Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/FrqlWltvg2IIueyy45ogVbfzXOI.roa
File: FrqlWltvg2IIueyy45ogVbfzXOI.roa (raw, json)
Hash identifier: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=
Subject key identifier: 16:BA:A5:5A:5B:6F:83:62:08:B9:EC:B2:E3:9A:20:55:B7:F3:5C:E2
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 019424B2AAE81769EF670C4E5E4475956769
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/FrqlWltvg2IIueyy45ogVbfzXOI.roa
Signing time: Thu 02 Jan 2025 01:47:56 +0000
ROA not before: Thu 02 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59666
IP address blocks: 185.51.208.0/22 maxlen: 22
185.51.208.0/24 maxlen: 24
185.51.209.0/24 maxlen: 24
185.51.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:aa:e8:17:69:ef:67:0c:4e:5e:44:75:95:67:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Jan 2 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16baa55a5b6f836208b9ecb2e39a2055b7f35ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:65:2d:f8:42:a9:35:7d:f3:91:e5:dc:09:
60:3b:98:d3:cc:14:de:03:82:34:35:b3:57:7f:a9:
2f:2e:57:d3:d7:aa:de:e0:21:05:77:c2:bf:bb:2e:
ed:a5:fd:04:37:ed:c9:c9:2e:9e:f3:92:13:ba:5d:
ad:72:af:e9:b3:57:e7:13:a1:aa:cd:ec:b0:c9:4e:
88:31:9e:14:3f:cf:a6:f1:13:67:d8:ee:c2:4b:6a:
36:8c:30:d8:fd:0a:16:0e:b1:10:8b:36:0f:c3:fe:
a1:69:76:2a:2a:e8:e9:1a:95:29:46:48:7d:08:20:
6f:92:34:d0:c8:42:53:3b:68:0f:97:90:74:e3:ba:
28:0f:13:e4:43:01:37:f0:99:17:a5:b6:99:47:52:
51:29:56:c7:52:02:c2:b8:35:26:63:df:65:88:74:
bd:76:78:c4:1b:dd:77:da:c7:c1:47:96:62:d0:a9:
20:59:9a:f0:a6:f6:a9:55:22:95:ad:2e:19:92:18:
23:7d:a0:6a:c1:63:9a:5c:67:68:66:53:48:eb:4b:
d5:9b:fa:c0:90:69:ab:9f:ff:78:43:73:3b:26:28:
c1:02:bd:28:48:09:77:d9:1a:3d:f6:89:a1:ca:c0:
ec:06:1b:72:21:df:d7:08:28:56:82:08:90:25:d2:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:A5:5A:5B:6F:83:62:08:B9:EC:B2:E3:9A:20:55:B7:F3:5C:E2
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/FrqlWltvg2IIueyy45ogVbfzXOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
20:6b:28:fd:9f:a3:65:4f:9e:f4:01:79:3b:22:84:a7:29:b5:
3a:5d:b0:06:89:ca:f3:0b:29:0f:28:13:98:26:ba:1a:e0:57:
98:85:02:a2:71:72:22:53:39:93:2d:f8:8e:70:3a:11:89:67:
1c:c0:c6:63:22:0a:4d:89:8b:e2:f7:64:1c:60:36:d1:f7:9c:
bd:ce:e3:8d:0f:9d:df:4a:26:54:95:27:c8:f0:4f:60:ef:62:
85:74:a3:da:87:a6:6b:19:2a:2a:32:db:c8:9a:0e:73:a5:6f:
c0:17:f2:02:11:e3:d4:1b:e9:50:75:72:82:ae:92:b3:52:92:
c9:47:bc:bb:69:5c:3e:9b:b7:ab:a9:58:5d:2f:d9:c8:36:96:
e2:b0:98:af:43:0b:5e:1d:a0:6c:ff:ec:c9:37:bd:8e:2c:ae:
2e:45:25:25:82:d3:07:48:bb:8b:27:c5:36:ad:21:1f:84:48:
87:50:b6:7b:75:18:94:a1:e0:58:b4:77:82:c7:b4:78:60:bc:
d4:5a:fd:a1:14:e6:10:ba:8c:98:1f:c9:a4:4f:1f:d7:6c:68:
52:c4:60:d7:24:4e:71:4a:0c:fd:52:20:c8:45:03:c1:91:da:
38:de:a4:89:a3:e4:b1:5f:14:06:2e:4e:92:3f:61:cc:da:84:
b3:85:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:37 2025 by rpki-client