Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/kY9y-o-R4Dn47d9ZgH3Bm8d1foQ.roa
File: kY9y-o-R4Dn47d9ZgH3Bm8d1foQ.roa (raw, json)
Hash identifier: 7ot+WfwdG3Ty3JJ9KrxGigBy6nd4HGkQKHYV1Bs5VSc=
Subject key identifier: 91:8F:72:FA:8F:91:E0:39:F8:ED:DF:59:80:7D:C1:9B:C7:75:7E:84
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 0194228E35697968556D934FBB9E2A7EBF73
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/kY9y-o-R4Dn47d9ZgH3Bm8d1foQ.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39122
IP address blocks: 185.24.232.0/24 maxlen: 24
2a04:2e02::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:35:69:79:68:55:6d:93:4f:bb:9e:2a:7e:bf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=918f72fa8f91e039f8eddf59807dc19bc7757e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:df:24:d3:70:2f:c2:30:28:58:a0:2f:20:
e7:4d:da:d7:37:3a:03:8d:4a:eb:80:91:3d:bf:f0:
5a:8e:34:00:2f:9c:dd:28:dd:2a:96:c7:c0:33:6e:
fb:d6:a7:32:e1:cc:d7:f7:1c:38:ab:77:fd:96:16:
10:46:71:67:a6:00:ac:ba:3c:01:b5:f0:9c:9a:3c:
13:fc:75:80:92:b9:9a:3f:d7:70:4c:4d:ae:c0:9d:
14:3a:16:05:3a:7f:f6:ca:6a:b5:84:e4:22:ba:02:
21:ee:d3:d2:3a:76:1b:db:e9:a9:43:84:88:19:ea:
53:e7:a0:a0:b4:99:5c:a5:53:ca:a4:0d:4d:38:c9:
68:f9:32:61:6f:14:0b:a4:9c:0a:ef:6e:28:8d:36:
12:e0:82:e0:4e:f9:34:7b:80:db:b2:e9:8d:d8:9f:
9a:8b:24:78:c2:f7:04:83:5f:1d:f1:59:23:ae:2d:
ca:74:41:d4:d9:a6:e3:97:b3:fa:5c:f2:f0:6a:34:
c1:2d:a4:08:d1:0f:bb:df:b4:45:54:5e:17:f3:35:
f7:13:c0:0e:89:62:ea:b6:cd:75:35:d5:f2:10:be:
7e:47:10:c4:0b:11:cb:b1:4c:5c:db:89:71:78:4a:
b7:3e:da:ba:b8:35:35:95:0d:a2:06:33:f4:a4:0c:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:72:FA:8F:91:E0:39:F8:ED:DF:59:80:7D:C1:9B:C7:75:7E:84
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/kY9y-o-R4Dn47d9ZgH3Bm8d1foQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.232.0/24
IPv6:
2a04:2e02::/32
Signature Algorithm: sha256WithRSAEncryption
79:d3:5e:87:2f:08:09:b6:ca:b6:aa:34:0c:e2:12:d4:e7:ed:
04:81:43:71:bc:b2:b6:a1:75:03:1f:cf:94:20:f3:fa:a8:7a:
37:c2:3e:81:f3:91:e6:ee:5f:73:74:e1:64:9a:19:2a:24:cd:
12:92:65:2a:9a:83:1c:08:e0:f6:fc:87:f8:f4:21:cb:9d:ad:
2a:6a:5f:2a:fe:4d:fe:82:ad:c1:81:6c:75:85:f4:73:7e:6a:
2d:83:16:c3:b3:df:8d:db:ed:62:19:df:ff:19:d4:98:cc:58:
10:30:4a:b2:3c:6f:c3:fd:c2:2e:37:8a:28:ab:31:e4:b9:94:
ce:32:ae:57:7a:ae:de:68:05:d5:0e:97:40:ef:89:18:a9:d5:
ab:86:35:b7:a7:8b:eb:92:ea:69:a9:19:ab:43:97:5f:d9:71:
87:69:19:40:35:53:9a:ef:ea:23:ff:59:77:08:7a:33:d0:16:
20:69:3e:ef:5b:66:a7:b3:44:35:11:63:03:8b:c9:a2:7c:6d:
3a:18:ef:11:8d:33:46:93:35:fc:aa:ee:8c:54:83:f4:a7:90:
67:01:68:41:56:40:4c:3a:6c:94:29:65:17:bc:c7:fa:84:37:
92:96:39:85:9d:56:c2:b8:22:c8:ac:4f:f4:4e:3b:25:17:b1:
6e:c0:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:56 2025 by rpki-client