Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Riil2cG6mZHtf8If-VesRb5NGdQ.roa
File: Riil2cG6mZHtf8If-VesRb5NGdQ.roa (raw, json)
Hash identifier: VFDRCQZtsglwrIQa3xlP8lpJMva0IgxFWl2hd1DTx4c=
Subject key identifier: 46:28:A5:D9:C1:BA:99:91:ED:7F:C2:1F:F9:57:AC:45:BE:4D:19:D4
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A3218D9263CD57FF48F56764CAACB
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Riil2cG6mZHtf8If-VesRb5NGdQ.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206198
IP address blocks: 84.245.88.0/23 maxlen: 23
85.248.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:18:d9:26:3c:d5:7f:f4:8f:56:76:4c:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4628a5d9c1ba9991ed7fc21ff957ac45be4d19d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:ec:20:1f:93:06:9d:75:c8:66:5e:55:c5:
31:3e:75:c2:a4:08:70:c1:7c:54:ef:2e:0c:e3:9a:
e6:5f:1e:08:5c:35:fc:33:6e:0f:2e:94:3f:21:8a:
75:97:b6:dd:be:a5:30:b5:17:21:33:34:5c:cb:87:
00:f9:26:ac:38:6d:7b:56:67:1b:2b:22:bf:b5:99:
bc:a1:f5:48:bb:6b:c5:f2:90:a9:0a:65:20:25:94:
c4:e1:18:3f:20:09:d1:90:b1:99:33:fa:05:23:ba:
18:ee:36:1f:cd:69:d6:cd:1c:5d:b2:77:e2:e8:36:
95:ea:d2:04:3f:72:43:d9:66:b0:e2:84:d7:26:e3:
bb:d0:e0:71:fa:d0:92:d5:91:2d:58:55:ae:0d:46:
23:19:46:72:af:cb:5f:ed:b5:24:40:79:df:fe:c8:
5a:2f:c9:55:a2:72:88:67:ee:f2:8b:e8:52:16:87:
2c:2f:ad:4d:b8:b5:6a:9f:b3:dd:49:79:01:98:ab:
1b:ae:e0:fc:c3:65:3f:dd:36:b7:97:0b:4a:0d:bc:
d7:11:a9:f3:3f:cf:58:92:84:63:0e:84:f4:a1:f8:
78:16:d2:5b:52:ab:f7:b0:00:54:65:d0:df:35:e4:
49:a0:79:0c:ea:cd:05:dd:19:f2:5d:2a:8a:19:9a:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:A5:D9:C1:BA:99:91:ED:7F:C2:1F:F9:57:AC:45:BE:4D:19:D4
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Riil2cG6mZHtf8If-VesRb5NGdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.88.0/23
85.248.24.0/22
Signature Algorithm: sha256WithRSAEncryption
45:74:e9:9d:aa:da:96:35:3c:82:af:d9:f2:f1:62:16:9c:16:
d0:24:fb:86:fe:ab:17:59:0a:5a:43:80:b3:17:ad:60:71:6f:
c7:48:3b:93:08:15:a1:3e:c1:69:fd:06:62:e2:2c:d3:1b:f8:
69:7a:48:68:f7:02:da:42:b6:1b:23:86:f5:23:c0:3a:d7:19:
4d:be:06:1a:41:9c:d3:92:dc:7d:8d:db:c9:74:83:c4:f2:3b:
20:d9:00:1d:af:d4:3d:60:bf:a7:8f:1f:42:f3:7f:a7:78:16:
5a:c6:81:3b:1c:fc:7d:dc:ab:9e:d6:a6:e4:ec:43:88:75:5d:
4e:75:cd:b5:25:05:2d:1d:13:19:99:fa:c0:c0:0c:1a:bc:ed:
f7:d3:5b:a3:c9:e4:1c:86:06:5a:b0:6f:df:bb:3b:7c:de:bb:
50:69:f5:ef:14:db:59:75:33:e3:86:a2:3d:a2:6c:1d:95:47:
48:df:87:15:bf:30:60:02:90:2d:35:a3:8b:06:14:2b:3f:45:
24:a4:99:3d:a8:45:96:de:03:29:c9:12:b0:7f:d4:c9:51:d6:
ab:03:19:53:f2:2c:db:e2:4b:30:2e:68:9c:16:d4:f0:80:60:
9a:76:0d:2b:33:81:38:51:b3:81:af:bd:4b:86:b9:67:7f:f1:
5b:b9:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:59 2025 by rpki-client