Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/G42ckstKb-ubKY07LPZzjX8vOm4.roa
File: G42ckstKb-ubKY07LPZzjX8vOm4.roa (raw, json)
Hash identifier: DcUBBQM4AgPddgy39mvsGVunPNK2vS9jB8dnqEwQEpo=
Subject key identifier: 1B:8D:9C:92:CB:4A:6F:EB:9B:29:8D:3B:2C:F6:73:8D:7F:2F:3A:6E
Certificate issuer: /CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Certificate serial: 01941F8C051A33899F90F5BB76742FA3AA9E
Authority key identifier: FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/G42ckstKb-ubKY07LPZzjX8vOm4.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 185.130.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:05:1a:33:89:9f:90:f5:bb:76:74:2f:a3:aa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b8d9c92cb4a6feb9b298d3b2cf6738d7f2f3a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:4e:5c:6f:08:ab:be:6b:12:24:fb:58:c0:
31:69:cb:1e:03:49:e1:df:2a:56:ab:5f:83:9e:a5:
73:02:92:70:09:9a:c1:90:bc:80:32:13:9f:46:a1:
fe:e4:76:48:38:3f:7e:0a:9e:f2:56:b6:e9:f6:f5:
a5:a0:e0:7e:09:dd:3d:5b:4b:23:93:dc:00:8c:70:
9d:40:e8:c9:b5:c8:d5:17:05:66:f4:92:4a:8f:60:
c6:3b:fa:28:81:cd:c9:c3:05:e3:f1:fc:4a:8e:71:
ec:55:f9:14:eb:3c:13:a1:ab:1c:a1:06:6a:0d:6b:
4a:bc:02:ab:4e:12:ef:5a:16:7d:ea:d4:ae:c5:96:
fb:77:dd:83:64:33:4a:31:2f:0b:96:01:29:66:15:
60:49:0b:ad:82:4d:4e:c9:fc:b6:be:ed:39:43:51:
ae:6b:e2:56:e8:73:5d:77:71:23:40:24:d2:21:9f:
5d:24:bd:2e:79:9a:21:66:67:7e:c3:7e:92:ff:d9:
eb:66:f9:fd:b4:4a:98:5b:a6:c2:db:35:c7:b7:38:
70:cc:48:58:1e:33:bc:d8:35:4d:00:3c:03:bd:d2:
c6:d1:23:5b:52:ad:3c:9c:69:82:8e:bd:24:1c:c4:
f1:c5:f6:28:48:bc:7a:33:b0:32:1b:42:61:b9:4b:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8D:9C:92:CB:4A:6F:EB:9B:29:8D:3B:2C:F6:73:8D:7F:2F:3A:6E
X509v3 Authority Key Identifier:
keyid:FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/G42ckstKb-ubKY07LPZzjX8vOm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.89.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7b:91:cd:6d:57:da:28:a0:d5:e4:63:4d:85:ab:7d:cf:f7:
73:e8:bc:a5:10:c9:dc:52:8e:21:fd:91:7a:eb:20:b5:60:c9:
51:e8:ab:20:44:39:01:b5:d0:0e:da:32:47:47:5e:32:e2:83:
ee:62:20:4a:e4:1d:73:71:b8:4e:56:93:fc:85:95:3e:d9:7c:
e6:19:b6:a5:5d:c0:8a:f5:66:2f:59:39:11:78:3e:28:7c:20:
b6:21:81:01:74:8c:84:ff:2c:a6:99:b6:f8:83:88:97:b7:b7:
b4:43:b8:f0:b7:dd:06:61:7f:75:b8:f3:5b:b4:e1:7a:6a:7b:
03:2c:b7:f0:1b:9b:a8:62:b1:dc:89:ce:3d:a0:8c:30:fb:bb:
04:30:14:2d:20:91:75:16:bb:44:96:e0:cf:9b:63:8e:67:be:
78:72:5e:00:57:85:68:87:dc:f7:be:38:cc:f7:0a:4c:d1:6f:
88:86:90:33:49:e3:f4:5e:a3:58:42:5d:85:74:dc:02:ec:16:
c4:f4:be:b5:49:ab:8f:dd:2c:43:53:e3:d7:f6:5f:dd:6e:07:
93:e9:5d:fa:51:9c:0d:bf:80:81:d4:33:38:b5:a4:2e:10:54:
da:04:22:c8:31:e7:49:1e:c9:b4:7e:b2:ea:18:cc:bf:cd:cb:
df:8b:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:52 2025 by rpki-client