Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa
File: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (raw, json)
Hash identifier: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=
Subject key identifier: 0F:63:EF:2B:2D:85:87:67:0E:EA:20:C9:74:90:DD:C2:B3:CA:57:76
Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial: 019428243EE1EACC7B094161F6305418A574
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa
Signing time: Thu 02 Jan 2025 17:50:51 +0000
ROA not before: Thu 02 Jan 2025 17:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204754
IP address blocks: 185.241.184.0/24 maxlen: 24
185.241.185.0/24 maxlen: 24
185.241.186.0/24 maxlen: 24
185.241.187.0/24 maxlen: 24
2a0c:a880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:3e:e1:ea:cc:7b:09:41:61:f6:30:54:18:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Validity
Not Before: Jan 2 17:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f63ef2b2d8587670eea20c97490ddc2b3ca5776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:4c:34:2d:59:7e:fd:74:9d:6c:8e:01:25:
59:de:ce:f5:cd:bd:de:19:dc:08:29:0b:13:d9:3f:
c3:9c:47:e5:08:e4:05:bc:da:5d:9e:c2:49:3d:99:
79:c4:84:0c:8f:2b:e5:b3:5f:2f:a5:f5:d9:36:ee:
82:f1:27:96:96:c6:4b:1a:2f:e1:6e:cb:b7:a1:23:
9c:82:3e:34:b0:ec:5c:cc:4a:09:49:5b:97:48:32:
12:b2:e4:ab:d6:1a:59:be:0a:10:2b:65:22:de:97:
44:46:09:3b:73:8e:33:42:a0:e8:07:2a:28:b5:39:
32:40:59:54:51:7d:5a:e7:61:92:a9:f5:41:9c:49:
cd:ee:4d:ef:eb:40:07:c3:f5:ba:98:78:dd:f7:70:
ff:49:96:b2:a6:6f:7a:ea:7b:f1:c0:b5:3b:7d:83:
b6:7c:aa:bd:c1:44:94:7d:c3:8f:75:57:08:35:b8:
77:22:d0:f8:e0:0a:34:d1:ae:e1:15:41:82:b7:45:
d1:e8:b8:4c:ed:54:07:8a:a2:61:4d:c5:27:6f:24:
1c:eb:bf:4a:f3:ec:6c:9e:cd:5b:a6:60:55:20:95:
e7:b2:61:02:bd:3d:33:20:07:9a:5f:8f:04:d1:f0:
3e:13:3d:a0:91:83:88:58:9c:12:38:2b:45:a6:98:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:EF:2B:2D:85:87:67:0E:EA:20:C9:74:90:DD:C2:B3:CA:57:76
X509v3 Authority Key Identifier:
keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.184.0/22
IPv6:
2a0c:a880::/29
Signature Algorithm: sha256WithRSAEncryption
80:79:ba:88:c7:d7:78:95:0b:7b:29:ef:2c:d7:bd:5a:f3:53:
76:23:3d:87:4a:e5:fe:9e:20:f6:a4:17:9e:a9:29:17:36:cf:
a4:f4:f1:88:ed:0c:2e:8d:49:3e:38:9e:38:2a:f8:11:0b:e3:
30:6f:19:e1:34:63:64:d6:e5:f4:d7:94:84:24:cb:ef:b9:88:
08:58:ce:24:83:5c:e0:98:ff:02:64:a2:7c:26:0e:c6:9e:c6:
a6:5a:a1:5c:ae:f8:8c:3e:7f:63:39:46:3b:89:75:d9:46:ad:
f7:a9:3d:53:aa:a1:0f:3d:59:3b:0b:1b:40:8e:46:58:b0:ee:
c4:e5:f3:de:a2:21:58:19:db:ad:ab:b1:4b:96:4b:f9:13:d9:
06:31:09:a1:1c:21:63:4a:45:5b:8b:4a:90:3c:21:3a:be:32:
fe:25:d2:a5:43:7f:d0:05:8b:0e:94:42:ef:eb:71:b2:e2:1f:
48:00:b3:87:df:f2:56:16:57:5c:2e:a5:89:cd:b7:95:51:99:
71:50:08:5f:dd:ed:81:55:12:3f:32:dd:d6:c1:8d:cf:7e:db:
40:a2:93:34:75:46:98:6f:6a:83:d4:d6:6c:17:81:68:19:ac:
1d:6e:7e:a0:94:db:88:c0:b7:c8:07:02:45:25:ca:43:3b:f8:
69:ae:e7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:59 2025 by rpki-client