Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa
File: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (raw, json)
Hash identifier: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=
Subject key identifier: 2E:B7:AF:B2:9C:7C:A4:AF:22:01:03:E6:37:F5:B3:56:6E:D4:CF:C8
Certificate issuer: /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Certificate serial: 01942067F792B3D1BE19AC861C5971E7B511
Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 185.204.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f7:92:b3:d1:be:19:ac:86:1c:59:71:e7:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eb7afb29c7ca4af220103e637f5b3566ed4cfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:c5:1a:59:79:79:4e:b3:d6:66:ac:bb:22:
b9:40:23:db:b4:da:05:74:03:4e:53:c0:56:75:24:
d1:3a:29:3f:48:0a:10:75:0a:2f:8f:90:ff:d7:88:
c5:2e:70:59:50:55:29:90:3e:49:06:e9:02:58:06:
9f:e8:73:58:41:33:49:75:ec:7e:cf:0e:27:17:d3:
63:99:81:43:34:00:46:a8:34:cb:d7:d9:ea:44:1c:
2c:72:16:22:8d:cc:2e:58:ee:9a:ac:3b:94:3f:e5:
1b:0b:75:51:d4:b9:92:a1:74:6c:a3:68:ab:ff:ce:
db:19:2d:5a:a2:8c:8b:df:02:50:91:50:68:76:73:
02:49:e5:c5:b7:ac:b3:8a:85:a0:6d:e7:9a:48:6d:
e3:6c:5c:77:3e:13:0d:27:d0:dd:d8:7c:ba:8b:3c:
23:37:2f:2f:de:68:fe:d9:49:86:e0:f2:fe:a4:69:
67:fe:c5:3a:d4:1e:a0:fc:5d:0d:3e:ed:2a:94:da:
54:89:bb:4c:77:fd:04:fd:2a:24:6e:f8:ba:90:d5:
72:8d:bc:f0:2a:ad:2c:01:05:56:b2:85:a6:a3:d3:
54:4d:bf:26:da:1b:ea:35:b5:71:3b:c6:36:e1:a5:
58:5c:dc:9a:29:6f:b1:9d:7b:7b:78:c5:9c:3c:b2:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B7:AF:B2:9C:7C:A4:AF:22:01:03:E6:37:F5:B3:56:6E:D4:CF:C8
X509v3 Authority Key Identifier:
keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.197.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ac:e5:d8:0f:30:4c:cc:c7:0c:4a:3a:f6:41:63:2f:86:f3:
2d:c0:66:63:84:f0:37:b0:d7:79:14:c3:07:3d:07:1f:01:81:
c5:70:8b:46:9b:3b:81:ee:87:f9:fd:80:4d:d4:20:3f:a1:bc:
08:4e:2f:2f:30:dc:d2:43:63:38:d4:e0:fc:27:5d:31:12:12:
fc:ca:5e:58:af:40:51:f7:9e:2c:0b:83:03:50:a6:2c:48:2f:
57:1d:37:20:17:6a:30:bb:ee:85:dd:01:e3:96:71:0a:1e:9b:
ef:ff:84:5c:18:bc:fa:2c:33:ae:d4:c7:e0:1c:22:e7:52:2b:
3c:40:b0:e3:3d:15:bd:58:9b:ef:78:db:23:73:07:0b:e5:84:
94:a1:34:ce:f8:f3:bc:56:1b:b0:a6:cb:f4:64:2c:db:3f:c0:
f3:56:e5:03:b3:9a:1f:b2:19:d8:39:0f:06:1a:42:a4:37:55:
4f:60:6b:ed:29:99:e6:f5:12:7e:0a:52:81:4b:78:b1:03:d7:
5b:16:a9:03:69:e5:7a:f9:03:97:62:70:30:c9:54:aa:90:a3:
8d:c0:91:0c:b0:25:bb:15:89:c3:e1:d3:cd:7b:6b:e8:78:bf:
7e:81:87:20:96:69:b0:3e:ed:d7:67:e4:b6:67:20:8b:aa:2e:
43:49:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:35 2025 by rpki-client