Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/1-EakDslaNRpTq_FkHTetVS2AKls.roa
File: 1-EakDslaNRpTq_FkHTetVS2AKls.roa (raw, json)
Hash identifier: pQAdijdP1MRJ6MZWkgZfC/HELIZkwCbNUBB05ErTvT8=
Subject key identifier: F8:46:A4:0E:C9:5A:35:1A:53:AB:F1:64:1D:37:AD:55:2D:80:2A:5B
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 01942143FCF9710B54077639B98613068790
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/1-EakDslaNRpTq_FkHTetVS2AKls.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205215
IP address blocks: 185.218.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fc:f9:71:0b:54:07:76:39:b9:86:13:06:87:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f846a40ec95a351a53abf1641d37ad552d802a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:c2:7d:17:1b:cf:bd:50:0b:3e:22:3c:54:
cc:23:b1:a2:83:76:1d:1e:38:3f:00:bd:05:fa:22:
3b:7f:40:be:c4:47:77:a2:b9:c7:cc:32:2e:37:2e:
76:83:a5:cf:83:2b:4d:93:36:7d:aa:54:aa:a7:79:
83:d4:1f:43:28:0e:f2:c7:75:5d:ce:78:15:09:f8:
95:92:f9:eb:8f:b4:a2:e7:18:55:10:e6:5a:f3:f3:
bc:e2:7a:93:91:46:e9:78:8a:0e:c7:dc:8a:69:43:
fe:cf:16:ac:be:50:b1:c2:15:77:d4:0b:fa:58:43:
c1:a3:c2:de:a4:01:fd:51:f7:4c:51:60:6e:3a:b1:
5f:69:f8:80:1c:07:50:8e:f4:37:2a:76:ef:9d:9c:
76:52:f0:65:eb:f1:a5:b5:cd:ba:a8:70:36:de:7a:
41:71:00:ea:f7:27:6f:78:7c:d9:18:81:00:c4:24:
30:8f:59:76:d3:f7:b6:58:30:ec:75:84:8c:f3:23:
e5:5e:7a:fc:00:3a:b4:67:85:0c:f8:7f:3d:47:9d:
76:a8:96:55:0c:f0:ca:65:ab:80:0a:39:f4:55:7c:
11:91:f7:77:89:e7:03:75:e7:5b:30:56:47:7e:db:
71:4d:f7:2b:6f:c6:c9:66:f6:db:ea:be:f6:4a:e6:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:A4:0E:C9:5A:35:1A:53:AB:F1:64:1D:37:AD:55:2D:80:2A:5B
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/1-EakDslaNRpTq_FkHTetVS2AKls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.208.0/23
Signature Algorithm: sha256WithRSAEncryption
97:43:d2:57:e8:ae:1f:53:73:41:26:b2:38:33:e7:1c:d2:f6:
87:f4:1f:bd:cb:16:51:ca:5f:f9:bf:64:34:10:39:83:52:27:
1d:24:ab:0f:34:2a:48:2a:ac:29:1e:4d:50:37:c3:80:3f:47:
c5:cf:fc:05:35:f3:55:bf:82:c8:6c:6a:08:f7:5a:84:6b:60:
94:d2:05:a1:a6:e2:4b:23:62:11:87:48:bb:55:14:09:55:77:
4a:f7:a4:d6:05:3f:91:6f:0c:25:f3:6a:70:22:8e:51:cd:08:
df:a9:25:fd:bc:33:02:91:75:58:e4:dc:7c:18:aa:51:e5:94:
2f:a0:b5:e8:47:04:7b:26:35:b7:6f:5c:29:09:09:a2:07:48:
74:05:d5:6b:e0:85:e0:3b:cb:26:05:f1:a7:79:05:75:1c:99:
09:a5:cc:55:9e:ed:92:48:91:93:41:8c:4c:68:6e:0c:5e:0c:
66:b2:2d:03:6a:2b:5d:57:66:40:a6:bd:37:a8:ff:78:ac:6d:
d4:37:8e:10:23:eb:3b:e3:5d:b6:60:7a:17:cc:f7:dc:f3:5e:
9e:34:8b:02:61:2e:f5:10:b1:de:60:d4:f2:b9:7b:e8:a8:a0:
73:30:57:9f:4c:a1:61:f5:4e:38:2e:e8:8b:91:7a:46:40:6c:
93:f6:dc:71
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhQ/z5cQtUB3Y5uYYTBoeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDc5YjgzYzUyMGQ3ODQ0NDVjMjQ4MjhiYWI2MzNmMGQ3
MDJjZjMwHhcNMjUwMTAxMDk0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODQ2YTQwZWM5NWEzNTFhNTNhYmYxNjQxZDM3YWQ1NTJkODAyYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdvCfRcbz71QCz4iPFTMI7Gig3Yd
Hjg/AL0F+iI7f0C+xEd3ornHzDIuNy52g6XPgytNkzZ9qlSqp3mD1B9DKA7yx3Vd
zngVCfiVkvnrj7Si5xhVEOZa8/O84nqTkUbpeIoOx9yKaUP+zxasvlCxwhV31Av6
WEPBo8LepAH9UfdMUWBuOrFfafiAHAdQjvQ3KnbvnZx2UvBl6/Gltc26qHA23npB
cQDq9ydveHzZGIEAxCQwj1l20/e2WDDsdYSM8yPlXnr8ADq0Z4UM+H89R512qJZV
DPDKZauACjn0VXwRkfd3iecDdedbMFZHfttxTfcrb8bJZvbb6r72SubhrwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhGpA7JWjUaU6vxZB03rVUtgCpbMB8GA1UdIwQY
MBaAFPFHm4PFINeERFwkgourYz8NcCzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEt
YmRkNGFmNWYzNWQxLzEvMS1FYWtEc2xhTlJwVHFfRmtIVGV0VlMyQUtscy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmIvYTk3ZTIxLWI1ZmUtNGE1Ni1hOThhLWJkZDRhZjVmMzVk
MS8xLzhVZWJnOFVnMTRSRVhDU0NpNnRqUHcxd0xQTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbna0DAN
BgkqhkiG9w0BAQsFAAOCAQEAl0PSV+iuH1NzQSayODPnHNL2h/QfvcsWUcpf+b9k
NBA5g1InHSSrDzQqSCqsKR5NUDfDgD9Hxc/8BTXzVb+CyGxqCPdahGtglNIFoabi
SyNiEYdIu1UUCVV3Svek1gU/kW8MJfNqcCKOUc0I36kl/bwzApF1WOTcfBiqUeWU
L6C16EcEeyY1t29cKQkJogdIdAXVa+CF4DvLJgXxp3kFdRyZCaXMVZ7tkkiRk0GM
TGhuDF4MZrItA2orXVdmQKa9N6j/eKxt1DeOECPrO+NdtmB6F8z33PNenjSLAmEu
9RCx3mDU8rl76KigczBXn0yhYfVOOC7oi5F6RkBsk/bccQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:20 2025 by rpki-client