Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/kZhmU11AcLMU9j0H5R4zLY4tMkU.roa
File: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (raw, json)
Hash identifier: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=
Subject key identifier: 91:98:66:53:5D:40:70:B3:14:F6:3D:07:E5:1E:33:2D:8E:2D:32:45
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019421B1F1F081ADAD599806DB91764EFBB9
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/kZhmU11AcLMU9j0H5R4zLY4tMkU.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203247
IP address blocks: 185.141.48.0/24 maxlen: 24
185.141.49.0/24 maxlen: 24
185.141.50.0/24 maxlen: 24
185.141.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f1:f0:81:ad:ad:59:98:06:db:91:76:4e:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=919866535d4070b314f63d07e51e332d8e2d3245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:eb:69:0e:26:79:1b:18:76:8c:ce:ce:33:
29:5c:0f:7d:98:7b:51:e1:42:4a:17:c7:d2:3e:37:
dc:3d:2c:ab:20:58:17:3a:c6:46:fa:e6:05:6d:ec:
be:28:48:6b:f5:fa:d5:c7:48:2e:61:51:8f:33:15:
ec:1c:45:ae:83:3f:c5:9e:e7:20:ff:c1:f5:52:dc:
28:86:6d:24:4b:6e:8c:fa:7b:c6:6b:20:93:6d:5e:
f9:dc:ad:ab:5c:e0:56:80:41:e8:bf:b4:cb:f3:68:
8e:71:05:c2:fc:e0:76:9f:f0:85:15:be:d4:d7:f6:
d6:38:c6:6e:a9:90:02:d7:8b:c1:49:27:81:c9:9d:
54:45:e6:93:76:bf:e3:78:08:15:2a:4f:7d:e2:da:
01:dd:01:76:9a:88:7c:80:47:68:0b:a3:17:b4:ac:
4b:87:a0:28:9a:e0:1a:24:fc:6b:f9:ca:0a:1b:59:
13:d1:09:78:b1:49:4f:07:e8:16:b2:e5:c3:c2:b6:
90:08:3d:45:e7:35:5d:2a:6d:43:25:97:e5:3b:c8:
85:28:28:64:d3:cb:d2:e5:bf:61:da:72:af:87:22:
83:67:57:ba:63:96:28:4f:78:fe:b1:31:5e:28:c0:
42:85:d3:c4:37:15:2b:79:13:50:8e:ef:0c:fc:c9:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:66:53:5D:40:70:B3:14:F6:3D:07:E5:1E:33:2D:8E:2D:32:45
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/kZhmU11AcLMU9j0H5R4zLY4tMkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.48.0/22
Signature Algorithm: sha256WithRSAEncryption
78:0d:3d:a2:d2:86:18:17:1f:70:65:e7:d7:6c:dc:29:74:d0:
fd:eb:a0:fd:ed:ca:63:6b:d5:c0:1f:61:48:8f:09:8c:0e:ef:
47:38:2d:73:32:76:a3:dd:c1:1c:b0:c4:a6:ff:81:39:07:9b:
49:69:cb:88:d8:1b:c5:e9:93:16:19:6b:42:81:1f:85:cf:64:
d8:52:f0:af:79:ef:c1:a5:aa:ea:3b:9f:41:a1:1c:e9:6e:da:
60:0e:db:00:02:a2:c6:80:fa:d8:17:95:0e:47:30:24:0c:83:
bf:e2:21:01:80:fc:12:42:fc:c8:b2:1d:48:32:25:1e:0d:f1:
de:67:6c:7d:78:b1:2f:a6:4b:55:3e:59:63:6b:43:1f:26:a0:
68:62:e1:a4:46:c4:25:1d:a0:3d:5b:77:87:3b:27:64:b7:7c:
64:c0:52:af:8f:3c:0b:9c:ab:06:b8:9b:40:6a:d3:b3:2d:2b:
3d:b1:40:42:8e:52:1c:68:5d:90:d9:7d:3c:84:5e:cf:52:a9:
00:60:a2:b7:65:32:b9:b0:79:aa:1c:82:6d:9c:85:4d:d6:28:
87:2a:53:66:36:68:88:11:ab:30:5b:b9:1d:bc:f8:af:a6:b2:
74:26:f0:b4:c9:7d:b8:75:a2:32:d0:28:a5:09:69:ae:c0:3f:
d4:72:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:55 2025 by rpki-client