1:7b:8b:ce:90:cc:41:8c:3c:75:61:c4:9e:ec:6a:18:
01:fe:41:93:a5:ef:32:37:90:84:f4:2c:4c:b7:11:eb:f8:e7:
ba:83:ca:94:a7:c8:f2:ca:f7:2c:10:ff:c9:e7:38:25:57:80:
63:da:19:09:13:42:46:ca:65:ec:e5:e5:27:a9:ac:b5:9e:5a:
14:1b:a2:80:e1:2d:e8:97:8d:23:2e:6e:ca:07:77:ae:90:ea:
00:dc:e3:ac:a7:16:b4:24:2f:40:d1:bb:e0:4d:35:b3:86:4e:
99:92:6d:52:39:a5:fc:8e:e5:35:3e:84:fa:6f:39:3c:b1:67:
e5:2d:01:e2:ac:23:a2:51:24:f2:65:48:8e:1d:9a:70:ef:8f:
9f:4a:77:5a:3b:79:7c:c8:9e:db:e3:21:2a:a6:5e:58:7e:a2:
b2:21:14:d3:c0:46:b8:c3:cd:6a:f8:3d:dc:b9:12:72:62:13:
34:54:0d:ab:7b:a8:07:0b:7d:75:16:20:33:e8:fc:71:af:de:
5c:78:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:36:06 2025 by rpki-client