Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/ESRRBuPxkFpgbvZAxR8IDZJapd4.roa
File: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (raw, json)
Hash identifier: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=
Subject key identifier: 11:24:51:06:E3:F1:90:5A:60:6E:F6:40:C5:1F:08:0D:92:5A:A5:DE
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 019423D71974B1A40971B47D640A83B9F520
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/ESRRBuPxkFpgbvZAxR8IDZJapd4.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59510
IP address blocks: 185.1.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:19:74:b1:a4:09:71:b4:7d:64:0a:83:b9:f5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11245106e3f1905a606ef640c51f080d925aa5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:0a:2d:11:eb:48:f4:22:2a:69:58:ae:0e:
84:ad:87:0d:58:e5:a3:aa:e3:a9:4d:7b:bf:39:7f:
97:2c:c4:39:30:ef:b0:d7:9b:f8:de:88:af:c8:08:
db:01:a3:0c:c7:1b:2b:0e:8b:e4:16:ab:d5:db:32:
c0:b4:7f:64:f3:75:6a:92:83:a4:49:86:01:40:e7:
53:ee:21:df:7f:db:ba:69:ec:e6:32:c3:f3:d6:17:
e0:c4:bd:69:98:47:f8:00:d4:8b:79:2c:47:a5:af:
ba:01:c4:9b:75:aa:1c:4f:ec:c6:bb:cc:68:35:55:
d2:98:6f:ef:5d:56:f0:fb:ea:1e:2d:63:1c:3f:7a:
f0:1b:b8:54:5d:9f:c0:67:e7:c8:ad:29:ee:90:19:
ab:6a:3b:a1:94:c4:29:1e:b3:a2:46:b1:39:c3:c7:
bf:72:15:9d:64:d1:d2:ab:d3:04:02:34:7e:f1:19:
7f:35:d6:c7:79:25:26:f6:a9:30:e9:fd:71:0f:9c:
d8:db:25:b0:7a:fc:7f:6c:79:87:f3:0a:94:6e:83:
39:e4:33:bf:30:e2:c7:42:92:f9:ac:cc:1e:2c:f5:
cb:ad:e6:0f:4d:24:cd:3d:92:10:e7:20:82:64:e1:
68:8e:7e:d4:40:3a:ea:6a:bd:d2:f7:b8:50:0a:cd:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:51:06:E3:F1:90:5A:60:6E:F6:40:C5:1F:08:0D:92:5A:A5:DE
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/ESRRBuPxkFpgbvZAxR8IDZJapd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:aa:23:40:88:f1:c1:80:ef:8c:6a:e2:91:83:ed:10:0a:dd:
7c:52:5e:b8:16:21:0a:58:dc:c6:b2:93:d1:0a:9f:f2:a4:f1:
a3:19:db:5d:47:db:7b:5a:6d:c6:73:c7:cd:48:06:e9:05:6d:
54:80:d1:48:fc:32:7d:7f:f0:c9:77:c5:92:52:a8:63:78:1f:
96:d5:c2:05:50:bf:6b:a5:10:ad:a3:c8:8a:28:7c:9a:28:63:
f6:3f:ee:46:9f:dd:fb:ef:ca:fb:94:5c:74:80:9c:0c:38:45:
48:db:80:38:42:b9:19:18:52:84:f3:d5:2d:08:6c:30:d6:8b:
66:67:20:b6:09:1d:22:c1:00:80:e9:37:c8:3b:d2:12:45:ae:
fa:fe:0b:79:34:b0:e9:b8:ae:a2:4c:3a:cf:8e:79:de:d5:56:
ff:c4:16:3f:87:9a:6d:f0:b7:8f:c1:7b:5e:02:1b:e7:d3:20:
bd:86:4c:c9:6f:f0:9b:a8:0e:c7:2f:4a:82:f7:83:e0:7a:60:
46:68:5e:a2:8f:53:f1:0c:2e:84:3c:cd:ca:73:d3:76:c4:91:
49:0e:6e:03:80:9d:86:0a:d4:71:66:9d:87:77:01:23:71:7d:
6c:db:be:ea:be:5d:81:4b:5d:e1:62:90:8e:21:25:cd:2b:ef:
aa:cc:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:02 2025 by rpki-client