Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/ir1RS50i8n6-S2GFn7ZgzEJxgqk.roa
File: ir1RS50i8n6-S2GFn7ZgzEJxgqk.roa (raw, json)
Hash identifier: c+oT6rdCWtyUihO7r4CT9JSZ34sdZ4eqqblxSm+cQz4=
Subject key identifier: 8A:BD:51:4B:9D:22:F2:7E:BE:4B:61:85:9F:B6:60:CC:42:71:82:A9
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 0194252175571C359BB7875ECEBD8782547C
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/ir1RS50i8n6-S2GFn7ZgzEJxgqk.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198089
IP address blocks: 185.98.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:75:57:1c:35:9b:b7:87:5e:ce:bd:87:82:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8abd514b9d22f27ebe4b61859fb660cc427182a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:2f:1d:f5:29:ea:c6:d3:1d:f8:2a:a4:c6:
01:20:44:ec:a0:87:9a:d4:90:ce:fe:fd:58:32:fe:
18:72:b2:d5:7a:a7:6d:38:13:a2:73:0c:2e:88:d3:
bc:b3:c5:57:e9:d4:13:a7:11:c3:da:52:6d:7f:37:
f3:79:4d:8a:10:aa:f4:4f:f8:94:82:a9:18:6c:fe:
b8:d8:f4:85:fd:b7:bb:d9:60:ed:0c:29:6b:60:f2:
53:fa:7c:b5:07:b4:80:79:fe:9a:9c:94:5b:f6:05:
3f:da:d1:d0:f3:30:6e:fe:6e:67:71:9d:07:af:d2:
d7:bb:34:b3:23:2d:5f:c8:17:58:a9:fc:4c:c8:29:
d5:13:43:52:c6:61:85:18:83:5a:da:88:2f:6c:29:
ef:16:bd:d5:60:9f:21:46:6e:54:fd:39:1f:e1:eb:
ce:5c:66:ae:8d:3a:01:6b:31:d3:93:f4:d3:b9:f2:
40:53:ef:86:9d:c3:e0:ef:d7:f6:63:f8:ed:ef:a5:
69:f6:d4:16:09:01:50:07:e1:35:01:9e:85:4b:87:
c5:d8:b7:43:41:24:a3:91:cf:af:c1:15:87:e6:96:
cf:fa:66:a6:4e:31:ca:2a:b9:03:ed:7c:5c:33:fa:
d5:99:2b:6e:7d:ab:cd:70:45:ef:bf:f5:6e:00:8f:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:51:4B:9D:22:F2:7E:BE:4B:61:85:9F:B6:60:CC:42:71:82:A9
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/ir1RS50i8n6-S2GFn7ZgzEJxgqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ac:ca:48:0f:35:6b:7b:7e:f7:02:d5:76:34:da:a6:0a:ca:
a1:76:8f:e1:7d:e7:dc:be:53:bb:75:dd:74:52:b3:2b:f8:c3:
22:73:22:94:3d:94:ed:d3:10:f0:a3:a0:8b:84:d3:74:6c:8e:
82:33:55:45:f4:17:3b:d9:43:d5:62:39:eb:e9:61:7b:51:f0:
0b:fc:ed:66:4e:d8:be:08:af:c2:d8:b2:63:36:f5:09:7b:c5:
67:23:c0:26:ea:6a:39:8d:4c:97:38:51:4e:e7:07:89:f7:27:
11:51:68:d3:8b:4e:43:74:88:a1:90:29:7f:f7:d2:7f:50:f5:
a0:cf:f0:3a:a5:ea:8a:c9:7c:b5:d7:88:30:f0:eb:85:cc:3c:
0f:3f:62:6f:36:2b:6a:67:ec:e2:17:6d:8c:ab:80:9b:97:6e:
40:49:5a:89:cb:10:07:59:2b:10:34:ef:84:17:f2:36:5a:0a:
cb:c9:02:73:fd:3b:f9:be:a6:39:7f:10:90:ec:99:a0:25:f9:
30:0a:10:aa:3d:71:57:60:fc:76:8f:31:6f:90:5b:dd:75:80:
08:fe:4e:0e:e2:b0:d8:c2:37:4a:49:18:ba:d6:17:b2:92:01:
cb:61:2f:fa:e7:ef:fe:bd:26:b7:65:bf:c4:4a:ed:e8:24:8c:
ad:3e:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:44:57 2025 by rpki-client