Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa
File: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (raw, json)
Hash identifier: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=
Subject key identifier: 2A:B1:6A:16:20:E9:8F:72:93:2F:1C:40:B2:32:72:88:A8:00:8C:50
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 0194258E2652E353D8F908822943333C17AA
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa
Signing time: Thu 02 Jan 2025 05:47:40 +0000
ROA not before: Thu 02 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50624
IP address blocks: 185.23.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:26:52:e3:53:d8:f9:08:82:29:43:33:3c:17:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Jan 2 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ab16a1620e98f72932f1c40b2327288a8008c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:54:32:ac:d2:f3:d3:fd:48:50:65:63:a9:
65:4e:6d:cb:58:70:1f:a5:4a:1d:71:9a:c3:5c:dc:
8a:8c:dc:5e:c7:a4:2e:0c:d8:4a:9f:4f:86:1a:94:
a3:42:df:e1:98:19:0a:9a:98:cd:b7:61:48:23:82:
5c:e8:20:80:04:8b:ba:d1:6d:1a:fa:e6:75:7c:8c:
fb:85:68:9e:36:65:2b:23:ce:44:2b:83:d3:92:0a:
64:d2:59:40:6e:59:25:7e:fe:2f:3d:ae:6b:e7:18:
d4:27:1a:fc:f9:c3:54:bc:44:1d:77:46:7d:7d:cc:
b1:1e:6e:d7:9a:e0:4a:db:a5:b0:3e:44:9a:21:06:
d4:44:40:13:9b:43:a8:5e:98:85:42:06:f9:ef:5c:
0d:82:0e:71:16:95:0f:73:41:d0:c4:91:0e:9e:87:
f1:e7:56:36:33:f4:ac:ec:fe:cd:c3:84:22:39:14:
dd:07:d4:7d:88:b6:6c:b1:30:c6:06:ba:93:dd:a0:
7e:1c:b9:b0:b9:84:ca:be:b6:22:40:8a:ee:af:41:
64:4c:00:6a:2d:87:48:18:9c:7b:ba:e8:2b:1a:45:
95:9d:a3:11:b1:28:3e:63:86:78:7d:5f:42:af:be:
7b:dc:c0:64:9f:f2:8d:f3:41:ca:e2:90:c0:00:73:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:6A:16:20:E9:8F:72:93:2F:1C:40:B2:32:72:88:A8:00:8C:50
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.188.0/24
Signature Algorithm: sha256WithRSAEncryption
70:08:dd:9e:79:5a:55:89:c1:62:d5:51:f2:d8:a1:5e:3c:36:
88:8c:5e:6b:91:26:34:37:c3:78:7b:45:58:3c:ea:1f:5e:f7:
74:5b:d8:25:31:5f:28:a6:b1:75:53:4e:96:cd:fa:e5:4b:f9:
d1:57:68:37:4b:68:22:17:23:c4:38:65:0d:95:2c:89:f9:49:
c0:59:b5:5b:d0:05:f3:50:05:78:d5:d6:fd:13:ea:76:62:2c:
38:8a:d9:b6:fc:ce:c9:d3:38:58:5d:97:95:f3:9a:c7:95:cb:
a3:e2:37:09:90:79:91:74:40:fa:70:7b:4e:4a:62:cc:e3:0f:
06:76:59:03:41:ee:05:85:f4:6a:fe:43:a4:66:6f:75:22:3b:
7d:18:ff:a2:26:e3:7d:da:b4:45:08:d2:da:ee:c6:bf:09:82:
5d:6c:3e:ac:3f:d4:c8:23:31:b3:47:64:fe:80:84:6c:1f:4b:
41:5d:af:24:b2:4f:c4:21:6a:9c:e8:bb:cc:f8:5a:0c:df:07:
59:6c:cd:ab:c8:58:61:15:85:56:cf:78:3d:1f:25:16:29:34:
f8:6b:3a:54:24:53:4a:7a:56:7d:2f:ba:0a:d3:ca:9c:86:de:
4a:33:b7:09:ad:be:ea:26:55:ad:fd:0e:58:58:0b:2a:8e:e5:
9c:05:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:09 2025 by rpki-client