Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/t1ORbdksbr2p1B59lFrh9IkJsfE.roa
File: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (raw, json)
Hash identifier: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=
Subject key identifier: B7:53:91:6D:D9:2C:6E:BD:A9:D4:1E:7D:94:5A:E1:F4:89:09:B1:F1
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 0194266B9EE6CE63EFB2D059E588D6182C3F
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/t1ORbdksbr2p1B59lFrh9IkJsfE.roa
Signing time: Thu 02 Jan 2025 09:49:34 +0000
ROA not before: Thu 02 Jan 2025 09:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202211
IP address blocks: 185.69.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9e:e6:ce:63:ef:b2:d0:59:e5:88:d6:18:2c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Jan 2 09:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b753916dd92c6ebda9d41e7d945ae1f48909b1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:d3:86:e8:b8:28:36:a5:5a:f3:e1:eb:2f:
3a:52:73:cb:4c:45:8f:3a:79:e0:61:d4:e6:97:03:
26:f9:bd:ff:15:91:69:23:f6:e0:51:72:2f:dc:62:
90:a0:a7:12:4e:f9:ec:ad:cf:f2:f8:ce:e3:f8:e6:
87:f8:55:94:4d:ab:3e:8b:e5:f2:f7:dc:a2:5a:a2:
9f:b8:87:98:7e:4d:d1:c6:59:bf:ce:b4:96:a1:38:
6a:8a:4c:49:e9:57:99:ed:1c:04:8a:ce:72:df:5c:
3a:57:bf:f2:4a:9e:2f:66:c4:e0:f1:14:fd:1e:05:
41:73:a3:f6:b0:1f:39:d2:69:5e:90:2e:56:82:e8:
73:c3:86:c2:02:5a:1a:60:36:7d:48:ee:d3:cb:77:
1c:10:2d:b6:55:8e:3c:06:75:b9:1d:aa:1a:0b:ab:
d7:f7:f2:4c:68:3a:cb:53:fd:18:74:f0:68:d9:51:
e0:99:e3:fc:6c:a5:92:ec:89:3a:4b:32:9d:ce:ab:
f9:c5:3b:86:74:6e:ab:f2:e0:b5:03:5f:7c:b5:7f:
6a:6a:53:cb:aa:de:7c:a4:b1:16:4c:75:e3:36:5d:
2d:08:cd:e6:16:5b:02:7a:34:ad:f0:f9:f1:19:62:
87:b4:06:5d:0e:c6:dd:44:c2:c7:30:ba:b4:16:a4:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:53:91:6D:D9:2C:6E:BD:A9:D4:1E:7D:94:5A:E1:F4:89:09:B1:F1
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/t1ORbdksbr2p1B59lFrh9IkJsfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:0a:9c:fd:32:8b:31:80:cf:72:35:04:59:a3:bc:87:97:16:
50:35:08:9a:16:54:cb:2f:b7:84:b9:2e:bd:4c:cc:2d:35:fa:
ea:ca:a4:2e:3a:2f:44:6c:c1:ea:2d:5c:db:1f:db:36:5d:9f:
e0:ae:0f:21:8b:92:cb:7e:1a:fa:1c:bc:c3:af:49:89:8e:4f:
6b:e0:0a:c0:77:b3:ef:9b:6d:63:85:65:67:9e:d5:9d:65:ca:
69:33:bd:a6:7b:1c:62:6b:b6:23:e0:67:30:38:2d:ed:57:fa:
08:60:cf:27:2f:6c:bd:e9:5f:e8:ac:19:36:34:af:bf:19:11:
4c:a2:b2:a4:06:e9:68:51:be:14:82:9b:b4:a5:2d:19:2d:37:
cd:15:58:f3:29:50:1c:5a:0d:b7:97:03:88:e4:a4:8c:bb:69:
d4:c8:66:ce:37:73:d9:fa:71:fa:26:e8:2b:cd:a9:80:d4:9b:
77:47:41:28:8d:86:59:de:1a:f8:d5:35:aa:98:62:c1:48:14:
df:b2:b9:0c:ec:05:cd:a9:50:d9:aa:e3:0b:ad:46:c0:62:8c:
82:f2:c4:5d:7c:67:14:6d:25:8f:25:bf:60:3f:5c:1f:00:c9:
4a:17:28:9b:1b:3f:1b:73:3f:85:b2:35:1a:84:2f:a2:66:ac:
39:5d:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:38 2025 by rpki-client