Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/IrEzCg-L6ChV6NO0z_pSKTvObkE.roa
File: IrEzCg-L6ChV6NO0z_pSKTvObkE.roa (raw, json)
Hash identifier: BAxTmTfKNgnausi613sLgqp7n2C4MuqhHvDS7/1g8aY=
Subject key identifier: 22:B1:33:0A:0F:8B:E8:28:55:E8:D3:B4:CF:FA:52:29:3B:CE:6E:41
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 019424B390FE22AFC44DB5C1F0B3D96016E7
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/IrEzCg-L6ChV6NO0z_pSKTvObkE.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44028
IP address blocks: 185.251.64.0/24 maxlen: 24
185.251.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:90:fe:22:af:c4:4d:b5:c1:f0:b3:d9:60:16:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b1330a0f8be82855e8d3b4cffa52293bce6e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:e9:68:6a:ba:b8:d6:14:bf:63:3d:5d:93:
b7:fc:26:10:44:7e:4e:bb:8e:22:13:43:ea:ce:2f:
6d:01:81:c0:cb:41:0d:f3:f9:66:48:91:15:a5:a5:
e7:b9:43:c1:8e:10:a5:31:46:8c:40:7f:5c:97:fd:
83:d8:36:ce:7e:57:ee:29:e3:f1:7e:26:2f:0f:2b:
16:ec:4d:d1:bc:1b:c8:14:91:11:0d:ab:51:0f:ac:
56:15:e4:1f:7f:3c:54:1e:b2:d8:5c:82:c5:04:65:
88:de:99:a2:32:45:c4:58:0b:cc:ad:8a:51:43:d2:
36:9c:7a:34:54:0b:f0:c3:12:60:86:d2:6e:43:63:
f0:2f:40:34:6a:d3:a0:ce:6f:35:90:ce:51:f8:a5:
9a:05:80:42:03:50:47:39:27:13:23:5a:25:09:df:
9a:eb:db:cd:43:5a:90:d5:e6:77:05:9d:79:1c:e5:
97:c7:f7:08:7c:27:51:07:96:f8:85:07:0c:e4:6e:
2e:2b:7a:a3:fe:0b:9b:a2:fd:1d:0c:52:f4:b5:d1:
a8:f4:bb:44:80:f7:92:38:17:0c:e8:6b:61:19:c9:
ed:cb:79:ed:cf:7f:5c:9b:ab:61:77:c6:e5:43:87:
bd:f6:8b:3a:f1:80:8d:6b:7e:b2:cb:e4:6f:2a:b2:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:33:0A:0F:8B:E8:28:55:E8:D3:B4:CF:FA:52:29:3B:CE:6E:41
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/IrEzCg-L6ChV6NO0z_pSKTvObkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.64.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:55:45:ad:a5:86:a9:bb:71:e0:58:2b:94:f4:96:a5:c6:2d:
6e:2c:b5:e4:8a:28:ce:62:87:54:e9:3e:d3:b7:f7:22:c1:71:
81:2d:91:3b:53:1d:56:9f:5f:6e:1b:55:a5:82:39:82:cf:23:
28:b5:e9:d6:07:15:d5:f0:73:96:c4:6d:4e:e1:6c:0a:f4:7e:
c5:e8:50:c0:67:7d:75:18:dc:b1:96:a8:bc:94:70:c0:72:f1:
76:92:e1:42:56:d7:68:ec:c8:52:92:75:9a:a8:f4:ec:c4:e8:
d9:c0:c9:f2:72:ac:65:a3:e3:dd:44:d8:1d:c8:96:aa:ee:65:
d5:c5:a5:13:f1:ef:07:1b:49:f9:bb:39:56:e8:9b:be:8d:8c:
4d:6b:8b:6f:7b:d7:28:68:74:22:47:d4:c9:4c:78:95:c3:41:
cc:bf:94:ea:33:7c:68:23:ca:92:f9:e7:45:39:33:06:37:8f:
53:e2:22:bd:51:63:c2:13:c4:39:72:bd:05:4a:11:39:cd:a6:
89:46:b3:bf:ab:e5:e6:da:d4:bc:c2:82:91:d7:bf:5c:98:f3:
e7:e0:4f:e0:7a:9c:97:7a:f7:df:24:b6:94:d5:b8:e3:3f:60:
58:92:24:20:32:8a:0a:2d:ad:a7:38:74:83:99:4e:9d:d8:04:
71:ec:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:37 2025 by rpki-client