Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/R7UR19A8DA5u7WHUKAJI549nkdo.roa
File: R7UR19A8DA5u7WHUKAJI549nkdo.roa (raw, json)
Hash identifier: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=
Subject key identifier: 47:B5:11:D7:D0:3C:0C:0E:6E:ED:61:D4:28:02:48:E7:8F:67:91:DA
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 01941FFA97B18BF54433086CEB12D9F9CBD1
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/R7UR19A8DA5u7WHUKAJI549nkdo.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29585
IP address blocks: 185.102.0.0/24 maxlen: 24
185.102.1.0/24 maxlen: 24
185.102.2.0/24 maxlen: 24
185.102.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:97:b1:8b:f5:44:33:08:6c:eb:12:d9:f9:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47b511d7d03c0c0e6eed61d4280248e78f6791da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:98:97:2a:6e:4c:09:d4:07:5d:39:d8:12:
e2:2d:49:77:9c:ad:25:10:42:b9:51:b8:80:c3:ea:
af:d8:d2:94:15:cb:68:a6:6e:a4:fc:2d:0b:35:4a:
05:83:15:be:b9:5e:22:15:ff:70:c3:ac:55:9e:86:
b3:37:d6:87:f3:cd:59:a4:8e:73:7a:26:fc:9a:3b:
10:03:df:e5:06:35:f2:71:9e:d3:2b:b5:04:55:c1:
3a:be:f9:cd:fc:34:5b:42:c8:60:0d:70:89:37:de:
2d:2f:68:8b:e1:be:48:c0:65:f2:3d:e4:b8:e7:6b:
0c:e2:ee:1e:4f:de:92:62:5f:65:71:a8:74:07:5e:
d0:fe:e5:47:6e:15:d5:63:97:cd:c9:c6:10:12:ae:
03:46:3b:87:6f:9b:13:a5:4a:03:f2:b2:a0:ad:dc:
9f:14:d0:a8:02:0f:de:4b:56:79:1c:99:76:2a:7f:
fa:d2:88:f9:62:f8:c3:4d:75:74:75:16:49:31:34:
43:ed:5a:e9:9f:ec:3d:8b:ce:38:b4:b9:4e:f5:24:
a4:95:c6:81:77:22:ca:ff:bf:91:2f:6c:39:f3:80:
10:ea:6a:57:2d:f4:ec:9c:8d:01:12:75:05:c0:b0:
b6:a1:35:d3:9e:0a:7b:8c:bb:8f:b6:e9:ec:0a:2a:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:11:D7:D0:3C:0C:0E:6E:ED:61:D4:28:02:48:E7:8F:67:91:DA
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/R7UR19A8DA5u7WHUKAJI549nkdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.0.0/22
Signature Algorithm: sha256WithRSAEncryption
07:6e:14:3f:3e:57:47:10:0a:4a:a7:01:29:32:77:6b:88:a8:
94:6b:65:9a:7a:fd:24:ce:f2:ed:33:92:f2:59:2a:33:2e:4e:
69:69:78:b3:f2:c3:ba:bb:fc:bb:01:b5:27:cc:1e:e4:97:4d:
7b:97:31:20:1a:40:c8:5c:e4:5c:f8:92:30:6a:b3:30:7a:f9:
48:40:4f:f6:1b:7a:2d:ba:14:79:2c:c7:87:b1:32:76:b5:b3:
ab:77:92:3e:de:c4:7a:b4:13:ab:e8:81:e0:a3:01:d1:15:e9:
3d:ec:2d:41:76:e2:7a:4e:f0:6c:d6:53:9c:b5:97:77:8d:c1:
a9:b1:ed:f8:0c:bc:89:84:52:3f:b0:f4:ca:3f:10:e5:a5:b4:
79:2b:94:9b:5d:0e:4f:2f:4a:c3:58:55:d3:45:e9:f4:63:97:
b8:2e:c7:a5:6d:d1:ef:5b:42:7b:8a:b9:11:2d:8e:a2:11:95:
3c:0f:a8:29:e4:67:41:41:2f:76:ca:07:88:db:e5:c4:bb:61:
89:73:1a:90:7a:d6:e7:71:4a:92:9c:59:ea:e2:a0:e0:f4:6f:
87:5f:a7:a2:1a:af:7e:f4:81:d4:f7:61:05:33:e9:06:e6:af:
82:81:c9:0d:99:8b:35:35:9b:da:f0:f4:a7:3c:6e:83:c4:8a:
d4:99:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:54 2025 by rpki-client