Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/by1TgAx4hrtTz7uWAEk79-VVTJs.roa
File: by1TgAx4hrtTz7uWAEk79-VVTJs.roa (raw, json)
Hash identifier: X41Ff9+/jE9hdX58NTuSaIYDfgJkUlcWlA+qHpWSACc=
Subject key identifier: 6F:2D:53:80:0C:78:86:BB:53:CF:BB:96:00:49:3B:F7:E5:55:4C:9B
Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial: 019421B1D4AEBE11BF70609791526BF2AF83
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/by1TgAx4hrtTz7uWAEk79-VVTJs.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211320
IP address blocks: 185.26.138.0/24 maxlen: 24
185.26.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d4:ae:be:11:bf:70:60:97:91:52:6b:f2:af:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f2d53800c7886bb53cfbb9600493bf7e5554c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:95:79:d8:7c:97:5d:40:27:d4:25:ba:d5:
12:9e:0a:10:54:dd:ad:ec:e1:88:38:41:2d:02:33:
3f:8d:60:78:ca:fb:fa:af:2b:69:96:40:14:19:c5:
dc:60:05:cf:fa:25:f0:dd:c3:b9:de:1c:ca:78:12:
6b:63:bb:59:fe:b5:9e:20:bb:70:5b:4a:b7:f1:c8:
1b:e9:35:4a:eb:21:d8:81:5a:84:42:4f:27:00:60:
4d:a6:13:5b:f5:b0:68:b8:ff:d9:96:39:dc:28:64:
33:77:53:6e:b6:2a:51:8e:bd:24:f3:6d:3c:b5:70:
75:e5:d7:79:4a:84:9d:2c:0d:90:34:af:c8:a5:6c:
d7:6f:aa:94:52:ff:ad:48:67:3b:7c:3f:91:2b:8e:
50:03:88:6b:bf:0c:ce:02:a4:ba:20:38:b0:1c:e0:
cc:7c:1c:63:49:fe:87:7d:96:fd:ca:b7:b5:cf:55:
9a:b1:2b:6c:b8:2b:ab:84:1d:d4:19:07:c1:b4:5e:
9a:8d:dc:51:01:9d:5f:3c:91:9a:e7:65:1d:24:51:
93:75:2c:8c:73:52:b9:0f:d5:44:0c:89:88:c5:35:
6d:19:0d:0f:c5:98:25:74:7e:ae:44:c7:71:98:e5:
6c:4d:48:6c:c5:31:71:f2:31:60:c1:b0:f8:02:cc:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2D:53:80:0C:78:86:BB:53:CF:BB:96:00:49:3B:F7:E5:55:4C:9B
X509v3 Authority Key Identifier:
keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/by1TgAx4hrtTz7uWAEk79-VVTJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.138.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:1d:40:51:c8:cb:8c:c8:60:e1:0a:14:38:bf:c4:67:d9:f9:
85:5b:29:29:10:a1:e9:41:19:73:ac:84:10:62:66:dd:b0:03:
e0:34:66:d6:89:9a:26:b6:f9:b1:ff:09:82:3c:0e:4a:7b:a6:
e9:c6:ef:a5:e5:20:af:25:43:99:8e:82:e2:8f:57:c5:1b:7f:
6a:4e:e8:6a:6c:26:64:e3:02:b7:90:08:30:6f:bc:89:91:9e:
ea:50:c8:46:8c:d2:68:2f:a7:16:74:c3:b1:41:af:54:8a:a8:
48:0f:2b:8a:72:9d:cb:c8:a7:43:54:8e:9f:62:64:ef:c9:a9:
a5:f0:2f:3d:c1:05:44:14:3c:b0:89:15:b2:c9:27:b3:0e:2d:
07:65:dc:53:ce:8e:e4:e6:d7:ab:85:ba:18:69:4e:39:26:b5:
2a:12:d9:21:5e:ec:ec:76:73:85:7a:5b:fd:76:1d:f0:4a:6f:
81:f1:3a:65:18:6f:12:61:8d:14:76:90:9d:35:65:f4:f6:b8:
2c:44:f7:e3:a1:6c:fc:1d:75:89:1a:94:88:b2:27:d7:22:1a:
37:ca:df:18:15:51:89:f3:71:a5:1b:86:4b:eb:ed:f5:1e:e7:
06:fd:2e:4e:73:f9:4c:03:64:34:d8:c2:c3:10:44:c4:db:d1:
1a:39:df:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:07 2025 by rpki-client