Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2wX833fX2EljXB0kYCcAa2Ch7X4.roa
File: 2wX833fX2EljXB0kYCcAa2Ch7X4.roa (raw, json)
Hash identifier: hIRAzg3NNLZsziJmu6acTcYbRwfjycVsQV1TPJY2dOA=
Subject key identifier: DB:05:FC:DF:77:D7:D8:49:63:5C:1D:24:60:27:00:6B:60:A1:ED:7E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70D53013C5526539A14A4F53C12A0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2wX833fX2EljXB0kYCcAa2Ch7X4.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43590
IP address blocks: 185.128.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0d:53:01:3c:55:26:53:9a:14:a4:f5:3c:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db05fcdf77d7d849635c1d246027006b60a1ed7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:18:e7:ea:5d:3a:8d:a5:ed:07:69:c0:62:
f8:89:e9:5a:61:7a:f1:d2:8b:4c:eb:ab:d2:a7:7b:
a0:bd:f9:ee:2f:67:60:9e:2e:04:83:4e:5d:3c:4e:
95:c3:77:4f:c5:70:87:2f:11:32:5e:32:64:94:42:
b5:46:ea:7e:49:d4:ce:a5:da:9c:6e:ad:41:11:9e:
7f:bd:7c:c0:06:2f:f1:50:7f:57:94:ee:23:3b:b3:
bf:45:5c:20:13:09:31:d4:e9:98:f3:c1:c2:fb:02:
24:ed:48:ab:ec:16:cb:49:c3:eb:de:aa:fd:14:5c:
79:78:43:49:db:89:63:9d:ce:23:55:4d:ea:89:a8:
67:36:fd:57:0e:18:fb:9e:49:28:97:46:3e:dd:e0:
9d:0d:24:6f:06:3e:4d:07:9a:48:e1:16:50:c6:95:
5b:f9:de:39:6c:1a:e9:51:bf:63:b9:20:c6:aa:e1:
c3:32:75:a4:6e:9e:4c:19:87:f1:b3:c1:62:40:cf:
8e:ef:c7:2f:ed:52:06:40:c5:9d:9f:fa:eb:f9:30:
41:de:59:6f:ae:9f:74:f3:37:55:5f:13:28:21:b0:
38:06:ef:f5:e1:e4:38:b8:4d:23:4d:b3:5c:3e:c1:
16:bc:6e:fc:80:85:39:f1:c4:c7:22:68:c9:90:6f:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:FC:DF:77:D7:D8:49:63:5C:1D:24:60:27:00:6B:60:A1:ED:7E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2wX833fX2EljXB0kYCcAa2Ch7X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:73:48:be:ce:19:18:6d:72:31:41:e8:4d:d0:eb:35:4c:6c:
e4:7a:f9:19:4f:a7:f7:e2:22:bc:a4:f1:ab:39:13:ea:af:e0:
87:57:b6:51:f8:66:1c:cb:5f:e2:75:71:2e:39:5f:79:83:27:
cc:64:75:ad:a3:7a:ac:5c:73:82:3f:ca:17:87:87:e2:be:66:
e9:19:dd:75:17:3d:f2:7c:c8:37:32:ec:96:ab:84:78:41:d0:
e7:08:84:10:cb:1b:61:9f:9f:48:83:7e:4c:29:1e:f8:8a:04:
6b:1b:a0:78:5b:6b:29:43:6d:df:c1:7b:88:10:27:ee:77:2d:
b2:ca:1d:b1:d8:44:eb:58:2b:22:dc:8a:1f:8f:bb:e4:b0:1b:
d4:07:86:2e:69:88:0b:0a:00:63:41:72:26:ad:1c:f3:03:2a:
35:a2:43:6b:3d:32:6d:96:7d:d1:a0:52:c9:de:8d:04:19:96:
25:9d:ff:55:41:c8:45:56:fd:7d:57:8e:9d:a4:88:ec:35:d1:
73:4a:83:c3:4c:af:ff:94:7b:49:eb:f1:9b:95:e7:df:e3:76:
79:5f:aa:03:8c:37:00:71:32:b3:bb:9e:20:4c:1a:d7:22:dc:
19:a4:48:d6:c2:66:b0:9d:18:a6:43:f6:22:43:02:c8:02:0a:
f1:db:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:01 2025 by rpki-client