Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/K3espcC7Igxju3kPv0HXKEgBfdc.roa
File: K3espcC7Igxju3kPv0HXKEgBfdc.roa (raw, json)
Hash identifier: S6s32CRkbVHWAq+5/nSD6Fm2LdIAzGFALZkp9bfXrns=
Subject key identifier: 2B:77:AC:A5:C0:BB:22:0C:63:BB:79:0F:BF:41:D7:28:48:01:7D:D7
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDB2376232B9C6F998DD2CEA3B394
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/K3espcC7Igxju3kPv0HXKEgBfdc.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59570
IP address blocks: 185.197.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:db:23:76:23:2b:9c:6f:99:8d:d2:ce:a3:b3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b77aca5c0bb220c63bb790fbf41d72848017dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:2a:56:87:d0:07:37:fd:4a:38:71:fd:93:
65:29:db:c5:cc:12:6a:ef:73:97:08:b8:e7:27:24:
4a:df:e0:4b:6a:53:0b:25:d6:8b:89:1b:b5:9e:48:
05:01:58:28:a1:98:ac:f0:c6:e9:10:54:77:86:9e:
c6:39:e0:9c:25:f5:e5:fc:62:34:23:c7:ff:4c:76:
c6:73:d5:19:d5:26:d5:69:8c:13:94:3d:fc:23:03:
a2:b9:65:52:d0:ec:60:bb:a8:0f:4a:23:ba:83:6e:
2e:44:80:1f:52:14:d7:52:7f:23:e6:65:43:64:79:
dd:39:d5:6a:5c:7b:18:c4:84:ee:e6:51:93:37:42:
c7:02:e0:ef:d2:be:fb:e1:a1:2c:58:cb:4a:72:51:
af:81:fd:ce:bb:1e:18:42:45:09:ed:db:a2:99:59:
03:ca:64:a7:cc:ca:9b:2f:33:8c:3a:3b:29:19:fc:
05:17:2f:51:1f:12:9d:ee:5d:69:c4:fb:89:4a:85:
98:65:6e:e5:00:c5:9c:4b:e2:85:db:3c:a3:7b:0e:
b4:6c:f4:44:80:fa:5d:9e:14:74:60:bf:a0:d9:06:
a7:83:19:2c:6b:ea:ac:62:9b:42:5c:4d:81:7d:e9:
fa:e8:0c:9b:7d:6c:0d:59:b6:e7:aa:9b:69:9a:aa:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:AC:A5:C0:BB:22:0C:63:BB:79:0F:BF:41:D7:28:48:01:7D:D7
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/K3espcC7Igxju3kPv0HXKEgBfdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:7c:e8:b5:6f:01:1c:0c:90:5a:f3:f5:97:09:71:7a:a5:c2:
01:d9:7e:cd:9f:81:12:7c:fb:e6:72:f5:16:2f:c5:fd:e8:a3:
d1:20:7d:f0:86:99:7a:34:86:9e:4d:94:d0:e2:80:03:94:32:
f6:51:74:3c:80:5b:58:59:1e:9e:6d:4f:7b:09:9e:ae:23:b2:
d0:4c:26:ca:fc:42:91:a2:8c:eb:59:4e:e7:cd:d3:15:7c:cf:
4b:f7:16:bd:52:f3:c0:81:b3:f2:f1:4a:24:70:36:b8:c5:85:
13:7f:ac:c1:2d:a7:2b:d6:10:10:dd:d5:53:97:6f:da:d9:42:
02:c4:26:b5:4b:66:a5:18:60:29:9c:ed:20:17:48:f5:ce:b7:
d2:e6:18:fa:20:89:6d:59:74:a3:e6:26:50:10:95:fe:90:f6:
a9:c8:ab:21:49:4d:6e:7e:08:d6:ed:6d:a7:aa:d6:e2:6b:c5:
71:bb:e9:a7:06:d9:ae:b2:0c:89:52:aa:07:39:a9:8c:4c:29:
96:fb:06:f4:4e:23:9f:50:d3:96:a1:4c:a6:e4:ef:06:00:de:
17:57:91:61:a5:fe:18:b9:7a:7f:5e:ee:88:48:14:66:48:a2:
8d:45:d1:93:a0:fa:94:42:5c:d7:6e:e5:53:f8:6d:9c:83:2f:
76:87:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:35 2025 by rpki-client