Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KOI25PzdTkm-0xZVhCT_xtTg5-s.roa
File: KOI25PzdTkm-0xZVhCT_xtTg5-s.roa (raw, json)
Hash identifier: 1o0QY37vh42XXWTJhB6P/HZwmg8ud9LsKS5XYNkdPhE=
Subject key identifier: 28:E2:36:E4:FC:DD:4E:49:BE:D3:16:55:84:24:FF:C6:D4:E0:E7:EB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194ADF4C30EC8C485832A27339518CAACE8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KOI25PzdTkm-0xZVhCT_xtTg5-s.roa
Signing time: Tue 28 Jan 2025 17:28:06 +0000
ROA not before: Tue 28 Jan 2025 17:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200239
IP address blocks: 185.229.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:f4:c3:0e:c8:c4:85:83:2a:27:33:95:18:ca:ac:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 28 17:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28e236e4fcdd4e49bed316558424ffc6d4e0e7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:21:21:ca:be:96:d0:ce:b3:d2:96:de:90:dd:
9b:05:a0:a1:2b:75:63:de:6f:50:8b:24:c4:d5:3a:
55:94:58:61:4c:ed:79:42:35:7b:3c:4f:54:01:ad:
7e:5a:03:cd:de:86:7a:28:71:1d:24:c0:27:07:3d:
ae:b2:5a:35:ba:f4:93:53:57:de:d4:e2:f8:eb:cc:
51:68:23:7f:05:82:72:57:9a:8c:3f:54:a7:f6:34:
d3:a5:c3:f7:74:85:02:d0:0c:cb:09:57:f1:59:c8:
e1:30:76:9d:a4:2f:15:9f:3e:2d:f3:db:57:6e:f5:
e0:48:60:b4:2d:ab:57:14:3e:a5:88:e9:b0:70:c4:
2a:75:c2:b0:74:b9:d4:40:03:cf:8d:db:a4:09:f2:
4b:c8:ce:78:0c:48:dc:3a:10:80:1e:20:d3:af:93:
c3:df:61:f8:40:c5:06:e7:38:5c:2b:16:3f:c9:b3:
05:18:bb:8f:30:a7:ca:3b:48:c8:33:29:1c:2f:a9:
cd:af:4c:cb:4f:9e:76:6b:c7:05:30:ce:6a:b8:07:
0e:a8:70:8f:ab:f0:8b:51:75:af:fc:29:f2:01:aa:
7b:fe:aa:46:23:cc:b9:ba:35:bc:c2:b3:15:3f:48:
d4:41:11:26:f3:c6:17:99:2d:65:09:77:cd:ba:c8:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:36:E4:FC:DD:4E:49:BE:D3:16:55:84:24:FF:C6:D4:E0:E7:EB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KOI25PzdTkm-0xZVhCT_xtTg5-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
70:af:6b:bf:a5:53:a1:08:a7:fd:d0:5f:9f:43:05:f7:e0:af:
0d:1d:a3:54:b0:37:1f:65:4f:38:a3:56:3c:5e:75:b1:76:21:
c0:3d:31:2a:f1:36:fa:95:76:64:14:16:45:fe:df:03:1d:a3:
9a:a8:a1:c5:15:47:6a:b7:c8:2d:57:3b:62:1b:a6:f1:e1:00:
ff:48:6f:58:fb:3e:7c:de:46:a2:f4:46:a2:63:4c:82:cc:8a:
20:93:d4:2e:f4:e3:e8:85:33:62:a9:5c:a3:33:0f:61:7a:6e:
1a:06:8a:45:1f:b9:78:7e:2e:b8:96:2a:7f:bc:91:9f:1f:ea:
ae:a9:ef:b7:8f:bd:73:6f:54:40:29:aa:dc:a5:bf:db:3a:fe:
94:f6:6a:7f:19:ad:27:b5:3f:73:f6:8b:56:ba:0c:a2:04:e5:
c2:13:02:ff:f0:8e:80:16:84:de:0a:f5:fe:0d:fd:0f:a7:ab:
40:4c:81:5c:0e:d2:c2:f0:b9:fb:1a:9f:1a:d4:e6:c1:c5:79:
13:96:aa:3b:42:4b:93:98:b5:6b:b4:db:23:c4:d5:58:bb:a9:
33:db:71:c1:aa:27:2e:e6:25:6a:89:dd:1c:57:63:48:a8:f2:
e1:ec:79:8e:13:2d:74:2d:64:ca:8f:93:59:46:b1:44:6e:af:
63:51:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:51 2025 by rpki-client