Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/V_fCtcHRcIvlGMfQMllvvNseZ5s.roa
File: V_fCtcHRcIvlGMfQMllvvNseZ5s.roa (raw, json)
Hash identifier: pcOqzRDVwxnAc2XcbL2lzklSAVLcGx3z65HCfsZTOqA=
Subject key identifier: 57:F7:C2:B5:C1:D1:70:8B:E5:18:C7:D0:32:59:6F:BC:DB:1E:67:9B
Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial: 01942747599A0CC657217827F28115ECBDE1
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/V_fCtcHRcIvlGMfQMllvvNseZ5s.roa
Signing time: Thu 02 Jan 2025 13:49:34 +0000
ROA not before: Thu 02 Jan 2025 13:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 185.239.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:59:9a:0c:c6:57:21:78:27:f2:81:15:ec:bd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Validity
Not Before: Jan 2 13:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57f7c2b5c1d1708be518c7d032596fbcdb1e679b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:59:1f:2a:6f:c9:2a:89:bd:fe:ec:2e:57:
00:85:67:f4:0a:6f:47:1f:d8:d1:a9:ff:c0:ec:8a:
96:85:5e:b5:1a:09:90:0c:7b:b7:6b:1a:db:cc:dc:
b3:75:8a:43:c4:65:20:30:f9:e6:da:cb:d6:f0:72:
34:60:54:93:01:2e:1b:ac:a8:4d:57:71:4e:61:c1:
80:45:7d:ed:8c:e8:0b:e1:08:5a:3d:a9:4a:82:12:
5d:94:bb:ed:c3:f6:3b:77:1b:8e:c7:2a:9e:09:8d:
93:d8:99:f5:b4:79:f0:86:ff:6d:90:71:5a:1f:72:
9d:03:71:f0:c6:bd:cf:b0:bb:53:bf:57:61:b9:a0:
b1:ad:fd:d6:3d:82:5b:f7:b3:92:bc:22:cd:aa:59:
55:18:d3:4c:5f:47:fb:1b:dc:d6:cb:86:af:94:06:
f5:80:b4:04:80:f8:5f:82:0b:18:41:86:6c:b3:77:
ac:0c:1a:1d:be:58:3e:b6:35:a9:3e:22:29:8d:27:
ea:8a:9a:cf:0d:8c:81:04:1c:b1:57:1c:d8:a2:67:
17:86:df:68:37:68:6d:80:32:03:7b:f5:57:88:6a:
6c:7d:2c:fd:65:d7:2f:6f:9a:f9:83:bf:d2:0e:3a:
ab:98:52:24:a8:cb:08:ab:dd:7d:b1:ee:c2:c6:dd:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F7:C2:B5:C1:D1:70:8B:E5:18:C7:D0:32:59:6F:BC:DB:1E:67:9B
X509v3 Authority Key Identifier:
keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/V_fCtcHRcIvlGMfQMllvvNseZ5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.189.0/24
Signature Algorithm: sha256WithRSAEncryption
25:03:6c:e6:6c:ee:61:43:7c:43:3d:89:56:cd:1e:77:d9:06:
bd:e6:6b:ef:1c:a1:f5:71:a2:31:f0:56:c1:72:41:21:e7:1f:
e9:2c:91:4b:79:86:ca:61:6a:ea:cd:87:67:13:8a:6e:39:b8:
49:f6:3f:cb:27:d7:f2:f5:ad:3d:73:6c:2b:5d:3a:3d:ac:24:
30:09:65:ff:20:3d:93:38:fa:dc:4e:48:cc:cf:02:41:e9:48:
31:d3:06:21:5d:d2:d4:0d:fd:8f:8c:a9:92:4b:f7:e4:15:b4:
20:d8:2e:98:e7:73:7e:a8:0f:02:1a:8d:1c:e4:12:cc:45:50:
06:4a:1b:22:01:88:1a:12:48:27:91:04:de:23:8c:5d:10:25:
5c:f3:23:e6:99:33:23:6d:55:28:bb:94:8c:bd:44:f9:15:27:
d8:d3:ee:3a:43:48:d2:3e:7e:8f:d7:89:85:bc:9a:5d:77:22:
03:f1:6b:91:e7:30:8b:72:46:4d:71:2c:66:3a:66:f1:0b:df:
9a:f9:f2:e1:41:a7:1e:26:8d:fe:b7:75:bf:4d:78:49:42:e0:
80:ae:8b:6e:64:b6:ac:df:fb:4e:73:c7:4f:6a:71:21:ad:bd:
f0:ba:a3:7f:fe:15:e0:83:3d:ab:b0:e1:55:68:3f:a0:53:e3:
02:6d:5e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:52 2025 by rpki-client