Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa
File: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (raw, json)
Hash identifier: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=
Subject key identifier: 2B:FD:AE:BA:C6:7E:71:E5:58:4F:2C:68:25:B1:1A:09:75:1A:25:9F
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 019421B2355354FD9890D8FF0072077C75C4
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206426
IP address blocks: 185.108.224.0/22 maxlen: 22
185.108.224.0/24 maxlen: 24
185.108.225.0/24 maxlen: 24
185.108.226.0/24 maxlen: 24
185.108.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:35:53:54:fd:98:90:d8:ff:00:72:07:7c:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bfdaebac67e71e5584f2c6825b11a09751a259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:f5:bc:89:3b:2b:20:61:a3:b2:60:0c:2f:
9c:8e:bb:43:a5:52:e7:50:b0:94:68:59:4a:75:22:
18:2e:1a:ec:26:a2:51:e8:94:5e:c3:39:7a:d2:28:
45:2b:37:ad:9b:f8:42:fb:2b:57:f5:8d:67:a9:c2:
dc:3c:b1:11:f2:10:3f:84:60:39:a8:b0:c6:d9:10:
8c:4f:f0:ce:dd:b4:5c:6d:d5:59:7e:7c:72:f1:7d:
4c:f6:a7:ab:8f:18:56:0e:c7:04:30:a9:b6:a8:83:
65:19:80:01:1e:2f:76:39:3c:47:99:78:0e:13:89:
a6:da:c7:9a:9b:d8:c5:5b:1c:bc:05:9e:02:4b:26:
ea:e2:78:2f:21:33:4d:09:20:ad:d3:2f:d9:cd:71:
50:d9:6e:74:c3:75:04:68:9a:4d:7a:4a:62:58:e6:
eb:1f:f4:05:84:9d:10:17:a5:95:9e:b1:ab:a0:5d:
fd:68:80:06:a1:d2:eb:60:d7:71:f8:85:15:40:1a:
c8:34:6c:6a:52:e7:f7:ec:c4:41:b5:30:0e:5e:e0:
5e:16:37:ff:a9:16:a8:a7:39:a1:6e:51:ae:74:88:
f5:7e:89:de:57:a0:46:4f:b5:e9:50:62:5e:88:74:
ae:c9:1c:ef:86:45:a7:80:89:5e:08:23:98:b9:61:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:AE:BA:C6:7E:71:E5:58:4F:2C:68:25:B1:1A:09:75:1A:25:9F
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:3c:6e:67:31:13:d9:d7:e1:b1:07:6c:77:07:2f:e1:78:d0:
63:32:dc:9c:5b:2a:68:93:c8:10:9e:cf:b1:0f:f8:c2:be:2d:
5e:10:6d:32:a6:c8:e6:5b:8a:58:31:61:e5:cf:1b:8e:7d:53:
63:0f:ca:c4:cb:f5:e8:fa:67:b8:f7:64:d0:ac:ba:42:93:d5:
6a:8b:14:a4:ab:b1:e7:bb:04:b6:92:e9:cc:f2:ef:ab:cf:d7:
6a:00:48:61:5a:0e:28:9e:2a:65:f4:42:59:e3:dc:46:7a:90:
94:02:73:e0:b5:c1:ad:7a:ef:5e:64:9d:0b:84:ae:07:94:24:
eb:3d:60:83:fb:5f:07:29:e1:a7:24:96:d1:2a:66:bf:af:04:
db:bc:ad:54:5c:ce:ac:ff:bf:90:35:2c:b3:d1:b4:62:f4:1b:
60:23:ea:bf:f4:c0:86:57:22:39:fb:28:9c:69:53:81:be:49:
f2:42:7a:1a:a3:9c:28:b3:52:3f:eb:a5:3f:64:c1:8b:0c:e5:
65:54:b9:ed:05:3a:47:5f:03:cd:8b:f8:4c:45:da:89:59:30:
fb:06:70:98:bd:02:97:a8:d3:54:7c:f3:86:84:54:35:b6:65:
38:ae:a6:46:89:3e:06:df:0a:f9:6c:bc:f1:a7:b2:87:3d:99:
c1:af:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:53 2025 by rpki-client