Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/G_uyP800qF9xq38CufvzcASfUJk.roa
File: G_uyP800qF9xq38CufvzcASfUJk.roa (raw, json)
Hash identifier: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=
Subject key identifier: 1B:FB:B2:3F:CD:34:A8:5F:71:AB:7F:02:B9:FB:F3:70:04:9F:50:99
Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial: 0194274892DABD3066372C4A8723DF8DC018
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/G_uyP800qF9xq38CufvzcASfUJk.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204787
IP address blocks: 185.240.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:92:da:bd:30:66:37:2c:4a:87:23:df:8d:c0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bfbb23fcd34a85f71ab7f02b9fbf370049f5099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:ae:8b:fb:a6:7d:15:c5:f7:eb:55:bc:55:
7c:51:87:c6:13:cc:81:26:b8:6f:24:c9:5b:06:3c:
ca:da:ff:6e:0a:6d:69:2a:8d:27:fa:2e:81:b6:86:
9f:db:58:49:6d:c2:e7:a8:2d:d6:52:00:26:36:78:
06:22:ac:30:93:84:5f:8c:09:55:4b:00:e0:f1:27:
1a:87:ae:98:f7:b4:28:4b:b4:f7:c1:27:93:a1:6e:
57:00:70:20:c4:31:82:9f:34:05:4f:ad:0d:ff:fb:
52:31:33:8e:59:2d:f9:35:e2:bf:12:be:0f:26:7e:
7f:b7:03:21:78:9e:6c:78:09:95:aa:67:de:11:6e:
da:fe:57:c0:a8:35:e2:2c:49:c6:53:02:38:3a:5c:
49:b2:66:7d:2b:fd:1e:77:42:24:1d:98:28:0b:7e:
b0:68:6c:88:90:0d:4e:bf:25:b4:cc:04:94:6d:de:
c3:6f:52:b2:b5:dc:97:27:c4:59:3d:cb:33:69:92:
72:b0:ab:34:70:18:a7:03:f0:df:86:08:cf:cf:af:
b0:9a:ef:e9:01:e3:f1:5d:83:72:56:e7:ca:5a:c2:
7d:80:13:6e:69:de:39:ba:d4:ec:c2:4e:56:46:30:
c3:9a:9b:c0:ae:ae:fe:13:67:24:ba:4f:17:12:cc:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FB:B2:3F:CD:34:A8:5F:71:AB:7F:02:B9:FB:F3:70:04:9F:50:99
X509v3 Authority Key Identifier:
keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/G_uyP800qF9xq38CufvzcASfUJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.56.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:ed:a7:03:7b:20:d6:e6:4b:58:70:2a:aa:d8:71:e4:d0:bd:
75:37:34:0e:35:82:f4:b5:88:7c:89:95:35:e5:31:a2:0e:bb:
d8:d2:34:57:58:c0:f0:43:69:74:28:6b:12:cd:d8:44:0c:5e:
97:ce:0b:1e:32:e8:fd:26:c1:31:e5:50:ca:59:45:6a:2f:8d:
69:62:f0:4b:47:a7:6a:71:14:58:88:2a:99:a2:09:23:50:7a:
c9:af:7f:73:e3:58:de:3a:93:5d:41:d1:6a:55:9a:af:61:c9:
65:ae:3a:91:e6:bd:5e:0b:3d:b6:28:94:6f:be:d9:81:77:29:
b2:01:4a:d6:93:bd:75:cc:51:cf:06:37:d5:5a:41:35:f7:a4:
d2:24:84:13:a5:91:d7:08:5d:09:33:4f:6d:ec:26:91:d9:92:
36:50:06:89:6d:0f:da:4f:0c:db:35:a2:80:09:bc:99:72:8e:
71:87:98:e6:8a:13:08:37:80:49:01:c9:c7:f5:aa:eb:5b:49:
c6:98:eb:b7:7f:8d:fc:8d:8c:33:e0:85:e5:4f:2a:da:a5:9e:
ca:66:1b:2d:e7:da:40:df:6e:d7:ba:6b:71:5a:e6:6c:81:1d:
e0:57:4e:8f:f2:16:17:77:4c:c8:9f:68:39:e9:4b:a6:7e:f8:
af:ca:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:08 2025 by rpki-client