Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa
File: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (raw, json)
Hash identifier: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=
Subject key identifier: D4:8B:38:0F:1D:9B:E2:10:04:6C:D8:B6:A4:9A:22:11:20:D4:50:E8
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019426D9A2FE4C0E16D525EF2AFC9DFA6496
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 185.189.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a2:fe:4c:0e:16:d5:25:ef:2a:fc:9d:fa:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d48b380f1d9be210046cd8b6a49a221120d450e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:45:ed:12:7d:53:a5:3f:a9:6d:cc:35:99:
85:c9:5b:a6:0d:86:1a:4d:90:b3:ab:72:ac:f9:6f:
10:9c:fb:3d:0e:a5:99:78:7c:1c:15:80:1f:21:1f:
88:a2:80:72:11:52:4f:41:f2:a5:31:ee:6b:a9:f9:
1a:14:dc:de:27:b3:73:95:13:d0:3c:42:1d:36:65:
8f:00:0b:13:74:e9:43:53:e3:ed:c4:76:4e:bc:52:
af:4a:ec:be:46:c2:4b:71:e9:51:aa:6a:95:7e:35:
1c:18:0b:76:8b:e4:cc:22:ba:2a:f9:fe:09:15:73:
d8:6e:1d:3c:2e:84:45:75:41:9d:32:47:37:c5:88:
09:37:36:ea:d9:05:c6:93:90:d1:dd:16:5e:d7:04:
5a:95:38:0c:21:06:63:6e:11:30:8b:06:8e:f6:be:
78:3c:5b:89:96:d9:c7:39:4a:15:11:90:e7:29:e9:
f8:c8:60:65:83:0a:9c:9b:ff:73:b4:b6:54:f5:8d:
fd:f3:e9:b8:c2:16:83:3e:4d:94:93:8e:2a:52:9b:
29:e1:05:63:57:b3:4a:88:ca:c8:00:0d:d3:da:16:
88:a8:3d:ee:ab:e8:94:8f:98:58:80:ca:eb:b6:ef:
a6:19:49:4a:75:5a:44:76:73:7f:d4:79:1a:9d:b2:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8B:38:0F:1D:9B:E2:10:04:6C:D8:B6:A4:9A:22:11:20:D4:50:E8
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1d:03:c8:d8:71:83:62:62:ff:01:7e:c0:e5:8c:8a:8f:b9:
68:20:26:cf:83:1d:b3:67:d2:9c:d1:ba:5c:b8:7b:88:d7:3d:
a9:30:19:4a:9c:37:47:f1:20:65:e9:a4:f6:b7:6e:a2:b6:85:
d9:06:4c:22:b0:b0:db:aa:30:74:57:eb:88:34:d0:3a:20:c9:
90:3c:bd:80:e0:a0:29:f2:31:55:d4:a3:c3:ac:43:af:5a:4a:
1b:a3:6a:10:21:2a:8a:d7:00:b4:96:db:85:03:24:62:2a:29:
4d:50:dc:45:8a:4f:c5:13:81:3f:29:3a:e6:1d:2f:f7:c1:16:
69:b1:0a:ee:77:a7:df:76:3a:e0:70:6c:01:f7:30:4f:99:44:
c5:c4:52:78:dd:80:e7:85:44:2d:a4:24:b8:83:ac:11:a6:c5:
60:58:b1:3b:f1:db:c4:a5:4b:04:0a:28:9f:b5:57:4e:75:b4:
13:ed:40:0c:51:ad:a3:47:d7:13:6a:82:b1:eb:4a:f1:17:c0:
9b:37:26:00:5a:55:c1:79:1d:b4:e0:27:88:04:71:5e:9d:50:
72:0d:29:a4:e1:ad:dd:19:bb:7d:d7:c0:d1:ce:93:30:57:16:
e0:bb:03:d6:1f:27:50:5b:b1:15:6f:83:11:a4:9b:3f:50:3b:
5e:72:df:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:47 2025 by rpki-client