Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/asFNeSBZiInH59YAo8NnFAX0FVI.roa
File: asFNeSBZiInH59YAo8NnFAX0FVI.roa (raw, json)
Hash identifier: tWyj3lezAQYJJjmIcLo2JYfuhhBH90r26AXTVK2x0kY=
Subject key identifier: 6A:C1:4D:79:20:59:88:89:C7:E7:D6:00:A3:C3:67:14:05:F4:15:52
Certificate issuer: /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial: 019427B5D9BFD279DB5EE6267C5ABA0B44BE
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/asFNeSBZiInH59YAo8NnFAX0FVI.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204642
IP address blocks: 185.244.124.0/22 maxlen: 22
185.244.124.0/24 maxlen: 24
185.244.125.0/24 maxlen: 24
185.244.126.0/24 maxlen: 24
185.244.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d9:bf:d2:79:db:5e:e6:26:7c:5a:ba:0b:44:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac14d7920598889c7e7d600a3c3671405f41552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:0b:a6:f2:8d:df:19:09:c5:5e:af:8a:27:
6a:5b:2f:05:c8:a8:74:ef:1e:43:b3:e6:12:5c:37:
4e:9d:31:7d:f1:ff:46:b8:5f:1a:58:39:0c:07:e0:
46:b5:fe:2c:7b:7c:6b:b1:fb:4f:83:0a:3e:74:5a:
11:42:d0:6a:b9:2f:54:87:04:8f:0f:b2:72:87:cd:
f1:03:2a:9f:20:10:c3:b8:84:ea:6e:b2:f1:02:93:
cc:ac:a0:bf:46:d5:d7:07:a8:a0:9d:aa:32:39:4d:
96:89:99:84:31:70:9a:5c:13:14:76:fd:fd:81:e9:
17:2e:f0:32:6b:54:4e:db:d8:19:15:9d:ce:1c:34:
9a:7c:58:c6:c0:e7:10:07:62:8a:ac:1e:b0:b1:25:
d2:b0:89:9f:f8:95:1c:ee:79:97:a6:9c:91:99:89:
9f:d2:85:9b:7a:b6:fa:64:31:97:b6:8d:9c:41:02:
ad:3f:d6:27:3c:1a:88:86:25:d5:04:00:89:22:99:
79:f5:11:d4:18:5d:bc:8c:83:e6:53:02:02:93:83:
0c:54:8d:43:7b:d0:b0:9e:ec:bf:b9:c1:46:d7:26:
2d:81:41:9f:ac:0d:97:de:dd:34:4f:a6:2d:31:c6:
49:a1:61:2e:85:84:3a:c1:ae:66:95:e1:7a:1e:56:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:4D:79:20:59:88:89:C7:E7:D6:00:A3:C3:67:14:05:F4:15:52
X509v3 Authority Key Identifier:
keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/asFNeSBZiInH59YAo8NnFAX0FVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.124.0/22
Signature Algorithm: sha256WithRSAEncryption
82:fa:7b:3b:d1:57:a8:92:22:7b:eb:47:35:76:e4:17:61:84:
27:e7:37:d7:45:18:5e:00:c3:ee:29:17:6a:16:c6:c9:36:2f:
d7:c6:a5:47:2b:ea:47:a3:f2:ea:d3:d1:3f:6e:ec:e6:82:7e:
29:a9:ad:1e:e7:c2:5c:d0:d3:3f:45:22:ef:5e:4c:eb:4f:f1:
84:05:25:b1:fb:cb:eb:5b:ae:74:89:1e:df:67:5b:f0:7d:6c:
d3:51:23:ac:a1:97:2a:ee:3e:87:e2:60:cb:1e:98:00:cc:5a:
4d:58:89:3a:3d:60:d8:cb:ca:29:9c:ad:c2:ca:3c:18:ec:09:
47:f5:ad:26:75:1e:38:f9:83:f9:f0:ea:68:c5:01:7a:19:57:
01:0e:10:ed:96:37:ee:f3:f9:71:0f:5c:b3:0b:1c:e4:9f:9e:
0b:88:ff:f6:8a:5b:82:e2:84:25:3e:cb:b2:fa:6b:84:38:97:
f5:bc:12:bd:2d:28:cc:0b:96:73:c5:bf:f7:48:f1:65:74:35:
06:49:a7:d5:a9:4a:7c:0e:34:87:60:6b:3a:bf:14:a5:aa:ec:
3e:17:1c:bf:9b:68:c3:d0:06:fa:c3:66:43:e4:69:0b:e8:4c:
fd:be:ff:c1:1b:6c:86:21:85:07:30:98:68:83:5f:cd:7a:00:
ce:17:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:16 2025 by rpki-client