Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/Slwbbwyy2R4DXhMszcmZSafHRLM.roa
File: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (raw, json)
Hash identifier: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=
Subject key identifier: 4A:5C:1B:6F:0C:B2:D9:1E:03:5E:13:2C:CD:C9:99:49:A7:C7:44:B3
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 0194266B808E7562ED6428D3D44836827580
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/Slwbbwyy2R4DXhMszcmZSafHRLM.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.168.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:80:8e:75:62:ed:64:28:d3:d4:48:36:82:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a5c1b6f0cb2d91e035e132ccdc99949a7c744b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:25:70:f6:cb:22:93:34:e4:10:b5:81:60:
e1:db:98:25:2e:56:89:3d:97:ea:0f:f4:d6:c2:c2:
8a:55:fc:00:48:19:38:3c:95:c4:63:5d:35:80:b6:
90:48:df:d8:c5:4f:0a:ba:f1:f4:12:23:59:22:db:
45:e0:8f:31:72:a4:3c:82:90:c4:5f:b9:a9:25:a1:
ab:14:59:be:19:53:22:9f:8e:d9:bb:b5:19:ad:df:
74:55:fd:b1:8f:48:1f:ae:01:43:98:4f:15:41:95:
08:06:30:2f:30:46:c0:b5:57:84:d8:c9:9b:fa:89:
79:a9:9a:4d:6d:89:0d:8f:e8:56:b7:3d:20:56:db:
17:bf:2b:bd:8f:59:6e:6c:91:3a:06:4d:dc:eb:5b:
02:c1:f1:2d:d1:6b:45:b0:18:b2:02:a2:ac:c4:7f:
63:a1:61:8a:2e:dc:51:b6:0f:58:da:ef:5f:c6:cb:
7a:3b:1c:09:24:ce:8e:05:81:ca:17:a0:94:24:d2:
a9:9e:c1:36:2d:8c:f6:ce:2d:43:d3:e7:40:a3:f8:
36:c7:91:94:c0:d0:35:02:0e:28:6f:8a:ed:9e:5f:
7e:4f:e9:e4:31:20:b7:6a:91:d6:3e:9c:8b:fa:1d:
6c:ed:bb:6d:b9:f1:f1:74:f3:45:f5:53:44:f4:0b:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:1B:6F:0C:B2:D9:1E:03:5E:13:2C:CD:C9:99:49:A7:C7:44:B3
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/Slwbbwyy2R4DXhMszcmZSafHRLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d4:7f:3e:19:00:b9:5f:8b:e3:1f:e5:17:4a:0c:0a:39:61:
92:80:c6:39:f0:2e:1e:70:5e:1c:21:fc:eb:2b:76:2b:c7:75:
7a:7a:9d:47:8a:1d:e3:d0:91:af:9b:e0:e4:a2:75:08:e2:50:
37:01:ff:da:e5:f6:ab:24:ec:3d:d2:78:87:a5:b8:8d:f2:3c:
30:92:6a:0f:bc:23:8e:da:2b:c2:55:2f:d5:3c:3a:4a:33:70:
3d:7d:50:6b:c4:83:63:b4:0d:fd:79:56:ca:00:10:25:50:47:
11:9c:53:e5:de:37:66:10:94:49:57:c6:d6:2b:80:ad:8a:0a:
e5:a8:94:5a:9d:18:d3:d6:56:c9:a6:2e:40:6d:73:5c:5a:4d:
ed:f8:ee:d1:d8:8b:bf:a2:81:85:64:12:ff:31:9d:39:f1:a8:
2e:1d:d9:55:36:10:09:db:77:79:fa:f1:85:06:3c:bb:25:05:
2a:1f:fd:11:cb:a0:09:39:b8:71:94:c6:81:4b:3c:d9:04:2d:
be:80:7f:81:6c:7c:ff:c0:c5:9c:e0:51:f8:50:b0:5f:9e:b4:
f4:2b:12:b8:a7:a2:f4:1f:a5:4f:c3:69:32:63:d0:78:7f:f1:
26:cb:4d:a7:e9:af:ca:e8:fe:f4:8e:fe:c2:b9:fe:a9:e3:8a:
1c:c6:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:31:55 2025 by rpki-client