Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/Xy-GvzWZoQ4DZimCZXffSq7urSs.roa
File: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (raw, json)
Hash identifier: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=
Subject key identifier: 5F:2F:86:BF:35:99:A1:0E:03:66:29:82:65:77:DF:4A:AE:EE:AD:2B
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 01942444C8C2AFDE6FB52C567487B7A2A3E4
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/Xy-GvzWZoQ4DZimCZXffSq7urSs.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 185.244.128.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c8:c2:af:de:6f:b5:2c:56:74:87:b7:a2:a3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f2f86bf3599a10e036629826577df4aaeeead2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:fa:05:06:b8:46:49:17:ea:9f:67:db:c0:
00:19:41:8a:6b:d2:db:82:b1:ea:cf:9b:a2:2d:df:
95:52:2a:8a:85:d9:2c:32:f5:07:56:80:7f:7b:e6:
03:d7:60:8c:75:09:37:8a:e4:94:59:85:2e:c4:f1:
9c:8c:ad:5b:1d:3d:27:e6:99:bd:f2:5e:aa:42:4f:
e8:4d:db:a6:78:c0:9a:78:92:8b:84:90:0f:2b:17:
cd:3c:07:9e:5d:c8:61:4d:49:2c:91:c1:3c:bf:65:
90:96:be:3b:62:2e:cd:ca:2a:d9:92:8d:85:78:95:
ad:0a:70:15:22:0c:cc:99:55:a8:45:04:65:74:ca:
0c:5d:8c:ed:d1:9d:73:1d:25:2e:93:0d:82:4b:c9:
81:bd:7c:ed:5c:16:37:fe:c8:e0:95:1e:3c:d0:97:
b2:f5:b3:a2:26:b4:e0:e0:7b:5c:49:ac:9f:99:74:
0c:1a:b2:3d:ea:16:4e:8f:18:a3:12:22:92:d3:fe:
63:42:e0:cb:52:0d:9d:1d:4c:01:f3:2a:4b:fd:61:
4b:5a:ed:3c:74:8e:0a:83:02:63:ac:96:95:99:de:
97:d3:57:99:bc:09:9d:90:11:43:26:2d:b3:9e:32:
f7:64:a7:5f:7c:1a:8a:2e:72:20:f7:b1:60:ed:4e:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:86:BF:35:99:A1:0E:03:66:29:82:65:77:DF:4A:AE:EE:AD:2B
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/Xy-GvzWZoQ4DZimCZXffSq7urSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ce:d2:af:96:27:6b:6f:34:6a:42:9c:ad:a9:a0:d4:73:85:
75:41:3a:4b:8b:7d:57:ad:46:96:bc:0a:59:cc:dd:4a:c2:96:
f6:7b:ae:ad:ef:f3:db:1b:3b:f8:63:60:b6:5b:11:a9:45:ff:
44:15:08:62:05:8a:cd:6a:e2:be:f8:d3:38:88:43:bc:92:57:
08:e4:33:e5:10:f8:bc:cd:d2:25:69:a2:d8:37:bc:9b:f7:ab:
02:26:57:3f:6e:72:cb:cb:10:6c:fa:c3:6e:60:aa:1e:c0:f1:
55:f1:d6:23:3e:98:a5:6c:27:bc:9d:5c:a7:86:b4:2c:60:5d:
16:12:54:5b:01:f0:dd:fb:cc:6a:8b:10:47:ba:13:d1:09:f6:
6e:e3:ce:71:1a:e3:4c:57:11:47:86:00:95:eb:8b:af:22:72:
36:96:84:db:9e:4a:1b:5c:b4:ca:b2:b3:4e:19:4e:ed:7e:ae:
f1:97:d6:c6:a1:5f:ef:cc:0e:c2:d0:b3:25:24:05:7b:07:56:
b0:cd:ed:b2:d7:02:8f:33:9b:05:9a:bb:3f:29:63:a7:e4:1b:
ef:a7:56:6f:9d:64:c9:9c:62:22:b0:01:b0:f1:dc:09:2a:7d:
37:c4:ae:1b:8f:62:9d:b6:cc:22:63:78:9c:4d:d5:55:b4:cc:
7c:9f:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:11 2025 by rpki-client