Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/SumLRFjRvRGsHVms3q07VcTY_zw.roa
File: SumLRFjRvRGsHVms3q07VcTY_zw.roa (raw, json)
Hash identifier: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=
Subject key identifier: 4A:E9:8B:44:58:D1:BD:11:AC:1D:59:AC:DE:AD:3B:55:C4:D8:FF:3C
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 0194228DE056BE2B2E418FEEB04C55D159FA
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/SumLRFjRvRGsHVms3q07VcTY_zw.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211808
IP address blocks: 185.237.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e0:56:be:2b:2e:41:8f:ee:b0:4c:55:d1:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ae98b4458d1bd11ac1d59acdead3b55c4d8ff3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:67:18:73:2b:36:b4:61:5e:99:9f:69:80:
60:53:03:9a:8c:1e:6a:0f:f1:22:33:e6:2e:2a:5b:
2d:95:14:d0:a9:21:3b:e8:23:ed:38:06:47:4c:3c:
3c:b3:8d:c2:86:55:98:75:6b:32:79:ab:02:43:5f:
f8:19:b8:1f:24:0a:c4:51:66:b1:68:fb:23:d3:6d:
f5:8b:92:2f:38:f2:51:a0:05:24:dd:a4:60:4a:d9:
28:73:44:17:ac:42:21:c5:1a:a0:83:87:df:1a:42:
59:e0:b8:1e:59:ad:bc:91:f3:da:eb:5a:70:57:b1:
43:ca:78:90:ba:e7:b8:79:47:fd:4a:bf:19:72:65:
91:51:a3:87:48:27:41:db:fc:a6:32:34:8a:85:4c:
9b:11:1d:92:23:86:f2:38:35:6d:09:09:68:07:e4:
92:bf:46:84:65:72:b1:0b:70:10:d1:84:28:b3:ec:
6e:a0:a1:30:91:7e:38:09:d9:73:33:13:37:bd:0d:
9d:d8:da:76:20:71:73:8e:f5:7f:ab:10:9a:5a:55:
03:0c:fa:4c:c3:f7:a6:cf:ef:37:c9:a3:4b:ed:27:
6a:25:29:b6:c1:94:0e:45:41:cb:e9:1e:ef:c8:5b:
21:1e:27:a2:50:a4:53:18:b1:c6:52:8e:88:10:4a:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:8B:44:58:D1:BD:11:AC:1D:59:AC:DE:AD:3B:55:C4:D8:FF:3C
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/SumLRFjRvRGsHVms3q07VcTY_zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fb:0f:8f:b6:59:f1:4b:61:0f:43:0e:6a:bb:0d:4b:b7:c0:
b0:cf:f9:e9:c5:ab:ec:8d:84:fb:93:4f:5a:f2:f5:11:0b:3c:
2f:3c:d3:09:8a:f5:7b:95:3c:68:c8:3c:f0:20:54:d6:0f:c8:
01:63:ef:87:31:a9:e0:99:5d:7f:01:6c:ae:40:c9:7a:5d:5b:
4a:b0:c0:4a:da:c1:50:9d:55:59:b5:34:c5:bd:27:38:d7:f5:
a9:13:b9:09:51:88:ef:b8:7b:8a:da:e2:1b:0d:98:25:a9:1a:
0f:9f:7d:c2:28:5a:4b:06:af:95:77:a9:b4:a7:36:e7:e0:e6:
0e:6e:33:0f:de:18:5a:72:17:ec:14:ad:43:f5:e8:b9:12:d5:
69:83:59:ec:44:d1:e1:dd:d6:5d:95:2f:0d:66:4c:55:1c:9b:
08:d0:8d:96:5f:37:66:7a:c7:d2:b5:80:b4:c4:c5:e2:9b:c6:
d1:9f:a8:a7:14:9d:0c:ab:e8:14:fb:a8:a8:67:95:4b:9c:f1:
9b:1f:a4:be:51:77:e5:f7:ae:cc:a6:2b:b1:57:aa:d9:98:41:
72:ca:ec:f4:eb:8a:69:dc:f6:48:60:e3:70:5d:eb:a8:75:53:
5b:cb:41:44:70:31:c0:0b:b7:26:21:4a:65:b9:2a:9f:4a:36:
cb:7e:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:34:23 2025 by rpki-client