Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/rd6hfh2x52BDGiRJllR6149itW8.roa
File: rd6hfh2x52BDGiRJllR6149itW8.roa (raw, json)
Hash identifier: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=
Subject key identifier: AD:DE:A1:7E:1D:B1:E7:60:43:1A:24:49:96:54:7A:D7:8F:62:B5:6F
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 01941FFA40751905F66AB3A1E280B30E7878
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/rd6hfh2x52BDGiRJllR6149itW8.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212911
IP address blocks: 185.220.119.0/24 maxlen: 24
2a0b:f6c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:40:75:19:05:f6:6a:b3:a1:e2:80:b3:0e:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=addea17e1db1e760431a244996547ad78f62b56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1f:ab:2d:3f:f8:c8:77:e0:78:fe:e4:18:4f:
0e:93:0d:ce:d9:ca:45:ec:ea:91:bc:16:8c:41:cc:
ea:f0:1c:bd:01:2f:09:26:0e:5b:0c:a5:55:ac:76:
69:78:12:4b:fc:1e:a1:ed:a4:18:bb:07:9f:8e:ae:
3c:fe:b2:f5:9c:3f:0c:81:70:9e:93:dc:9f:e8:45:
c1:fd:1d:4f:23:c7:b0:c8:75:e3:45:a0:90:29:29:
c3:35:6a:87:00:f6:56:04:88:f3:95:eb:ff:cc:02:
95:20:01:08:6c:f8:b5:81:0a:54:e4:7d:27:d7:a0:
cc:10:dc:08:af:79:54:1a:c4:ba:36:50:70:b2:7d:
9c:1a:46:b1:1f:f7:eb:7a:19:7c:be:da:81:fc:c5:
72:ac:b3:54:bc:10:c2:a7:19:85:44:17:34:62:ca:
ad:f7:5a:12:e2:d5:ad:c0:50:53:b9:84:be:98:0d:
80:50:c7:6d:0b:e3:4b:42:c1:fa:27:1e:a9:19:03:
5a:c8:24:8e:bf:17:66:14:fd:d9:9c:96:54:41:be:
c7:b0:0f:de:4c:4f:e0:4b:e4:05:48:67:f6:d6:d2:
ef:35:bb:4b:3e:ab:7f:72:14:54:62:90:a8:00:87:
5c:15:00:81:30:a5:d9:33:8f:62:f1:90:4f:ce:de:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DE:A1:7E:1D:B1:E7:60:43:1A:24:49:96:54:7A:D7:8F:62:B5:6F
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/rd6hfh2x52BDGiRJllR6149itW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.119.0/24
IPv6:
2a0b:f6c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
4b:aa:76:d2:09:cb:ca:90:61:82:04:3e:1e:9c:fa:2c:02:45:
c3:77:e3:29:93:e8:1d:27:d5:c9:6a:e6:da:6b:2e:c0:34:a0:
a7:49:58:a4:c0:4d:3e:5c:79:65:75:08:8a:06:11:79:94:bd:
ee:52:79:1d:5b:41:d9:db:f2:3b:5b:40:b5:d0:81:a5:76:ab:
29:b3:45:12:3f:7f:2d:84:e8:3f:56:9d:83:0f:98:dc:09:b5:
91:a6:e2:19:45:aa:a6:34:c7:5d:48:58:50:9b:00:18:13:63:
5e:f2:77:0d:86:76:25:a1:51:b6:c6:41:c4:a8:ae:92:1b:66:
f6:de:91:94:f4:6b:92:85:2a:13:6b:d4:98:7f:cf:d0:2c:0c:
d2:a5:b4:95:01:67:5e:6b:09:bb:58:76:e8:e3:b0:c4:24:c0:
45:a1:32:a6:95:4f:3d:0c:ba:61:7e:d7:87:b8:b2:4b:b1:03:
8a:e5:95:69:4e:13:78:44:9f:74:d7:ae:57:66:21:41:ea:ec:
43:2b:90:61:55:94:b9:79:fa:14:65:f2:a9:b2:35:7d:41:3c:
35:08:fc:58:bd:e0:b5:7f:4e:e4:8a:c5:8b:09:96:2c:d1:e9:
c5:79:3e:ee:7e:9c:26:30:16:6d:83:94:ef:d7:61:fd:df:21:
e6:00:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:12 2025 by rpki-client