Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa
File: RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa (raw, json)
Hash identifier: fyJVWs7abgQPirZqK6oCiRYQDMcFiF3X6qhzJ7XsPjw=
Subject key identifier: 47:16:C0:83:81:05:C7:1F:C5:2A:30:D2:B7:2F:3F:02:0E:41:D1:6A
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B04E1528A6BF33F0CE84F6B9727BE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa
Signing time: Thu 02 Jan 2025 09:48:55 +0000
ROA not before: Thu 02 Jan 2025 09:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23033
IP address blocks: 185.255.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:04:e1:52:8a:6b:f3:3f:0c:e8:4f:6b:97:27:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4716c0838105c71fc52a30d2b72f3f020e41d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:a9:22:0e:5d:7c:33:1c:d6:e3:49:de:dd:
fd:18:d4:36:c4:cd:5d:a1:89:37:e9:28:cb:ed:13:
4d:cf:ce:a0:f0:2a:bc:6c:33:48:36:1f:0d:74:e1:
f2:31:6e:8e:cf:55:bc:9a:d4:30:06:58:d0:67:d1:
73:81:a1:c5:f2:c4:37:52:21:51:5c:83:86:bd:d5:
b7:3c:94:57:ec:86:2e:2f:98:ef:29:e4:00:5f:4b:
c5:e5:17:0f:5d:9b:04:44:c1:f4:9f:63:93:d4:29:
a9:3a:ef:18:a0:d0:3a:6c:b9:4b:1b:f5:8d:51:e8:
6f:67:19:98:aa:e3:3b:7d:97:c3:a3:19:74:64:34:
ce:05:d6:8d:0e:45:35:f1:cc:f6:47:52:9d:e1:5a:
1a:38:64:5d:13:1f:83:1f:b4:4c:b2:08:1f:ca:0c:
d0:7c:69:bf:b6:05:c4:2e:c8:0e:b6:ff:e0:93:47:
d3:68:d2:1e:e6:42:d8:4c:39:31:c6:f9:5b:37:d3:
a3:e9:69:a0:68:4a:fd:cf:34:79:13:8a:7c:2f:ec:
b5:35:80:ca:48:1a:28:87:18:bf:be:ba:cb:b1:48:
ca:9f:66:36:30:7c:22:6b:8d:4d:e5:db:05:7b:6b:
2e:61:b2:33:7a:df:4b:49:87:da:a0:13:1d:d6:3a:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:C0:83:81:05:C7:1F:C5:2A:30:D2:B7:2F:3F:02:0E:41:D1:6A
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.115.0/24
Signature Algorithm: sha256WithRSAEncryption
60:61:5c:76:4c:47:38:3a:26:cd:7b:5c:62:a1:29:b5:42:6f:
a1:f6:c5:67:6b:05:16:8b:66:e6:c5:38:dc:bf:92:b2:81:9d:
fa:d7:ad:3e:76:5d:f8:5e:47:9d:8a:eb:d7:1a:27:bf:4e:b7:
a8:01:24:a4:06:eb:57:b3:ad:91:44:3f:39:f2:b9:42:81:8d:
8e:12:8c:d8:7a:60:5e:24:74:c5:8c:4f:6b:e8:ae:cc:c8:6e:
a8:15:4d:89:c4:c1:ce:8b:00:d6:45:59:bc:41:c2:d9:b7:7d:
6c:d3:60:16:85:97:a9:c1:f5:07:7d:6a:36:0a:b9:22:53:c9:
0e:7b:89:ce:28:b2:fa:28:f1:34:a4:9a:00:23:03:36:11:c2:
01:12:06:e7:48:7c:68:a3:99:00:57:26:d1:98:8c:29:82:8d:
71:82:44:11:bb:79:32:b6:a1:00:4a:18:12:a2:35:48:13:13:
12:dd:7c:89:7e:bb:14:19:75:e1:60:98:4d:0b:09:3e:df:dc:
e2:49:57:1f:13:48:f1:9d:db:81:47:46:8f:fd:b9:9b:43:0d:
74:3b:b0:d8:9b:98:d3:8b:c8:42:c4:19:d0:ae:01:eb:e6:2e:
07:ad:e4:88:cc:c4:fd:eb:d4:c0:e2:46:22:b5:bc:03:30:0b:
6d:ae:df:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:04 2025 by rpki-client