Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/D477qKV-aPF2n8oBjSmgcuod2kE.roa
File: D477qKV-aPF2n8oBjSmgcuod2kE.roa (raw, json)
Hash identifier: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=
Subject key identifier: 0F:8E:FB:A8:A5:7E:68:F1:76:9F:CA:01:8D:29:A0:72:EA:1D:DA:41
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 019426D90EDB09100FEB84EFF1ED0A8E3ECF
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/D477qKV-aPF2n8oBjSmgcuod2kE.roa
Signing time: Thu 02 Jan 2025 11:49:06 +0000
ROA not before: Thu 02 Jan 2025 11:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 185.42.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:0e:db:09:10:0f:eb:84:ef:f1:ed:0a:8e:3e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Jan 2 11:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f8efba8a57e68f1769fca018d29a072ea1dda41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:6f:3f:9b:3c:99:95:4b:85:a9:04:0f:b2:
f8:fb:d3:99:20:dc:69:5f:20:71:61:f1:76:a0:20:
29:3d:3c:6e:e6:50:12:31:af:b8:e0:be:11:8a:ee:
28:85:0e:04:09:10:a5:1a:d5:01:24:07:95:c1:36:
6b:39:62:1f:2d:e6:5b:37:2b:cc:17:d5:f5:24:c2:
7e:9c:ce:6f:9c:55:eb:09:19:4e:c7:30:42:f3:99:
02:98:63:cd:d3:11:96:92:ba:7f:b9:1c:41:88:fc:
38:95:8f:bb:32:af:e5:83:e5:8b:6d:d8:40:70:5d:
04:3f:81:90:c9:4f:0d:14:cd:b9:ae:20:20:61:7e:
4f:27:87:1d:98:34:ba:ef:70:ba:55:fc:ff:5f:7d:
88:ea:47:07:a1:bc:32:b8:1c:c3:d3:c6:3e:0a:72:
92:d2:9c:2c:2c:4d:fe:4a:de:d1:e0:93:a6:d2:3d:
6c:0a:86:1a:10:d9:58:49:2e:d3:4b:26:73:a1:fd:
0f:86:b2:66:9d:4c:4c:6e:1f:5d:99:d1:e5:3e:53:
00:00:51:56:9a:54:22:d1:29:6f:1c:f8:82:69:c7:
6c:99:d8:d7:40:85:c7:e8:06:a8:e8:29:2b:f0:b9:
55:51:43:fe:65:3b:92:ea:07:c7:92:94:3d:cb:e4:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:FB:A8:A5:7E:68:F1:76:9F:CA:01:8D:29:A0:72:EA:1D:DA:41
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/D477qKV-aPF2n8oBjSmgcuod2kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.59.0/24
Signature Algorithm: sha256WithRSAEncryption
03:86:56:27:ef:b6:d2:f9:ee:73:7e:50:dc:03:fa:61:f7:13:
9f:0d:05:27:a4:0d:d0:30:f7:56:9d:26:e4:ca:30:98:c2:84:
26:3d:46:d4:5c:65:0d:07:be:06:11:57:fa:05:98:9b:26:6b:
bb:b9:9e:6d:ec:4e:2f:fa:93:c5:c0:2d:b1:4c:31:74:9a:70:
fa:d1:b0:49:61:b5:26:f1:c9:c8:e3:60:95:28:70:ed:2e:5f:
82:be:91:3c:a0:f4:6b:b8:59:db:b9:4d:58:ba:d5:c4:ca:65:
2b:2a:4e:a7:90:a8:68:73:a0:a0:d1:0e:a9:70:fd:b9:d4:b9:
ad:76:17:5e:4c:8e:0e:7a:2a:f5:cc:22:e4:c0:a8:53:fa:92:
07:7a:9d:82:47:0d:c2:6c:40:7b:fe:e0:b0:79:32:78:a7:e6:
3e:62:bf:5b:51:7f:0c:11:83:2d:5c:f1:d5:b1:61:05:59:36:
95:7d:e9:06:3f:00:e0:30:64:65:cd:fa:58:89:02:5a:be:46:
fa:86:36:62:79:cc:f3:15:fe:a3:a2:56:f7:bf:24:0c:b9:d0:
1d:d9:58:67:53:f2:7e:69:29:ea:1b:55:6a:5a:f3:1c:4d:c9:
7d:ba:d8:ed:76:f7:3f:9e:de:cb:d3:13:3a:e1:95:fd:cf:29:
44:25:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:01 2025 by rpki-client