Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/jS_G6el4wEcgi8my5R0XT21ut5Q.roa
File: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (raw, json)
Hash identifier: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=
Subject key identifier: 8D:2F:C6:E9:E9:78:C0:47:20:8B:C9:B2:E5:1D:17:4F:6D:6E:B7:94
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 0194221F595BCD660D0587DE8E7ED3243D63
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/jS_G6el4wEcgi8my5R0XT21ut5Q.roa
Signing time: Wed 01 Jan 2025 13:47:47 +0000
ROA not before: Wed 01 Jan 2025 13:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.145.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:59:5b:cd:66:0d:05:87:de:8e:7e:d3:24:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Jan 1 13:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d2fc6e9e978c047208bc9b2e51d174f6d6eb794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:64:69:13:64:c2:25:52:9f:cc:4d:76:c6:
f1:88:70:d3:50:d8:17:70:b1:ba:7a:de:d1:16:62:
29:85:44:57:a1:8f:5e:26:af:64:d4:3a:25:81:1b:
11:c0:e2:bf:25:d8:c6:68:54:e8:68:fb:d2:eb:a0:
6b:0d:ea:96:f0:3c:62:48:72:69:b9:59:32:fe:d8:
c0:a6:59:6c:23:6a:58:76:a0:ad:d3:82:8d:9a:14:
42:b2:00:2c:44:ba:ac:05:b7:a0:5c:ef:ba:0f:12:
5a:aa:4d:4a:e3:15:5e:38:7a:3f:a0:29:f0:03:ec:
5c:16:ff:a3:0e:00:bc:98:96:38:b3:43:1b:29:1d:
67:55:57:0d:7d:f7:aa:5d:f6:50:dd:31:70:2a:ab:
b8:c3:14:3e:63:24:4a:2a:66:87:44:32:83:d3:f4:
38:f2:48:57:df:48:85:a7:f0:bb:f8:ae:a9:0d:66:
72:a5:43:d1:71:c4:bb:6c:b2:93:86:8f:55:77:f7:
13:04:aa:de:1a:7c:74:1a:35:74:82:6a:84:a0:0a:
31:71:b5:fc:e3:59:05:c6:f2:00:3d:8c:57:ee:e1:
d9:32:60:b9:04:12:bb:b1:3f:5c:ca:e8:5c:c8:21:
18:21:41:03:62:cb:d4:8f:eb:bb:67:c6:9a:c8:3b:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2F:C6:E9:E9:78:C0:47:20:8B:C9:B2:E5:1D:17:4F:6D:6E:B7:94
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/jS_G6el4wEcgi8my5R0XT21ut5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:1e:9b:c4:8f:7d:17:67:0a:0e:b5:de:a4:12:1b:b1:20:d9:
03:3a:ab:57:de:d8:93:db:b9:91:57:9f:90:07:a5:06:17:5f:
e2:ae:de:f0:06:f2:8b:d2:db:42:f5:bd:ef:df:b8:da:48:1f:
7a:87:8d:62:53:35:ae:9d:f7:01:13:3e:4f:01:be:19:8b:07:
a4:86:b9:bc:d5:00:68:78:50:9d:03:e9:c2:2d:4f:fe:99:9f:
7d:54:50:a4:81:b0:03:6c:81:0d:14:d1:e7:27:0f:80:92:a5:
0c:ad:dc:e8:72:85:64:7c:98:60:f7:bf:73:0d:7e:ad:1a:90:
88:6d:f7:89:91:2f:1d:dd:60:2c:6e:0b:a9:fa:85:c2:2a:40:
dd:f2:15:0c:ec:51:71:54:4a:ea:78:5e:96:45:70:6c:ec:d9:
7f:a7:c7:bc:cd:2e:a2:6b:0a:4e:35:27:e1:d7:38:03:4d:44:
e1:6c:e0:8d:52:d1:0e:ce:ca:7d:94:80:0d:56:c7:ef:74:48:
92:e7:a6:b6:1e:a5:d5:b7:f3:b3:0e:74:0e:ee:e6:44:f7:68:
a5:98:f6:f9:ab:15:12:a7:65:ec:4f:8b:20:28:f1:24:23:af:
34:66:ee:67:89:c6:10:13:49:52:86:a2:1d:41:a8:3d:51:b2:
04:40:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:24 2025 by rpki-client