Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K44KskXrPA10XuiChNa0yWy-Ooc.roa
File: K44KskXrPA10XuiChNa0yWy-Ooc.roa (raw, json)
Hash identifier: bYCCzMj+gGmAdzoWdafBEgxSWrRY8D2IjfCFbylQz/o=
Subject key identifier: 2B:8E:0A:B2:45:EB:3C:0D:74:5E:E8:82:84:D6:B4:C9:6C:BE:3A:87
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194699F56E8FBC6FE07800105367920311A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K44KskXrPA10XuiChNa0yWy-Ooc.roa
Signing time: Wed 15 Jan 2025 11:00:37 +0000
ROA not before: Wed 15 Jan 2025 11:00:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 185.230.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:9f:56:e8:fb:c6:fe:07:80:01:05:36:79:20:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 15 11:00:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b8e0ab245eb3c0d745ee88284d6b4c96cbe3a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:db:67:b8:9a:9c:56:19:41:ff:21:f3:6c:
ca:06:90:92:65:c8:df:d0:1e:02:89:b4:ea:ae:bb:
74:4b:ca:c8:c4:26:6c:ef:68:92:00:2f:55:31:ed:
51:6f:25:52:d6:db:9f:05:64:31:10:fe:4a:b8:02:
55:7e:3c:a8:d7:02:68:81:3d:cc:a2:5c:cc:55:d2:
d8:59:9d:78:28:c6:c3:54:00:8a:93:e3:f8:0a:14:
2e:04:48:0e:4f:4d:04:67:c0:90:4a:62:85:22:67:
9a:7a:d7:e7:66:81:95:3a:ca:66:d7:61:67:3b:a1:
e7:40:a3:bd:3a:79:0b:09:5c:73:0d:0b:a1:99:74:
26:45:c6:63:77:ee:be:ce:62:dc:4a:c7:79:8b:51:
9b:5f:a3:79:02:63:d4:9e:12:ea:5a:e5:ee:e2:d4:
c8:bb:ac:67:59:d4:88:f9:41:18:d5:a7:ba:a6:f0:
5d:16:73:34:0a:3b:09:4f:77:6f:0c:85:05:d6:bd:
fe:4b:bc:db:a1:62:04:55:d0:f6:85:2b:97:de:a2:
0e:c6:df:1d:0d:f5:5a:13:f9:c5:83:af:69:3f:53:
8e:07:cc:f0:a5:07:ad:ef:62:4b:2f:e3:31:84:69:
a6:92:18:72:df:56:d1:f5:c2:cc:a0:db:fc:66:63:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:0A:B2:45:EB:3C:0D:74:5E:E8:82:84:D6:B4:C9:6C:BE:3A:87
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K44KskXrPA10XuiChNa0yWy-Ooc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7d:3e:f0:97:67:58:4a:38:36:70:35:9a:fc:df:89:d6:e5:
1d:37:61:52:b8:3d:c5:e8:2f:84:6a:c5:f3:2b:cf:6e:1d:79:
5a:41:f6:c4:e3:b9:32:db:3b:e5:71:e8:df:e3:b1:79:cd:55:
06:3d:6b:1e:c7:3c:c8:2f:11:79:7e:87:c3:6f:79:63:fe:3a:
e5:a5:48:1a:a3:08:f6:15:50:ae:7f:68:6e:6a:33:1e:31:c3:
74:ae:a2:75:15:49:aa:56:63:f4:4f:95:f4:7b:b5:49:aa:be:
cb:7b:c3:30:58:b4:d5:e4:99:2d:4b:3d:55:ca:07:ea:e9:fd:
b8:15:03:27:b8:c1:6f:1f:f4:22:c2:5f:d9:f2:89:34:d1:99:
d7:39:60:7e:dd:7a:d4:b3:c8:73:f3:04:94:40:18:52:e9:bc:
6d:72:ad:ca:5c:25:95:a0:ad:b6:63:cc:55:8a:f5:c3:bb:15:
e0:1f:e6:d3:1f:79:1d:5b:46:32:f3:1e:c9:85:d0:69:0e:db:
13:11:58:38:39:8f:51:97:21:46:ff:30:30:1a:b3:43:76:65:
17:2d:d8:bd:61:05:4a:bc:e4:2c:4b:db:4a:03:4a:2c:61:f5:
f9:98:a4:a7:5d:5c:37:d5:47:ba:5b:6f:58:6a:2a:68:02:3f:
f3:a7:2e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:13 2025 by rpki-client