Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa
File: BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa (raw, json)
Hash identifier: WITF2/BxKRtye2S81kXXKd8taTnYKpq4xKx/Xf8lw7Q=
Subject key identifier: 06:D2:7A:4B:6E:CE:58:94:A6:A2:3E:CD:63:34:D4:37:4F:E2:15:43
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 0194221FE95B982DCD59914D480972CA012A
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48854
IP address blocks: 185.232.148.0/24 maxlen: 24
185.232.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e9:5b:98:2d:cd:59:91:4d:48:09:72:ca:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06d27a4b6ece5894a6a23ecd6334d4374fe21543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:fd:83:5b:09:a0:f0:e1:3c:e4:9b:ce:ec:
88:e0:f2:09:64:e0:51:83:d6:a4:6e:9c:7c:ec:a8:
fa:a0:1c:a4:e8:f7:05:37:5a:a2:3b:dc:a6:27:8a:
9f:b7:27:68:e3:8c:6a:47:d8:86:c9:c2:d3:e3:33:
df:7b:44:0c:4e:c2:bb:51:39:b0:83:1c:fb:55:1a:
80:ca:94:72:1a:74:49:5e:41:b1:4e:fe:3a:20:66:
a8:82:eb:7a:f7:3d:45:f8:59:22:05:03:c4:22:10:
92:3a:37:b3:d3:72:53:8d:11:18:0b:dc:07:6a:bb:
f2:8c:16:33:42:b3:fb:41:73:80:fa:bc:73:2b:1e:
17:c8:93:41:1a:b9:be:df:54:61:a1:40:07:94:e7:
84:b2:10:e7:c5:d8:0c:80:f1:34:98:05:a1:e1:51:
80:1d:a1:9f:e6:91:a9:d8:6e:be:00:36:ea:ec:b4:
3f:91:55:2e:ee:b1:36:17:5d:41:21:e1:1a:84:18:
1d:f4:c5:41:0a:a7:62:86:21:1f:79:6a:ff:47:9e:
be:9a:2f:63:3b:6e:32:47:53:c6:11:c3:56:1b:d6:
c9:ba:75:3a:fb:2d:fe:c0:fc:cb:7d:da:e6:a6:dd:
ae:4b:c5:a4:0e:02:03:d0:a0:62:cb:6e:61:03:d6:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:7A:4B:6E:CE:58:94:A6:A2:3E:CD:63:34:D4:37:4F:E2:15:43
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.148.0/23
Signature Algorithm: sha256WithRSAEncryption
10:87:2d:c4:b6:56:0a:7b:0f:5e:8e:06:fa:e1:87:34:a2:39:
a1:30:a3:52:91:26:13:9b:58:88:5a:1a:b4:e4:bd:bd:55:8f:
9a:d0:0e:b9:dd:e2:27:67:8b:10:f0:5d:9c:06:35:31:9c:2b:
d5:20:97:67:b9:dc:f2:ca:f6:3c:e6:21:ae:8f:7a:61:6d:e4:
5f:4a:28:62:a2:6e:78:1e:a7:17:c1:b8:2e:f2:f8:ff:8f:e5:
02:3f:42:e9:06:9d:e6:d3:71:fd:d4:eb:28:46:31:a8:0c:ad:
a3:b8:f5:2c:ac:0b:1e:01:a7:5f:40:c0:44:6b:c8:4c:fd:d3:
3f:95:14:8e:5b:23:a3:92:46:73:b8:ea:54:87:f1:df:e2:60:
ca:c8:0d:63:b8:9d:73:3a:7e:41:db:c3:9b:a5:53:1c:7a:fd:
ca:b7:62:9b:74:56:f5:dc:7a:70:6a:92:1b:cf:83:cf:eb:3b:
b5:9a:41:ee:58:0d:1a:13:0a:dc:04:42:c0:a3:f8:04:db:04:
a5:aa:19:f1:b0:49:a7:aa:a8:ee:2c:55:b1:4a:36:c3:34:79:
5b:52:e3:3e:94:1c:5d:12:60:74:95:a9:87:24:f7:d2:99:8c:
b5:81:55:39:ed:b4:c2:26:fc:7f:8a:8c:9a:d7:ed:59:93:50:
d1:fd:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:11 2025 by rpki-client