Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/2m5iIAK03n8_QUvPwXckjr2TMEU.roa
File: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (raw, json)
Hash identifier: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=
Subject key identifier: DA:6E:62:20:02:B4:DE:7F:3F:41:4B:CF:C1:77:24:8E:BD:93:30:45
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 019420686F2DF04494895ADDEA46B680810F
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/2m5iIAK03n8_QUvPwXckjr2TMEU.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47753
IP address blocks: 185.138.167.0/24 maxlen: 24
2a11:c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6f:2d:f0:44:94:89:5a:dd:ea:46:b6:80:81:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6e622002b4de7f3f414bcfc177248ebd933045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:5f:7c:b1:32:3e:61:1e:43:bf:76:2b:91:
ef:21:af:73:61:81:70:b0:ef:66:4c:5f:33:0a:7b:
61:72:e8:9e:21:59:2e:bb:3a:b3:ef:2b:e9:d7:be:
f1:df:10:46:92:21:43:e8:8b:64:e8:43:37:3f:77:
4a:67:0e:5b:52:09:ee:a2:e8:dc:89:df:cb:98:4d:
d3:24:5e:b8:ff:16:eb:0c:c5:f3:26:c3:a2:4b:5c:
a7:84:af:a4:5d:89:62:40:f8:10:b9:6d:72:79:bd:
12:b5:dd:37:27:e5:66:4b:74:72:26:18:55:e8:54:
b5:0e:f2:6f:5b:15:15:bf:f4:0f:38:ec:71:14:66:
a0:0c:03:a5:05:96:53:7c:96:62:1d:5d:16:62:9f:
89:eb:77:7d:69:b3:78:b2:e6:f0:ef:33:66:0a:2d:
e9:1f:06:88:79:2a:1f:2c:9b:70:c2:e9:88:7c:0d:
8e:c5:58:05:01:4e:53:a4:cf:3e:c2:4c:8f:9d:e4:
5b:74:06:8d:f1:dc:17:dd:ac:f6:04:40:50:4d:37:
cf:13:8b:96:cb:7c:60:72:f9:8b:98:ba:a6:5b:0c:
6b:7f:f5:16:53:2e:8b:1b:4d:b5:3d:ba:98:ce:95:
dc:8e:1b:93:aa:f2:b9:59:49:dc:a1:ce:8b:6b:0e:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6E:62:20:02:B4:DE:7F:3F:41:4B:CF:C1:77:24:8E:BD:93:30:45
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/2m5iIAK03n8_QUvPwXckjr2TMEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.167.0/24
IPv6:
2a11:c0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:91:27:c7:9e:dd:bd:33:7c:29:0d:5a:9f:85:7a:46:9d:d3:
44:8a:1a:ee:fb:61:66:79:15:3f:e5:d0:0d:df:e9:b8:ac:f4:
f5:34:d9:e9:47:c4:f4:db:62:c4:a8:c9:6f:78:80:55:7c:fc:
06:41:f2:50:b1:b2:77:33:66:ed:b9:ed:64:71:09:c8:07:a5:
32:b0:62:fc:5e:aa:27:82:12:d9:a2:95:77:27:b2:66:e9:11:
73:af:d1:71:69:98:6d:9d:e8:36:0f:56:da:be:09:a2:0b:0a:
b4:f4:d6:05:02:ed:88:49:f4:8d:29:8f:40:6b:6f:a4:f7:39:
62:16:57:79:9c:af:75:7c:2b:bd:75:67:64:20:34:ca:29:a4:
b4:08:79:3b:73:2a:2b:20:b7:2c:ff:bd:0d:29:a1:a8:f2:b6:
2b:4d:a1:f8:13:f0:ce:de:1c:dd:00:a5:4a:06:c4:4e:0b:fa:
c0:51:72:1e:ca:98:45:7b:b8:a4:3f:f6:50:b2:da:a2:cc:83:
6e:64:41:0a:0a:89:8a:99:36:88:29:86:a1:63:5d:e6:3c:3b:
ed:14:7c:d1:de:58:01:3e:03:c0:e6:5d:bc:8d:c9:f6:9e:51:
b2:5f:21:36:ce:4c:5e:18:37:89:0a:9f:7b:c1:9b:fd:b0:be:
0b:0a:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:11 2025 by rpki-client