Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa
File: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (raw, json)
Hash identifier: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=
Subject key identifier: 5F:60:CA:C4:78:14:D2:92:49:EE:5D:11:48:06:5E:C4:94:38:CA:4E
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 01942445858C10A2C288843A4C2C23851FFF
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199455
IP address blocks: 185.4.116.0/22 maxlen: 22
185.4.116.0/24 maxlen: 24
185.4.117.0/24 maxlen: 24
185.4.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:85:8c:10:a2:c2:88:84:3a:4c:2c:23:85:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f60cac47814d29249ee5d1148065ec49438ca4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:51:c0:c7:0e:02:56:5a:1d:d5:4f:ec:e4:00:
09:85:7f:b3:1f:d6:4b:af:f0:97:1f:2e:57:cd:c5:
c7:1d:40:40:ff:de:c6:2e:de:e0:1f:c8:de:81:46:
60:d4:0d:1f:ee:ea:f9:4f:9a:f0:92:93:60:94:39:
7e:e3:30:17:c1:1e:9a:e8:3f:48:7e:22:8a:3c:42:
5a:90:24:3b:a7:10:4b:52:e9:78:6b:4e:79:eb:45:
65:50:1a:a4:0f:28:d2:25:b0:79:40:65:11:7a:78:
fd:87:2b:67:a6:81:6b:59:c3:1f:32:ab:14:f1:d5:
78:bd:9c:92:08:35:e6:46:65:ed:71:0d:45:46:03:
92:60:0e:44:fc:2d:77:9e:92:ee:b2:6e:52:96:30:
1e:7c:86:f0:c5:8c:e9:af:6a:4b:f8:e6:a9:70:79:
63:73:10:db:79:cc:86:85:9d:34:c7:d5:39:37:87:
2b:36:ac:2e:67:b1:5e:2c:ac:fd:3b:05:f4:00:b5:
8f:9f:c1:1d:65:a6:d3:a5:11:64:b8:40:64:b9:bf:
3e:63:05:d0:3a:a6:d0:4c:8a:01:12:69:9e:f0:02:
c9:92:21:a2:bd:62:e3:4c:f4:36:08:19:e6:8a:79:
23:68:d8:3e:4b:e6:f8:50:09:fe:fc:28:64:b7:a6:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:60:CA:C4:78:14:D2:92:49:EE:5D:11:48:06:5E:C4:94:38:CA:4E
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.116.0/22
Signature Algorithm: sha256WithRSAEncryption
19:46:de:87:af:e4:c7:11:59:0b:5b:46:77:db:49:32:71:64:
c3:7e:52:bb:f1:3a:a4:70:ee:b0:c6:33:44:5d:1a:3c:d2:76:
f5:dc:0a:a8:25:2c:9d:86:00:4e:81:42:51:e9:8a:b8:cd:09:
3f:36:1b:bd:d3:49:1a:a2:13:4e:8e:a1:3b:cf:64:93:4d:a2:
6c:fa:b5:36:10:00:04:32:4b:e1:89:24:d3:c9:5f:91:b8:1c:
c6:3e:c6:66:28:c3:cb:c3:8f:32:ef:3d:ea:c8:c4:1f:a5:d7:
6f:08:8c:74:c4:6c:f7:d6:99:72:16:49:fe:84:9e:9d:e8:8a:
a4:e8:e9:3a:27:6a:64:33:37:71:4f:2e:62:2d:7e:31:bd:94:
b4:c9:13:cf:fc:7b:eb:a7:84:61:e9:c0:01:99:7b:78:94:d9:
9b:fa:0b:98:e1:f9:a0:53:43:bc:90:e0:27:60:fa:18:3e:c2:
6b:b0:bd:31:9a:4c:35:c1:73:4a:06:00:b3:22:82:b1:7c:21:
e7:51:6e:4e:c7:c1:1d:1d:08:df:6f:39:8c:c3:50:51:ac:42:
76:1c:e5:f7:16:fe:82:94:ea:aa:44:6e:c9:3e:89:32:37:04:
e7:d2:c4:e2:e1:74:11:b9:89:0e:87:f9:54:84:a8:c8:62:e8:
9b:cc:41:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:58 2025 by rpki-client