Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/LeDxRPF8P9RMofc58MUPZ2-f5ns.roa
File: LeDxRPF8P9RMofc58MUPZ2-f5ns.roa (raw, json)
Hash identifier: dauJrCeMxMYMS/fiSfnxubxShmwm8ddNcbzhDtx6PjM=
Subject key identifier: 2D:E0:F1:44:F1:7C:3F:D4:4C:A1:F7:39:F0:C5:0F:67:6F:9F:E6:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 0194751520B8B942B76B25887D0BBD32D1DE
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/LeDxRPF8P9RMofc58MUPZ2-f5ns.roa
Signing time: Fri 17 Jan 2025 16:25:06 +0000
ROA not before: Fri 17 Jan 2025 16:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45033
IP address blocks: 185.43.128.0/24 maxlen: 24
185.43.130.0/24 maxlen: 24
185.43.131.0/24 maxlen: 24
2a07:f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:15:20:b8:b9:42:b7:6b:25:88:7d:0b:bd:32:d1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Jan 17 16:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2de0f144f17c3fd44ca1f739f0c50f676f9fe67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:96:cd:e4:95:97:88:25:57:93:d0:b0:e1:
98:39:63:21:fc:92:ad:ff:fc:78:9f:d3:f1:31:7c:
fe:e5:cf:bc:e9:be:77:f1:dd:22:67:11:0f:ac:15:
a8:ec:5f:31:c5:54:34:c1:ca:22:53:5a:06:c6:d0:
30:3c:4d:f3:88:83:d9:82:e8:72:b8:0f:ae:72:86:
5f:d7:ff:30:28:99:4e:79:9a:3c:63:50:78:ba:38:
3a:d6:f9:3b:94:89:27:1f:2b:7b:76:24:87:71:e4:
29:80:c8:43:2c:9f:63:3d:b3:c2:69:4c:55:f7:de:
14:b0:e0:bb:e0:1b:34:1a:a9:ea:3a:7d:63:c7:72:
e5:87:2a:27:9f:8d:38:f6:d5:05:8c:d5:f2:7e:c5:
7a:11:b5:61:5b:59:3b:6c:6a:e4:cc:9c:a8:20:85:
19:9c:f1:1d:00:70:26:b5:3f:61:8a:3d:bc:64:8e:
c0:bc:15:5a:ac:0e:e5:f2:24:5e:c8:eb:fd:c3:74:
57:87:25:93:ce:78:5e:13:42:af:93:c0:5e:d1:ca:
1f:60:c3:1f:ac:2b:cd:f7:da:b3:e7:d5:98:e3:22:
4f:6c:66:cc:67:d6:00:d8:f5:be:c7:df:72:53:a3:
46:af:a4:ee:66:13:42:de:60:26:28:f9:b5:1f:4c:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E0:F1:44:F1:7C:3F:D4:4C:A1:F7:39:F0:C5:0F:67:6F:9F:E6:7B
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/LeDxRPF8P9RMofc58MUPZ2-f5ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.128.0/24
185.43.130.0/23
IPv6:
2a07:f80::/29
Signature Algorithm: sha256WithRSAEncryption
8b:50:fb:48:d9:ea:8d:b3:f4:24:cc:41:23:5d:38:61:c8:05:
25:ed:1d:c0:3f:dd:76:ed:81:4b:3d:47:37:aa:3b:55:cd:ed:
95:02:c9:a6:ac:a5:5f:d8:7b:f6:1c:ad:fc:54:d8:f7:d3:20:
71:87:42:49:72:e8:75:62:d4:00:ac:51:b2:a6:09:bf:50:d2:
f8:c3:20:74:51:78:5a:cf:7d:23:58:82:9b:b6:8d:c1:77:81:
3c:7a:2d:3f:54:c6:eb:a2:66:11:fc:53:8a:1c:63:58:6c:bd:
30:b8:f1:b8:c1:18:4e:42:b9:92:35:37:6d:b5:34:1d:5b:67:
52:20:06:87:ab:02:58:c1:46:58:a2:56:0e:b2:f1:59:00:e4:
1c:a5:fe:9f:2e:ad:02:41:39:9d:8c:5a:7c:99:d8:8e:63:4a:
ab:bc:f7:7e:3e:a7:1b:15:50:8a:53:2d:23:68:35:10:db:97:
67:60:2f:88:0c:75:50:e1:9c:ca:ef:08:bd:d5:09:35:38:c7:
bb:c8:ab:58:16:63:5e:4b:32:ce:d1:41:7a:7d:ae:38:cc:b5:
1a:6c:6e:0f:4f:fb:e0:19:33:5f:bb:fc:ca:89:09:92:15:9d:
b9:bc:d1:7f:6d:3e:c8:8a:ef:0d:39:e9:33:35:01:c3:0e:80:
e0:2c:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:59 2025 by rpki-client