Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/DjJbJVK4ViblB5hs7VL09DEef2k.roa
File: DjJbJVK4ViblB5hs7VL09DEef2k.roa (raw, json)
Hash identifier: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=
Subject key identifier: 0E:32:5B:25:52:B8:56:26:E5:07:98:6C:ED:52:F4:F4:31:1E:7F:69
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 019426D9459540187557DF5B8FD1E2888D6F
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/DjJbJVK4ViblB5hs7VL09DEef2k.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197033
IP address blocks: 185.149.216.0/22 maxlen: 22
185.232.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:45:95:40:18:75:57:df:5b:8f:d1:e2:88:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e325b2552b85626e507986ced52f4f4311e7f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:2c:96:0f:4a:2e:ab:ed:80:dd:a8:c2:aa:
36:c1:9d:f1:18:b1:b5:fc:8b:7a:ce:99:c0:33:6c:
a4:d4:bf:9a:a2:aa:d2:a7:89:f3:4d:25:fc:d4:a1:
84:8c:80:7f:59:8d:0a:b0:6d:a0:b5:b7:60:6d:76:
c2:9e:15:18:ca:2c:31:3f:c0:91:6d:26:fb:17:42:
89:27:e7:a4:00:cb:68:84:5b:30:34:24:24:24:be:
c4:d6:7c:a9:a5:7e:11:bd:c7:27:4c:a7:52:ae:56:
f9:f4:91:58:d3:10:05:40:fb:18:9b:bd:de:c0:26:
74:04:d6:e1:d5:b5:69:83:1d:89:cb:c1:ee:54:16:
80:fe:03:26:d3:8d:02:e4:5a:c4:15:a0:df:55:7b:
87:c6:79:0e:30:b3:10:ad:da:60:a7:74:f1:5a:48:
fe:0a:20:43:3e:8d:84:de:32:09:b8:6d:44:36:f9:
8b:94:b7:87:46:ce:92:b9:89:11:d5:a6:e0:a3:41:
1b:7b:04:30:e4:9e:98:45:c0:7c:1a:4f:8a:1f:9f:
d6:e1:f5:69:10:ff:47:8c:8d:3f:37:8a:3f:23:70:
3c:02:66:52:ea:35:26:3a:88:c3:49:bc:c9:d4:1c:
66:2c:ca:bf:9b:25:6b:99:ae:83:c1:d1:eb:fc:6d:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:5B:25:52:B8:56:26:E5:07:98:6C:ED:52:F4:F4:31:1E:7F:69
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/DjJbJVK4ViblB5hs7VL09DEef2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.216.0/22
185.232.24.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:1d:f6:0b:11:0d:50:0a:d9:66:b5:ef:fb:15:5c:2c:31:3e:
98:da:10:22:ea:ba:f6:16:0e:e9:59:b9:0a:54:b0:e7:03:0e:
8a:95:9c:00:a4:e1:a2:46:e0:86:8b:66:13:54:50:d1:c3:bb:
02:ad:3a:cf:65:7a:9a:f6:e8:9e:55:7b:f4:37:35:bc:a6:8f:
d2:74:d1:98:ed:9e:45:d8:6b:75:ca:b9:7c:83:5b:14:17:f0:
45:1c:ac:99:50:69:d2:fe:db:32:5d:fc:56:dc:7b:6b:66:e2:
6b:22:8b:48:a9:ec:7c:6a:57:c7:e7:95:49:36:fc:14:8c:ad:
5e:35:31:22:08:dc:ae:8f:03:d9:be:e2:4b:f3:4f:f8:19:6f:
65:97:0f:10:4d:74:79:1e:7c:93:0c:9d:a4:b5:ea:d8:37:46:
7d:5c:2b:97:41:71:42:3c:10:ec:73:84:e9:f7:f0:c2:78:72:
1b:b6:34:39:10:7e:9c:dd:0c:7d:c0:b3:5b:a6:b2:cf:d6:38:
7b:59:de:2c:23:ce:d2:53:e8:3d:11:f4:dc:8c:89:80:70:bd:
51:07:b4:99:fa:36:c5:35:53:e7:b0:70:84:9c:bc:b6:13:b2:
e8:83:d6:88:a2:98:9b:b2:12:f2:34:e7:ae:48:a1:b3:3f:8c:
cb:43:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:02 2025 by rpki-client