Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa
File: N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa (raw, json)
Hash identifier: IAepQRK7ijnLHmjIcS6HiPXZXeTO8dWbShOBaF70B2w=
Subject key identifier: 37:E6:90:73:96:47:CD:B9:2E:BC:C7:4B:A3:64:D4:B8:80:7F:A1:CE
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 019421B1C9460B50447D3C42E9B16D25266E
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa
Signing time: Wed 01 Jan 2025 11:48:07 +0000
ROA not before: Wed 01 Jan 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205057
IP address blocks: 185.231.92.0/22 maxlen: 22
185.231.92.0/24 maxlen: 24
185.231.93.0/24 maxlen: 24
185.231.94.0/24 maxlen: 24
185.231.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c9:46:0b:50:44:7d:3c:42:e9:b1:6d:25:26:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37e690739647cdb92ebcc74ba364d4b8807fa1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:7e:31:54:56:df:2b:27:e6:eb:75:0f:35:
a1:49:c0:f6:71:ca:33:13:a1:b8:30:7f:ba:07:29:
88:5c:80:2b:f4:c2:96:e3:9f:b0:6c:af:6a:80:2c:
51:32:8d:91:fb:fd:e3:5b:bd:27:32:38:fc:ee:51:
8e:f0:7c:7a:c7:f3:cb:80:58:62:bc:63:30:73:40:
52:d6:f5:35:51:af:a8:e6:fe:4e:29:23:9f:2e:b3:
9f:6c:3b:5a:2e:78:51:f8:ba:a3:3a:21:8c:10:ff:
26:3c:3a:bc:85:63:05:3f:0d:4e:dd:3b:ca:88:df:
30:f1:fa:e6:14:9e:43:7c:f8:62:2c:e1:7d:2d:8b:
e4:2f:40:ef:01:44:ea:0c:47:af:89:de:9a:a9:ee:
dd:37:04:e8:2b:55:0b:0d:83:f9:00:08:95:f3:4b:
f8:fd:b7:e9:fb:1e:71:61:ec:c7:bd:32:d2:cf:7b:
a0:2b:e4:4b:85:14:89:c0:a9:75:3a:ae:3d:e2:9c:
e1:26:a8:ab:84:80:ca:42:f6:50:c1:ed:1f:d4:32:
64:07:5b:eb:71:c4:70:62:80:5d:f7:3b:9e:e5:63:
85:11:25:13:a3:ba:9e:af:40:b2:fe:d6:02:e8:f8:
2c:e3:33:c6:fa:dc:66:b6:3b:43:89:5d:bb:41:02:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:90:73:96:47:CD:B9:2E:BC:C7:4B:A3:64:D4:B8:80:7F:A1:CE
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.92.0/22
Signature Algorithm: sha256WithRSAEncryption
70:67:7e:c5:8b:2a:4a:1c:f9:72:b1:23:69:89:03:eb:93:18:
03:1c:f8:51:ec:6e:94:76:6d:54:38:55:92:9e:6e:eb:9b:b5:
b3:51:19:45:e2:fd:66:d0:94:b8:6a:43:96:bc:bb:12:f8:30:
62:18:07:00:c6:f7:23:3e:38:39:79:be:1b:35:21:57:2c:79:
d0:c2:70:d4:d0:c9:18:ef:a9:b2:93:3f:4d:ef:e7:58:01:49:
d3:c8:1e:09:a2:16:8f:ed:fc:f3:d9:4b:2e:ae:43:6b:7a:84:
90:33:0d:c4:fa:85:06:82:3f:12:43:a5:ef:d8:54:ac:4e:dc:
62:69:8c:b6:22:27:1e:b1:ac:64:64:50:68:83:c1:24:9e:cb:
7c:ff:58:ed:a8:7c:c6:30:3c:b5:78:ea:13:91:d4:8c:08:e0:
61:d5:06:e6:a0:2e:e3:c1:d5:d9:bd:fa:2b:a3:45:a8:97:3c:
51:d5:69:af:29:35:7b:35:fa:cd:c2:1b:58:90:12:b9:63:f7:
c9:24:1c:25:55:1a:9a:67:d7:a5:73:1a:68:1f:fd:3e:3b:79:
ce:41:75:5e:f7:05:bb:3c:8f:48:02:cf:30:57:a4:c6:91:e2:
87:e4:80:d8:69:d2:b6:fa:4e:62:ba:a2:7c:18:d7:49:8e:9e:
aa:d0:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:19 2025 by rpki-client