Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/knYcxIk4gBoyhnJA7zGhUiEOoU0.roa
File: knYcxIk4gBoyhnJA7zGhUiEOoU0.roa (raw, json)
Hash identifier: Pb2aA+Tft7i/Jp7vyucHlf/5bNws4Usmn/wz+ukU/co=
Subject key identifier: 92:76:1C:C4:89:38:80:1A:32:86:72:40:EF:31:A1:52:21:0E:A1:4D
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 0194252184B93F7949F380048129948EB456
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/knYcxIk4gBoyhnJA7zGhUiEOoU0.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207046
IP address blocks: 185.249.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:84:b9:3f:79:49:f3:80:04:81:29:94:8e:b4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92761cc48938801a32867240ef31a152210ea14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:1d:fa:34:cb:ca:fc:97:5f:ca:c6:cf:60:
01:ab:41:0c:14:8b:12:d3:32:8f:f3:af:f0:e1:ad:
54:43:0b:7d:96:04:88:d7:e8:ed:71:50:0a:2b:0e:
11:9a:22:c5:f2:39:9e:d3:4b:c8:d0:a7:57:83:3e:
05:af:2d:5d:25:b9:ac:22:92:ff:0c:3a:85:c6:e5:
3b:11:d7:e8:08:6e:43:d9:9a:d3:e3:66:33:40:ff:
11:df:72:72:e6:bb:9c:f4:5d:4d:5e:89:32:37:20:
62:90:2a:62:55:e2:95:7e:f9:0a:8d:45:a5:64:16:
fe:86:5d:c0:b8:58:1c:8d:1d:8a:0d:b7:a3:0e:f0:
e1:71:ef:56:da:7a:e9:13:65:f8:77:bc:31:73:e6:
da:d0:22:a0:f8:88:d9:cd:12:3e:ec:72:43:1b:b9:
63:64:6d:cd:db:eb:4d:5c:ee:72:9f:e3:35:22:27:
51:56:7d:2c:34:db:e9:86:13:d1:bb:1b:96:2b:2d:
ef:79:c9:30:32:16:0c:d7:39:83:71:7b:22:bd:57:
16:3f:a6:ea:15:eb:2e:94:b6:c6:b3:ac:91:06:05:
4a:b0:7e:a4:f2:35:46:b3:d5:8c:cc:ee:b1:92:f1:
c9:14:d2:c8:a3:3f:d9:99:a8:b4:67:7a:48:75:22:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:76:1C:C4:89:38:80:1A:32:86:72:40:EF:31:A1:52:21:0E:A1:4D
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/knYcxIk4gBoyhnJA7zGhUiEOoU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:26:9d:b3:1f:63:fd:50:2d:89:2c:f0:f7:7b:c4:af:8e:c1:
f0:41:17:ea:c8:ed:ae:15:48:79:1e:14:02:00:ed:c7:43:c1:
18:5e:7e:75:08:c8:cb:c0:be:52:d4:9e:3c:bc:86:a9:b1:a2:
c0:ae:a1:4f:ac:6c:0d:69:4c:3b:f3:89:62:17:13:d8:2e:da:
a5:ea:93:c5:8e:4e:f0:88:c4:1c:b6:0c:ed:43:64:73:18:46:
e7:61:8e:06:cd:dd:ee:1d:34:c3:b8:8e:6d:ff:56:51:37:34:
3a:c0:be:61:b7:76:4e:91:68:74:3e:52:55:82:36:8b:09:e3:
ba:0e:a9:5f:15:5f:a1:32:66:33:a2:06:11:f7:63:7f:81:51:
6a:6a:ef:e1:81:4b:c3:fc:c4:b3:69:df:2d:65:70:4d:34:e0:
c7:42:e7:df:29:03:79:23:66:09:e4:54:3b:98:4f:c4:37:46:
47:17:6c:37:bc:6b:00:ea:61:cd:a1:3d:e3:69:c9:b1:e7:8f:
2e:a7:25:de:33:37:1a:a2:0c:0d:1c:58:db:34:59:ff:f0:d0:
62:eb:24:69:75:02:0a:a4:bc:93:25:f2:2d:b1:4b:6f:67:b6:
67:35:e8:b2:59:52:98:d5:d9:c0:1b:e6:8d:01:7b:7e:be:bc:
ba:75:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:54 2025 by rpki-client