Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/OseFlpN5BBrbNEKlLXg6nEL0mf0.roa
File: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (raw, json)
Hash identifier: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=
Subject key identifier: 3A:C7:85:96:93:79:04:1A:DB:34:42:A5:2D:78:3A:9C:42:F4:99:FD
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019427B5827E3764F171238139CDB115336E
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/OseFlpN5BBrbNEKlLXg6nEL0mf0.roa
Signing time: Thu 02 Jan 2025 15:49:54 +0000
ROA not before: Thu 02 Jan 2025 15:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56327
IP address blocks: 185.219.224.0/22 maxlen: 22
185.248.72.0/22 maxlen: 22
2a0f:78c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:82:7e:37:64:f1:71:23:81:39:cd:b1:15:33:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ac785969379041adb3442a52d783a9c42f499fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:e4:5b:a3:56:05:a0:3a:d6:f9:a4:03:74:
9f:61:0d:d4:e6:d6:26:95:5b:17:70:4f:1d:e7:69:
08:b3:70:97:b1:e0:d1:77:0c:2c:c1:ad:df:f1:b3:
10:8a:9b:b1:7d:96:0b:94:d9:97:26:17:1f:dd:5a:
be:70:6f:2b:b8:46:9c:fe:32:db:77:95:db:68:25:
bf:1a:0d:0a:bb:64:b5:2d:46:d1:f8:53:f5:e0:c3:
fa:47:fd:b5:6d:38:fc:51:8d:e5:cd:7e:74:1f:75:
6d:2f:48:98:1c:df:82:c8:0a:b0:83:48:44:22:e5:
18:5f:42:8e:a1:b6:c3:fb:fa:23:5c:d8:4f:30:ec:
49:89:fe:91:94:81:c8:f4:a7:0d:e2:63:92:98:4f:
d7:ac:ca:5b:65:37:e5:bd:47:b3:b3:a9:8d:b5:60:
71:8c:24:2e:d4:51:36:f0:41:39:df:b8:89:06:69:
2a:9a:86:36:b8:3a:f7:95:26:8e:f9:b7:67:b0:d3:
de:e7:27:f0:59:5b:4b:09:d6:d7:2a:99:fc:17:a0:
0f:5b:a6:1b:1e:6f:ca:7a:39:1b:39:1b:05:43:b2:
4b:54:64:8d:eb:e9:a0:a9:48:96:99:54:85:0a:9b:
22:00:af:fe:c3:08:d8:37:24:4d:d9:7d:3e:d5:49:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:85:96:93:79:04:1A:DB:34:42:A5:2D:78:3A:9C:42:F4:99:FD
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/OseFlpN5BBrbNEKlLXg6nEL0mf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.224.0/22
185.248.72.0/22
IPv6:
2a0f:78c0::/29
Signature Algorithm: sha256WithRSAEncryption
ed:7d:22:db:9a:17:3e:2e:46:28:70:d7:82:11:da:b6:e3:de:
2b:d7:42:0a:e5:a6:0a:4d:df:4f:4d:1c:1d:46:21:26:0f:20:
eb:43:3f:af:71:5b:d0:94:b6:9c:a5:97:5d:2e:77:c4:bc:72:
ee:dd:78:d5:21:b7:40:ec:2a:8e:43:a2:3f:c4:44:63:d9:51:
43:de:de:bc:5b:9a:eb:0c:5e:e6:ba:66:f4:7a:06:16:d9:b4:
a5:b5:da:d8:3d:5f:a2:75:37:20:d9:99:31:14:85:dc:b9:bd:
09:d1:7a:58:27:bb:a1:fd:eb:fb:d7:8e:65:6e:7e:8b:3e:5e:
96:a1:67:18:68:ac:58:da:6d:5b:5c:5e:17:6d:0e:ce:2d:ae:
b6:f4:81:06:fa:cd:03:f5:ae:18:de:b0:32:67:1e:67:6c:93:
52:f9:f5:49:06:0d:bf:18:85:1b:76:d2:f4:14:04:8b:b2:8b:
b9:dc:fe:c4:94:4b:f7:71:3c:fe:1a:8c:ec:a8:6c:18:07:3a:
2b:b6:bc:06:6f:f3:39:0a:48:67:ba:8c:5b:a4:a7:f6:f3:3c:
d7:a1:17:3c:41:6c:2e:17:69:d8:73:7e:f8:ae:61:89:09:9b:
9c:e9:a5:4d:e1:29:b1:e5:42:ac:f8:20:f5:e9:10:85:48:05:
36:a0:b7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:51 2025 by rpki-client