Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KsYpdxnPHFkWaRlO_sJqr_gcews.roa
File: KsYpdxnPHFkWaRlO_sJqr_gcews.roa (raw, json)
Hash identifier: 2YwMvZNsa1WyFTg69SdjSGD+xKc9HPEGausUwLuiL7s=
Subject key identifier: 2A:C6:29:77:19:CF:1C:59:16:69:19:4E:FE:C2:6A:AF:F8:1C:7B:0B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D85D2896D8EE902002404EE340E4E4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KsYpdxnPHFkWaRlO_sJqr_gcews.roa
Signing time: Thu 02 Jan 2025 11:48:21 +0000
ROA not before: Thu 02 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 185.92.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:5d:28:96:d8:ee:90:20:02:40:4e:e3:40:e4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ac6297719cf1c591669194efec26aaff81c7b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:e7:15:23:ba:06:c6:e2:e1:20:f1:b1:e8:
24:3d:e0:51:03:4c:fb:02:85:75:78:35:d8:4d:e2:
93:e6:be:be:9b:46:e4:ad:c1:47:fe:03:cb:9b:c1:
c3:dc:3a:70:1a:0f:92:5c:79:75:f0:07:89:ad:f7:
2c:04:a0:24:3f:fc:12:b4:4f:1e:05:0f:e9:ce:11:
41:f9:c6:87:dc:79:a0:3d:6b:eb:eb:21:b4:d9:24:
d3:cb:b0:47:86:88:b1:f7:89:99:94:75:30:be:fc:
9e:9d:ab:d7:33:95:92:c6:d6:86:30:32:d0:56:0e:
1c:3a:6d:76:45:39:e4:c7:72:01:4b:41:96:17:f0:
06:9c:a6:a8:4a:26:89:dd:12:f5:4b:00:88:45:c2:
4e:16:31:d0:a6:e5:d8:70:24:7b:36:21:b4:ed:ff:
30:44:e0:64:1c:8d:a5:85:23:62:3b:fb:91:1e:1a:
c5:25:07:8e:55:8f:fd:91:92:80:2c:76:e3:80:c3:
f0:0f:ad:c1:3e:f7:df:4c:08:63:c9:70:63:8e:ed:
58:5f:4e:70:1d:8e:06:1b:72:c4:56:a1:e2:61:51:
28:25:91:b3:d0:16:d4:c9:4a:c4:70:b4:68:7d:05:
07:6a:f3:72:48:b5:0f:aa:9d:be:55:de:ef:8c:f9:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C6:29:77:19:CF:1C:59:16:69:19:4E:FE:C2:6A:AF:F8:1C:7B:0B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KsYpdxnPHFkWaRlO_sJqr_gcews.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6e:eb:44:03:7e:bd:c7:68:ae:22:57:df:d3:f1:aa:12:e2:
13:61:71:80:d1:88:02:7b:a4:f6:5a:0b:d0:95:1f:03:2e:10:
26:7e:00:c8:7c:e7:09:08:d4:aa:65:f5:72:61:85:b0:7e:a0:
53:6f:a2:89:ed:aa:31:31:c5:7b:6b:e4:42:3e:35:26:60:47:
bc:0e:9f:d8:0b:37:4b:43:c3:96:2e:1b:c5:f2:aa:85:7e:7b:
ac:87:04:f0:b0:60:44:3c:a0:90:42:d8:73:bb:6a:02:a9:45:
ab:13:d6:43:f1:d5:68:3c:97:b7:1b:8c:c6:4f:e9:82:c6:af:
6f:93:e9:b9:09:ee:23:30:8b:2f:70:93:be:95:50:96:d3:c5:
d8:b6:b3:98:b5:25:29:87:45:b2:02:ad:5f:39:70:91:0b:9b:
c1:69:b8:21:da:bf:25:18:8b:ce:5a:a2:db:84:78:02:93:15:
5b:29:3a:1a:69:65:b3:0f:b6:b4:52:27:77:b8:8e:e3:af:ef:
89:01:c4:d3:e4:9f:b9:3f:15:e7:37:ae:ad:29:87:ab:df:94:
64:2c:f4:7b:d2:e0:98:ec:46:56:2e:4a:77:7c:45:ea:26:eb:
79:b7:2a:0d:ad:58:7c:80:15:1c:ac:ab:f7:59:52:6e:55:83:
40:15:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:24 2025 by rpki-client