Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/ikG1MP5CFb4MrHRlKXRxfOjzWUE.roa
File: ikG1MP5CFb4MrHRlKXRxfOjzWUE.roa (raw, json)
Hash identifier: Lq7odpLAl0ioAJNcLxhDJaodZzJvYSnz6xQ8MVt7XlU=
Subject key identifier: 8A:41:B5:30:FE:42:15:BE:0C:AC:74:65:29:74:71:7C:E8:F3:59:41
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 0194236A422B8FA62C314991D76B6C9EB28B
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/ikG1MP5CFb4MrHRlKXRxfOjzWUE.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57558
IP address blocks: 45.129.248.0/22 maxlen: 22
185.15.168.0/22 maxlen: 22
185.197.8.0/23 maxlen: 23
185.197.11.0/24 maxlen: 24
2a03:b140::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:42:2b:8f:a6:2c:31:49:91:d7:6b:6c:9e:b2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a41b530fe4215be0cac74652974717ce8f35941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:8c:ec:fc:46:be:ef:41:05:30:96:92:06:
09:28:26:6b:9f:26:bd:98:36:c3:6c:57:3c:71:fc:
ae:04:7d:da:11:ed:c1:c7:ec:22:6b:28:53:ba:b2:
75:a4:a5:00:df:65:17:ae:9c:0a:34:4b:b8:77:10:
f3:05:a1:76:d0:13:32:fe:90:e5:ca:47:a0:d7:0a:
dc:65:a2:c3:5a:73:90:cf:fe:c4:24:09:d8:6f:8b:
ce:fe:6d:54:e6:bf:a6:7a:14:7b:45:e4:ab:38:97:
b9:0e:a5:d3:fa:da:7d:85:f4:3e:a0:3c:4b:8b:bc:
fd:0a:be:90:14:50:bf:52:36:cf:43:7b:fa:d6:35:
85:38:ab:55:12:19:2c:32:a4:cf:c8:80:44:b9:1a:
3f:4f:84:1e:d5:bc:2b:46:3e:57:30:00:29:39:92:
8b:91:76:0c:1d:84:72:0f:74:a4:fa:c2:7e:fb:f8:
02:95:7f:6e:69:f5:2f:f8:21:e5:23:1a:25:dd:37:
6b:4a:c8:38:de:2c:1f:34:f2:da:a9:e0:31:9b:2b:
3f:f4:cf:bb:6c:7e:dd:13:88:1c:80:66:0c:53:b6:
53:c0:c8:2b:03:b5:f9:59:d8:17:9c:1d:28:f4:01:
df:90:f8:62:bd:19:97:ae:b2:34:b7:54:36:bb:6d:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:41:B5:30:FE:42:15:BE:0C:AC:74:65:29:74:71:7C:E8:F3:59:41
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/ikG1MP5CFb4MrHRlKXRxfOjzWUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.248.0/22
185.15.168.0/22
185.197.8.0/23
185.197.11.0/24
IPv6:
2a03:b140::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b2:e5:ac:07:22:d6:1e:22:e9:1c:53:00:56:08:60:51:3d:
c6:70:d2:db:98:3b:86:f1:a5:4e:f4:fd:e4:2a:9f:81:44:c7:
fc:94:50:c4:a1:ef:3f:a7:6a:f7:22:05:4d:bf:ee:38:43:36:
39:d9:6b:62:8f:c0:13:bf:b8:2c:32:4f:64:48:47:2e:14:d9:
1a:57:46:3a:3a:ee:8b:62:5c:27:f1:0e:82:15:1f:db:60:2c:
c9:1e:c6:65:d6:ec:cc:57:ae:93:86:b8:2a:cd:e9:f2:aa:4c:
b9:6d:6b:03:4d:31:c9:6f:ca:8f:ff:b1:20:dc:9c:a4:f6:a0:
56:a2:e4:3f:6f:49:4b:c5:07:8f:75:96:0f:56:c8:86:b2:50:
7b:80:c5:ef:b4:c1:d5:8d:6f:57:a1:70:61:11:83:e5:ea:8f:
08:f9:96:e1:c3:ac:0c:b7:3a:37:66:dd:62:6f:b4:b6:8a:60:
9d:89:a2:cf:13:32:39:60:dc:70:c3:a5:ec:49:1a:1c:f6:3f:
f1:32:72:a2:06:91:89:fb:93:8e:14:8e:b1:d6:76:3c:5f:b6:
2e:aa:d4:f9:3b:25:75:73:22:84:8e:c7:39:15:ee:25:be:6a:
78:d3:a1:62:ab:cf:c3:b2:fd:59:63:55:c4:6a:68:1d:4f:ff:
9d:bb:06:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:22 2025 by rpki-client