Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/AlHpyxCGMtfizbttFRiRDBrpWE8.roa
File: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (raw, json)
Hash identifier: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=
Subject key identifier: 02:51:E9:CB:10:86:32:D7:E2:CD:BB:6D:15:18:91:0C:1A:E9:58:4F
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 01942823C4D6E0CCFADF3BFD7EEF08421169
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/AlHpyxCGMtfizbttFRiRDBrpWE8.roa
Signing time: Thu 02 Jan 2025 17:50:20 +0000
ROA not before: Thu 02 Jan 2025 17:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.200.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:c4:d6:e0:cc:fa:df:3b:fd:7e:ef:08:42:11:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jan 2 17:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0251e9cb108632d7e2cdbb6d1518910c1ae9584f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:23:c3:73:70:53:c3:46:3c:e7:f6:e5:f7:
6d:96:c1:f3:bb:4d:5a:7f:aa:29:c1:d0:71:a9:0a:
9a:62:4a:9a:96:94:12:60:b2:2a:5d:63:a3:d7:43:
4b:4a:5d:2c:b3:03:e7:10:9b:f8:1d:ee:79:aa:55:
36:3e:a0:9b:a4:05:f4:0b:b4:96:bc:85:69:5d:cb:
b3:a2:ed:91:3f:12:1a:49:7b:b4:17:fd:80:b4:d3:
74:ae:b8:2f:6f:b1:9d:96:ec:85:20:e8:a1:e7:d7:
eb:99:19:68:2c:f6:87:be:b3:19:32:11:f1:2d:bb:
86:ad:60:9a:9a:2a:89:91:09:a9:56:58:b6:e8:90:
37:51:33:fd:c6:fb:40:05:f1:a9:4b:f7:6f:0d:38:
3d:16:8d:05:78:bd:1d:c8:7a:de:66:95:56:93:9c:
62:67:07:84:99:3d:da:15:1a:76:fc:93:db:12:1f:
67:5e:49:30:3c:47:d4:c0:15:fa:90:9a:29:e1:fd:
4a:2c:09:2d:12:be:cf:f0:ee:b4:f9:df:ae:88:4a:
54:c8:6a:4c:32:6a:2f:32:97:8e:d5:38:12:e7:a9:
0d:79:29:43:ac:0c:ca:14:33:c7:8e:d6:23:ae:63:
64:66:0f:09:1e:e6:ca:70:e2:53:cb:54:01:e5:a3:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:E9:CB:10:86:32:D7:E2:CD:BB:6D:15:18:91:0C:1A:E9:58:4F
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/AlHpyxCGMtfizbttFRiRDBrpWE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.13.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e6:05:fb:8e:d9:a1:f8:59:00:d3:45:3f:bc:ba:85:d0:14:
09:60:f4:77:34:c4:30:4c:b0:e9:d8:8b:16:94:c5:5a:7c:75:
5c:a8:50:ab:34:e5:41:3b:30:4f:0f:78:f9:79:f3:a2:c2:d6:
61:62:63:94:b6:0c:ea:76:b8:58:85:85:01:b4:9f:e7:67:87:
a2:77:4a:16:b9:cd:75:02:d1:ef:4d:3a:6a:e4:3a:86:f8:91:
22:86:23:6d:dd:5e:b1:b1:d7:71:80:5c:60:6d:f7:dd:a3:b4:
3f:09:c8:4e:09:7a:d3:a5:2e:c4:86:b4:7c:82:29:4c:2c:66:
f8:06:bc:a8:36:f7:16:90:af:d2:90:05:6c:c5:c0:68:cc:67:
7a:61:57:ea:e5:48:f3:eb:86:8c:f0:58:a3:be:84:c8:88:d9:
87:32:ed:72:df:25:a4:2e:3c:3e:fd:fc:5e:10:2d:e0:e8:d7:
32:35:43:18:29:4d:f4:6a:69:2d:50:f3:6a:68:35:3e:4b:c9:
ff:b0:4a:c4:72:5d:4e:8e:f5:fd:11:a1:84:db:dc:1e:f8:70:
56:66:fe:dc:f4:13:be:83:ff:72:31:d4:1e:79:8c:9a:ec:1d:
a7:db:21:2a:8b:fe:c8:62:f3:03:6a:12:40:6a:c9:21:9b:52:
b8:37:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:05 2025 by rpki-client