Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/L11MObU2nfX5tH-1x602KEbM5GM.roa
File: L11MObU2nfX5tH-1x602KEbM5GM.roa (raw, json)
Hash identifier: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=
Subject key identifier: 2F:5D:4C:39:B5:36:9D:F5:F9:B4:7F:B5:C7:AD:36:28:46:CC:E4:63
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 0194228D4EFAB61A382E2C3A2FC4CD31CC11
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/L11MObU2nfX5tH-1x602KEbM5GM.roa
Signing time: Wed 01 Jan 2025 15:47:53 +0000
ROA not before: Wed 01 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204912
IP address blocks: 185.225.164.0/24 maxlen: 24
185.225.165.0/24 maxlen: 24
185.225.166.0/24 maxlen: 24
185.225.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:4e:fa:b6:1a:38:2e:2c:3a:2f:c4:cd:31:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Jan 1 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f5d4c39b5369df5f9b47fb5c7ad362846cce463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:d8:cd:7e:6f:16:90:7b:42:44:6e:06:49:
f2:7e:10:65:ec:8d:80:14:0d:8b:b5:08:c5:39:0b:
70:8f:da:d0:15:b9:df:51:5e:55:d9:23:b2:7d:8f:
fa:73:24:be:db:14:ef:38:59:51:72:db:76:7a:24:
7a:dc:cf:06:84:b4:ce:4b:31:51:0c:26:44:3a:7a:
74:91:26:09:17:22:00:68:a2:c0:73:48:9b:45:61:
ef:20:4e:de:30:79:fd:98:34:ad:32:94:21:f0:f3:
78:ac:cc:cd:98:73:9c:83:b8:44:81:df:72:b1:5c:
90:75:df:b8:40:26:34:32:49:c1:f3:9c:26:12:9c:
28:e2:25:73:a8:61:65:27:f3:cb:c5:06:09:fe:59:
c4:85:5a:0e:e8:3a:e7:7a:86:26:f8:7f:5b:c2:d9:
10:a6:92:af:44:9f:15:7c:f0:1c:46:02:50:42:c4:
f3:87:89:04:32:4c:4a:90:cc:64:0f:45:66:70:86:
ca:2b:da:01:19:7a:4c:5c:88:86:9c:cd:54:2b:63:
0e:10:ef:c8:34:48:91:f6:d1:9c:10:b3:3a:3c:cb:
76:9b:61:92:51:4d:00:c3:f0:ea:91:51:00:18:27:
2b:ce:da:43:e7:d0:69:93:c6:8c:49:a4:77:e8:60:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:4C:39:B5:36:9D:F5:F9:B4:7F:B5:C7:AD:36:28:46:CC:E4:63
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/L11MObU2nfX5tH-1x602KEbM5GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:e4:69:ee:33:53:db:50:05:a4:51:9f:e6:d3:c0:76:9d:aa:
4c:1c:49:be:28:63:20:a9:7b:a0:54:53:36:60:49:7f:32:69:
1e:67:11:3c:3f:f2:65:30:24:4d:b2:ca:97:1e:a2:8d:6e:f4:
2c:a8:53:dc:4b:fc:ec:7a:6c:6c:91:4c:90:3c:60:f7:57:e8:
82:d6:07:16:e0:66:40:9d:b6:48:8a:4c:d6:58:28:ab:77:df:
2f:fc:41:9a:60:40:95:e3:ea:91:88:ce:24:6f:61:04:4c:6f:
0d:3f:fc:e0:4e:a7:ad:b2:98:fb:23:63:e6:27:b2:88:4d:17:
40:c9:43:9d:30:e6:8a:3a:ea:f3:d2:3d:9a:39:81:97:b6:03:
76:58:b2:01:7f:2f:c8:fa:27:b8:ce:86:61:cb:6d:99:a8:85:
24:8f:7d:2e:d4:9c:74:e6:dd:f7:5a:06:55:36:4d:63:c8:8d:
7c:85:5a:34:99:a6:5a:1c:84:8c:74:94:2b:61:89:a2:62:4b:
9b:46:e3:38:4f:a8:74:43:03:31:49:84:fd:25:a4:1f:8d:f7:
03:78:e9:5b:d8:20:b5:dd:74:25:49:01:ea:d6:05:5a:e9:b8:
5d:f8:3f:00:fd:1b:8b:ae:19:b3:ce:e0:d8:34:77:84:1a:9b:
a1:1d:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:55:18 2025 by rpki-client