Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa
File: 7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa (raw, json)
Hash identifier: 2p7G908u5hNgOkOPybVcD1KwXNRQ1cpOLTMbKHUwi8k=
Subject key identifier: EE:52:55:C4:97:86:DA:44:33:8A:5C:B9:62:CD:E9:CC:EE:02:C7:77
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 01942369D04740FBD65E4E7818EF43E920BB
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa
Signing time: Wed 01 Jan 2025 19:48:44 +0000
ROA not before: Wed 01 Jan 2025 19:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57722
IP address blocks: 185.248.172.0/22 maxlen: 22
185.248.172.0/24 maxlen: 24
185.248.173.0/24 maxlen: 24
185.248.174.0/24 maxlen: 24
185.248.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d0:47:40:fb:d6:5e:4e:78:18:ef:43:e9:20:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Jan 1 19:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee5255c49786da44338a5cb962cde9ccee02c777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a3:ff:2d:9d:e0:4f:02:ce:c0:7e:de:e3:56:
52:c2:ad:3a:74:2f:e9:c6:ae:de:6b:43:4a:3d:89:
2e:a4:8f:4f:c3:d5:50:aa:5b:9a:94:61:89:1b:7e:
4b:a4:7e:5d:07:ed:a2:6c:0d:9c:02:2c:bc:85:bd:
59:8a:e8:20:f4:55:c4:cd:41:77:e7:b8:e9:e6:97:
f0:4c:8e:c0:fd:b6:3f:7a:cd:d9:58:0e:e8:65:d5:
6a:d8:bb:35:a9:d1:f0:a7:40:20:63:07:1b:a8:9e:
58:f0:47:5b:15:af:01:21:bb:5c:19:ff:96:5b:f0:
a8:31:19:0f:5b:3c:f5:0b:e1:50:e0:96:88:05:2d:
5e:90:a8:0c:a9:00:f1:f1:36:45:ee:5e:34:e8:8f:
b7:49:a8:ef:bf:de:d7:40:26:74:96:55:0f:5d:99:
dc:30:85:e3:8d:79:9a:b9:ef:41:2f:bd:5d:66:16:
db:11:ee:d1:b8:8a:61:26:7b:79:8a:72:18:c5:44:
43:99:44:b5:93:ee:27:f8:09:dd:b4:ff:33:ef:4f:
a2:b3:c0:1e:0c:f5:56:1a:00:5f:12:10:08:3b:be:
6f:05:e0:49:ef:da:da:37:1a:d2:5a:ea:b4:ea:a8:
ee:39:6a:a1:57:b3:18:e7:76:3c:f7:64:65:79:97:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:52:55:C4:97:86:DA:44:33:8A:5C:B9:62:CD:E9:CC:EE:02:C7:77
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:46:70:e4:56:f3:15:f0:b3:af:b6:12:bc:06:61:52:ef:55:
2a:7b:d7:e7:f5:17:d1:d6:aa:a4:da:96:b4:89:98:13:94:6d:
d5:1a:c1:dc:46:3f:a8:33:d6:2a:db:20:4d:cb:d5:0b:a0:51:
c8:f1:2c:d5:9e:09:ec:60:97:12:f0:b8:cd:01:76:23:f6:20:
5c:c6:c0:86:8e:f4:ae:36:d3:aa:b9:b7:69:94:20:40:55:e6:
b6:eb:a5:27:0f:ad:f9:96:b8:3b:8b:3a:07:11:6b:4c:62:af:
42:7b:66:7c:d0:06:a0:04:fe:c8:68:01:19:79:21:cc:72:e8:
24:c7:56:75:a8:39:b8:63:c6:c5:af:62:4a:ea:ed:ff:83:59:
7c:a0:4a:09:c5:87:a3:a1:3b:f4:37:4e:d4:5e:3d:b7:c3:65:
f9:a2:cb:ca:bb:eb:18:5f:87:6f:20:e0:7a:b3:08:4d:6a:2c:
73:cc:42:e8:a9:58:a2:5d:a6:69:da:0e:df:40:47:aa:69:4c:
95:32:d9:84:50:d3:48:bd:92:52:b6:a5:2d:17:59:8b:68:a4:
06:6a:3b:23:71:4b:af:71:99:bf:34:25:de:95:7f:23:d6:dc:
3d:07:3c:73:6e:fa:45:83:10:f5:e4:72:70:54:d4:4d:bc:94:
22:78:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:38 2025 by rpki-client