Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Bys4X9KeANbBv9yLlBau9hp7W5U.roa
File: Bys4X9KeANbBv9yLlBau9hp7W5U.roa (raw, json)
Hash identifier: BLC0OgEnSiTWmyn+fTH248iFa+LKZkbjMgGOvGd3rB4=
Subject key identifier: 07:2B:38:5F:D2:9E:00:D6:C1:BF:DC:8B:94:16:AE:F6:1A:7B:5B:95
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9BBEBA0807CBC9509E535E63B158
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Bys4X9KeANbBv9yLlBau9hp7W5U.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59425
IP address blocks: 185.42.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:be:ba:08:07:cb:c9:50:9e:53:5e:63:b1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=072b385fd29e00d6c1bfdc8b9416aef61a7b5b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:12:c2:f2:d7:bb:79:99:87:67:7e:5d:bd:
0e:76:27:98:a8:32:7d:be:f2:0b:8f:13:43:67:c2:
3b:78:10:4a:db:38:e2:31:36:70:f3:f3:25:b6:56:
67:c6:a1:0f:1b:a0:c7:20:c0:26:7b:01:6a:35:1f:
e0:f7:af:56:3a:b9:ac:fd:96:af:24:7f:26:8a:18:
c7:8b:db:81:ab:30:56:bc:d5:93:d3:e2:de:80:80:
61:6e:86:5c:9b:09:0f:aa:14:b8:fa:91:3e:ef:5a:
e5:7f:76:d7:c5:b4:b3:ef:70:ff:6c:be:04:32:03:
9a:e4:c2:69:dd:0c:86:2d:c4:58:30:ec:c3:25:d8:
04:28:80:1d:66:35:10:a5:36:9c:5c:0d:46:d6:0d:
bc:8b:22:10:cb:35:7c:9b:12:7c:f4:e5:ff:76:8e:
95:79:8b:2b:c0:60:10:0f:72:ba:b3:65:c6:19:97:
d1:47:05:44:0a:66:21:94:5b:32:6e:86:eb:5e:02:
d7:1c:46:17:18:8b:37:12:78:a6:4b:10:61:2d:4c:
a7:70:33:f0:22:29:0e:94:df:80:7d:1c:fd:39:ab:
fd:3f:b9:87:0f:d5:6f:81:f8:16:5e:01:24:57:e7:
77:71:6e:25:10:da:31:0e:c0:3a:36:f6:f4:13:2d:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2B:38:5F:D2:9E:00:D6:C1:BF:DC:8B:94:16:AE:F6:1A:7B:5B:95
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Bys4X9KeANbBv9yLlBau9hp7W5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.12.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e7:0b:95:a4:6c:bf:dc:cb:86:8c:07:bd:8d:06:09:3b:d8:
8d:0e:12:92:3a:78:83:84:df:ea:56:a4:db:18:15:6a:91:a5:
39:6e:a1:83:6b:4e:30:0b:4e:41:09:15:ab:74:6a:9b:f8:43:
6a:ac:f5:f0:6b:79:fa:65:34:1b:74:4e:35:2c:37:f3:42:08:
41:16:a5:78:c1:50:3c:53:1e:b8:a9:2c:fe:ee:2a:0f:0e:49:
ee:c6:e9:df:c5:4e:70:11:84:4e:70:3c:70:b8:30:98:41:f2:
6b:ef:b2:0d:d2:db:ed:26:10:64:10:d3:aa:f6:7c:57:51:a2:
66:df:8b:51:3b:a2:dd:af:fe:1d:ab:6b:6d:f7:b6:70:62:6c:
60:45:89:6c:2b:6c:19:42:30:c1:47:79:3f:dd:f3:ad:90:9a:
13:60:9a:2e:dc:43:72:b6:14:3b:82:90:21:40:49:f5:db:d6:
d2:5b:1a:85:81:24:8b:4a:91:d6:45:d3:6d:5d:1f:15:9a:53:
5e:12:1a:24:81:9c:b9:9e:b2:09:45:ec:a2:e8:bd:ac:de:c9:
e1:7e:ef:a9:f5:e7:81:51:de:c5:29:8d:6e:4f:d6:d0:0e:35:
fa:be:93:ba:0f:a4:29:d4:9a:45:31:28:82:fa:3a:e9:df:0f:
a7:24:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:20 2025 by rpki-client