Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa
File: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (raw, json)
Hash identifier: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=
Subject key identifier: DA:E1:F5:26:D6:EC:4A:1D:8B:11:A2:A7:3D:7F:25:02:05:8E:11:4E
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 01942143D495948A4BC27BB172A6D4941F45
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 185.53.108.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d4:95:94:8a:4b:c2:7b:b1:72:a6:d4:94:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dae1f526d6ec4a1d8b11a2a73d7f2502058e114e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:5a:51:a1:f0:90:57:3c:20:71:77:50:86:
78:54:c2:8a:5d:8a:1c:84:a7:05:9b:00:7f:d5:a2:
53:f7:c9:ff:8f:7c:89:85:61:60:5a:98:fb:6d:99:
c2:f8:45:16:13:b3:d5:53:de:1e:44:fa:d3:e4:f4:
bc:68:8b:93:6a:89:6c:94:4a:9e:c6:06:6f:e9:f5:
37:ae:df:bb:de:f5:ed:40:ba:90:b1:0e:8b:26:45:
10:94:63:ae:e5:94:33:aa:1b:b5:44:f6:56:d2:1b:
0c:3c:b6:3d:a4:92:b6:c5:03:14:f2:b0:0a:19:e6:
67:3c:ed:6b:c2:99:65:6a:ba:ea:06:df:87:d9:66:
33:2f:a5:b4:73:e0:08:91:dc:57:10:07:d2:2d:01:
b4:a0:e0:29:27:ea:1f:f9:8d:d2:67:10:65:df:77:
e6:45:78:94:cf:06:ec:c2:d6:d5:18:3b:57:15:58:
39:e3:8a:e4:b2:01:d3:4e:6d:b6:6d:56:de:46:a4:
fa:4c:1d:91:3a:f4:af:1a:55:79:ee:c8:3f:8d:57:
90:78:89:48:a2:0a:2d:c0:06:ea:bc:e5:ec:e0:76:
47:44:cf:f8:52:18:3d:f3:87:d5:5d:02:2e:66:dc:
ce:5e:1f:90:df:66:28:cc:4d:1c:aa:1d:84:79:52:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E1:F5:26:D6:EC:4A:1D:8B:11:A2:A7:3D:7F:25:02:05:8E:11:4E
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.108.0/22
Signature Algorithm: sha256WithRSAEncryption
36:3f:44:e7:9a:6c:07:75:41:07:e5:8e:e5:55:5c:fd:82:06:
32:3f:f8:5b:10:ba:9f:e9:57:94:53:c3:c6:df:29:48:06:2f:
6c:ce:69:c7:06:34:57:5f:95:a0:b5:fa:f6:5a:bb:bc:a9:f1:
8a:0e:b7:e7:53:ac:02:46:7a:39:6e:ec:81:6b:c8:cc:6c:c9:
d7:a1:15:f5:56:cf:4e:2e:c7:25:ed:be:b1:9f:87:88:6d:e0:
e1:0a:20:d7:35:5e:96:09:80:f4:ce:1e:65:25:dd:0e:cb:53:
8a:10:5b:61:7f:c7:00:7a:f9:4c:81:35:4d:06:1b:c7:8c:2d:
2b:6c:7e:71:54:eb:78:8c:63:a6:dc:9f:a1:a6:b9:48:79:95:
c2:39:ba:9d:59:7f:35:4d:5a:83:74:8d:36:36:b8:9e:8a:c6:
7a:55:38:2f:b0:58:47:a8:dd:c0:39:2c:56:58:3e:4f:5f:b4:
72:e5:bf:20:3c:17:52:b3:e2:94:78:6d:e0:18:61:4a:91:8f:
a3:fe:d8:e5:9b:12:05:33:f3:45:b0:a2:bc:ae:b0:07:bf:d4:
e9:70:db:76:69:90:99:e0:26:10:c3:36:19:69:bc:16:f3:d5:
38:34:5b:69:e8:4f:a9:e8:06:5c:78:55:bd:2d:e5:91:0a:74:
19:b7:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:44:31 2025 by rpki-client