Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa
File: Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa (raw, json)
Hash identifier: FtyHvpwzr+fctqlndkuiTxqEdI3uy3i+5i35b5nlvso=
Subject key identifier: 56:ED:B2:F9:A6:57:65:45:1F:D7:0D:16:53:F7:75:2C:31:8C:0A:32
Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial: 019423D6D5DCA80C1944C2D94DC97BF87C87
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205944
IP address blocks: 185.250.96.0/24 maxlen: 24
185.250.97.0/24 maxlen: 24
185.250.98.0/24 maxlen: 24
185.250.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d5:dc:a8:0c:19:44:c2:d9:4d:c9:7b:f8:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56edb2f9a65765451fd70d1653f7752c318c0a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:62:82:5b:e4:30:34:e7:a5:4c:d5:b6:bb:
6c:a1:bf:c7:ce:fc:68:c1:ff:f2:7a:fa:35:73:19:
88:df:fa:a1:e4:66:6d:a3:87:92:59:b3:6c:b5:fe:
5e:ae:07:73:c3:76:4c:2c:32:e3:ee:26:5d:43:a1:
58:0f:a1:23:46:73:c5:d4:04:45:6d:6c:15:d5:a3:
7d:03:7e:8f:88:f1:89:78:a3:b4:b8:b7:b3:22:e7:
f6:60:71:d2:09:7d:65:6b:fe:c6:8f:b8:fb:de:53:
a2:58:80:e8:ab:92:c9:b1:6b:d7:6f:c9:fd:b4:34:
70:f2:3b:a3:b7:e6:d6:24:95:2c:38:bd:32:e4:a8:
14:eb:50:a0:eb:0f:67:89:75:59:1e:00:85:dc:0d:
d6:e2:57:46:69:92:94:f7:4a:ff:b1:65:d9:98:3b:
4d:94:7f:7e:e4:0e:0c:8f:39:3f:fe:f9:c2:c7:bd:
bc:f7:91:f3:76:a9:8f:52:93:b7:61:0e:fe:44:30:
55:c7:e4:56:25:ed:b9:4f:4e:1c:d8:8e:f0:0b:8f:
5e:0d:d9:fc:39:f3:ac:e7:44:37:f8:0c:04:65:c6:
89:25:ed:f6:b9:32:79:9c:6d:4d:91:d5:c3:55:b5:
38:15:5b:a1:90:6f:b6:d3:8e:25:96:f0:4e:d9:d3:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:ED:B2:F9:A6:57:65:45:1F:D7:0D:16:53:F7:75:2C:31:8C:0A:32
X509v3 Authority Key Identifier:
keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:93:4e:b8:9e:30:d2:5f:3d:76:a2:b5:69:5b:5a:04:7d:c7:
78:09:38:d3:64:f2:75:c9:eb:83:5e:3f:5b:b3:60:56:27:8c:
1f:c8:4a:c4:b2:16:41:f7:25:00:8d:9e:8b:02:a4:c1:4e:25:
c5:8a:dc:59:e4:39:5f:68:38:b1:d4:31:a4:f1:0a:97:f3:e9:
fe:14:1c:df:11:31:c0:6a:e5:3c:d8:77:dc:0f:3f:d0:59:a5:
ac:82:ef:49:ad:94:b8:20:c6:3d:4b:5d:e5:5b:3c:cd:ad:8a:
48:39:93:7b:e8:0c:0b:e5:9e:1f:aa:c3:66:25:2d:13:5a:93:
96:15:a8:c0:de:34:27:d4:7d:db:2e:d2:dc:74:94:aa:70:fe:
9f:07:99:0f:ce:e7:6b:14:cb:72:47:94:a5:cd:e4:45:2d:82:
14:fa:68:14:43:83:65:d9:47:5d:46:a4:7a:ed:22:96:d5:52:
d2:bf:64:ac:31:2a:86:eb:62:5e:3b:6f:c8:d9:28:1d:07:a6:
4c:ac:e9:7d:7d:fc:ec:c2:8c:0b:96:9a:aa:ca:b4:6d:e6:cc:
0b:83:95:60:a1:1f:e5:f0:29:30:ea:43:d1:a5:7d:95:d5:77:
e4:5e:6e:3a:58:e3:06:c2:ed:fc:3c:c8:1b:0d:56:2c:ec:76:
17:b7:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:03 2025 by rpki-client