Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/SdaFk0i9oaACqCFG8FwyvK3jONA.roa
File: SdaFk0i9oaACqCFG8FwyvK3jONA.roa (raw, json)
Hash identifier: mJwQw6cB9ENK8FtIb9A/q4I0gNZt3odByHKhh1kNEqs=
Subject key identifier: 49:D6:85:93:48:BD:A1:A0:02:A8:21:46:F0:5C:32:BC:AD:E3:38:D0
Certificate issuer: /CN=2b9a46de84e148e8b2a16939a295c54c33a80178
Certificate serial: 01905F7C9534B895492EA4C01DED021E20C0
Authority key identifier: 2B:9A:46:DE:84:E1:48:E8:B2:A1:69:39:A2:95:C5:4C:33:A8:01:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5pG3oThSOiyoWk5opXFTDOoAXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/SdaFk0i9oaACqCFG8FwyvK3jONA.roa
Signing time: Fri 28 Jun 2024 15:35:18 +0000
ROA not before: Fri 28 Jun 2024 15:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 185.94.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:7c:95:34:b8:95:49:2e:a4:c0:1d:ed:02:1e:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9a46de84e148e8b2a16939a295c54c33a80178
Validity
Not Before: Jun 28 15:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49d6859348bda1a002a82146f05c32bcade338d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:36:28:9a:96:e0:1e:85:ff:0a:5c:91:3e:
6f:78:e8:b7:40:59:11:cc:88:a1:79:1d:61:9d:41:
76:63:00:f3:a8:7b:7a:cc:12:97:8d:8a:93:0c:2a:
f8:a7:c0:2c:7f:ca:ce:b7:f3:a2:02:ca:6c:b1:de:
be:fe:f1:ad:1e:3f:b4:d4:20:a1:1c:67:fe:a3:4f:
ac:ac:4f:85:a2:ad:cb:a7:26:ce:bb:85:6c:bd:df:
5b:60:f5:21:6c:d7:36:ea:0c:7e:d7:35:4e:41:d1:
5d:51:94:76:b3:ae:dd:52:6e:25:56:a9:02:64:d1:
4b:39:22:64:99:a5:1a:73:0c:79:73:1e:4f:79:f8:
5b:59:11:22:b5:cb:a1:f3:ce:89:f7:7e:34:ef:eb:
10:1e:ab:8c:a4:a5:6b:24:f0:81:b2:58:de:8c:33:
8f:44:57:b7:af:3d:77:41:a6:e4:ea:20:a8:d6:a1:
08:00:00:dd:04:0a:8b:ce:3d:9a:ce:10:10:bd:8e:
9f:2f:7c:da:5f:c0:03:2f:5b:95:cd:25:ba:34:a6:
97:d6:34:85:61:21:24:2d:1a:55:3d:56:34:86:3c:
ae:be:71:03:07:94:d0:1b:46:f8:62:b9:84:04:68:
e8:5d:d2:e3:b9:ee:75:68:31:f5:7e:74:5d:3a:48:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:85:93:48:BD:A1:A0:02:A8:21:46:F0:5C:32:BC:AD:E3:38:D0
X509v3 Authority Key Identifier:
keyid:2B:9A:46:DE:84:E1:48:E8:B2:A1:69:39:A2:95:C5:4C:33:A8:01:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5pG3oThSOiyoWk5opXFTDOoAXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/SdaFk0i9oaACqCFG8FwyvK3jONA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/K5pG3oThSOiyoWk5opXFTDOoAXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.248.0/22
Signature Algorithm: sha256WithRSAEncryption
58:30:dc:ab:dd:d5:f4:d0:1c:73:92:b7:72:18:ab:71:15:0f:
f4:75:24:3f:07:9e:8f:bb:69:ef:c6:65:27:e7:55:24:9a:f7:
0c:19:a5:a0:45:e4:59:9a:2b:b4:64:d6:cf:2d:13:93:e6:23:
0c:1e:72:4a:73:62:46:86:55:29:d2:1e:9a:07:68:d6:38:4c:
fd:72:7f:de:d1:6a:d8:a4:b7:d4:24:34:0d:88:2b:48:b6:a7:
8b:d4:78:01:58:47:12:b2:6a:18:4b:35:9b:06:52:9f:d0:b1:
c5:0e:b3:05:8d:2b:95:d5:e1:d9:63:e6:b7:92:b3:1a:d8:94:
bb:1a:fe:a7:c8:18:cd:59:1d:b2:3d:11:aa:65:74:d5:10:15:
4e:28:72:85:28:6f:fc:62:17:30:04:df:bf:44:2c:4d:e7:e9:
8d:be:4f:a7:d7:6b:3c:3a:91:9f:d7:c4:9b:49:e3:99:3d:bb:
1b:26:ef:34:1d:9a:f4:f1:ba:53:29:99:9d:c8:17:e4:ec:5f:
72:b7:b9:eb:6e:c6:36:bd:b5:62:59:87:49:f8:3f:8e:5a:80:
cd:9c:60:be:63:fa:29:03:22:92:48:fe:ed:18:b1:c8:4f:91:
01:23:62:d1:68:e1:b9:6d:3e:77:e2:e7:06:35:aa:3c:e2:e4:
ab:47:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:36:41 2025 by rpki-client