Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa
File: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (raw, json)
Hash identifier: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=
Subject key identifier: 21:09:78:1C:D5:CA:49:6A:2F:A3:4A:69:63:3B:06:9C:9A:B0:51:9D
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 0194258F4D73CA1C20D4262B3F3EE57A1399
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205877
IP address blocks: 185.203.168.0/24 maxlen: 24
185.203.169.0/24 maxlen: 24
185.203.170.0/24 maxlen: 24
185.203.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4d:73:ca:1c:20:d4:26:2b:3f:3e:e5:7a:13:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2109781cd5ca496a2fa34a69633b069c9ab0519d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:c4:b8:3c:76:ef:de:8d:d7:22:cc:78:d1:
02:92:eb:f7:40:49:ff:95:8d:fe:ad:44:a0:d1:b7:
d1:c1:ae:9d:30:c7:e7:e2:93:c6:18:d8:6d:8e:b5:
c3:0b:25:c8:ea:e1:09:06:46:58:eb:94:7f:9c:10:
2a:fd:c5:77:54:c8:0a:ef:da:69:61:be:65:0a:6d:
6f:b3:2c:ff:80:46:e1:4f:d3:e1:3d:5a:a7:ce:9f:
62:7a:97:bc:31:37:61:97:47:f6:f5:8e:00:cf:ea:
85:76:85:da:5d:af:07:5c:ba:8a:23:28:4f:80:94:
5b:1d:4d:89:24:f6:c1:80:aa:25:11:d3:e0:88:52:
2f:08:ea:18:93:cc:97:8f:71:f0:44:86:e2:9b:a7:
c9:20:cb:96:46:05:42:c3:e1:d1:81:6b:99:44:d7:
10:3d:dc:71:92:29:ab:bc:58:c7:96:b5:aa:33:49:
ce:61:08:2f:2e:81:92:8c:fb:4c:41:ef:13:86:ae:
4a:7e:68:fa:f4:8a:08:ba:8b:9e:e9:49:98:ba:9f:
4d:9c:bf:3f:23:9d:ef:a8:f7:df:95:b3:c6:8a:31:
37:60:d5:20:eb:73:34:cb:df:aa:4b:98:b3:93:2e:
bb:aa:e1:d7:fe:96:33:3b:ef:a3:f6:87:a5:f3:b3:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:78:1C:D5:CA:49:6A:2F:A3:4A:69:63:3B:06:9C:9A:B0:51:9D
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:af:26:4b:97:40:fe:45:96:04:16:0d:20:90:fd:0f:3c:3d:
c7:74:ba:ee:15:a6:56:1f:4e:f7:2a:ff:fb:68:51:03:16:e2:
08:54:7c:d6:e8:a2:3c:d4:53:42:11:5e:05:05:62:61:88:8f:
ac:06:50:6c:dc:01:f6:16:fe:d0:fe:9f:4e:80:cb:74:2d:ba:
2e:cd:63:22:f1:27:de:24:60:fe:da:f4:70:d8:45:24:56:95:
41:65:b6:db:ea:b3:68:b4:68:bf:71:45:de:63:02:a8:47:8e:
9e:48:76:2b:d4:03:fa:f5:3f:65:de:87:9c:92:95:90:13:f3:
4f:c8:c7:89:47:9d:d8:86:29:b7:ae:1c:4a:95:e4:62:79:f8:
09:68:ac:04:54:85:8c:f5:79:69:1d:12:1c:83:4d:4c:a1:d4:
58:8b:12:68:cf:6a:d8:8b:9b:8d:9d:80:d8:96:10:d0:24:19:
db:c6:a6:1f:15:be:ff:61:45:b1:35:c6:49:25:96:b5:fd:cb:
2f:da:8c:58:39:3f:5c:d6:66:4a:fb:78:64:82:8e:dc:52:d0:
24:91:b0:c1:ee:09:10:81:5d:2f:33:7d:9a:e7:cb:a8:b7:59:
cf:1c:d5:66:9f:bf:81:89:89:b0:77:93:7e:f3:59:7c:ac:29:
e3:81:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:12 2025 by rpki-client