Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa
File: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (raw, json)
Hash identifier: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=
Subject key identifier: 89:A5:3C:B1:01:E9:06:84:D8:C7:04:53:3D:19:70:66:D5:09:77:92
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 019421B2432EB4F430E3C50BDDDBFB2942E7
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60525
IP address blocks: 185.149.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:43:2e:b4:f4:30:e3:c5:0b:dd:db:fb:29:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a53cb101e90684d8c704533d197066d5097792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5e:80:21:c5:9e:c5:4e:e9:ad:cd:ba:a4:88:
3f:a0:58:02:ca:6f:98:f6:81:26:e7:0f:20:d3:be:
49:b4:61:2b:87:b5:7d:69:cd:8f:a3:85:df:2a:3d:
44:c9:4a:10:9a:46:e0:18:53:2e:af:43:54:28:84:
7d:74:d7:04:a3:f4:93:5c:b6:df:fc:06:c5:e6:e6:
8e:a8:d2:93:ba:05:cf:a0:e6:c6:2a:39:7a:ce:ca:
f2:33:45:d2:c0:77:4f:dc:12:0e:49:dd:f3:45:e7:
02:a4:47:e3:f9:81:db:7d:2f:35:f2:f9:f8:70:b4:
4b:b0:c3:11:92:90:af:15:bd:c8:17:e0:94:50:57:
53:92:32:02:6c:af:82:eb:81:80:e2:b4:7e:70:68:
59:a3:14:19:94:5e:5f:2f:d4:82:b4:b7:41:21:35:
af:11:f9:00:85:b7:1b:ee:03:bd:b9:db:9b:02:96:
d1:7a:ad:11:4f:3a:be:26:c3:3e:2e:1c:12:5c:8d:
81:d8:9a:21:7e:4a:27:7c:f4:96:91:b1:cd:c4:5b:
5d:76:e8:1e:86:51:95:c9:e9:8b:e3:17:7d:51:77:
32:90:a6:97:50:1b:99:b5:cf:37:a9:ce:8c:52:83:
b1:8d:d7:de:c7:7a:39:8e:66:32:25:d2:0a:2e:c7:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A5:3C:B1:01:E9:06:84:D8:C7:04:53:3D:19:70:66:D5:09:77:92
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.175.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a2:43:a9:03:e4:cd:e5:20:23:47:bc:fb:8a:24:6f:59:34:
fd:57:54:05:5d:4c:e7:00:0b:8e:c5:4f:16:1f:3d:8f:75:63:
62:cd:5b:d9:58:22:6e:a6:da:e3:91:49:ab:e7:f8:5f:63:3f:
bd:81:76:8d:a3:07:d4:c3:69:87:82:10:60:da:f2:5d:a5:a5:
59:62:b4:58:e3:74:d4:c5:01:c0:6a:e0:6e:d2:ef:29:de:d0:
25:99:d8:67:a4:89:f6:9f:2f:0d:79:e7:b0:44:cb:e5:2e:c8:
ed:db:50:7b:28:c9:30:ea:06:5c:19:52:19:8f:92:cf:17:67:
d9:ce:ba:ee:31:f2:f0:65:97:a4:83:98:2f:31:f6:b6:b2:e6:
2f:31:c5:d3:6c:d5:6e:c1:26:45:93:27:22:ab:2a:c2:50:d6:
29:b8:7d:50:a1:b7:90:27:c3:3c:6c:cf:42:b7:43:06:e2:2c:
ad:0f:c2:8b:b0:cd:74:39:b1:0c:84:70:b4:ab:3d:b8:19:3e:
39:ff:0b:82:c2:ec:64:c8:7f:8d:99:e5:83:fa:00:e6:b3:9c:
d1:8b:69:24:83:2f:2c:ec:93:ee:3c:75:8c:4f:80:ba:4b:40:
be:aa:c0:a2:53:35:1d:c8:e4:60:c7:13:0a:e0:b3:3c:80:5f:
95:99:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:17 2025 by rpki-client