Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/cisW_uPMTWGjpMgFOVf9HNh_jYk.roa
File: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (raw, json)
Hash identifier: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=
Subject key identifier: 72:2B:16:FE:E3:CC:4D:61:A3:A4:C8:05:39:57:FD:1C:D8:7F:8D:89
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 019423D6EB03DE881ADF723C4F860B8F7368
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/cisW_uPMTWGjpMgFOVf9HNh_jYk.roa
Signing time: Wed 01 Jan 2025 21:47:54 +0000
ROA not before: Wed 01 Jan 2025 21:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202894
IP address blocks: 185.149.248.0/24 maxlen: 24
185.149.249.0/24 maxlen: 24
185.149.250.0/24 maxlen: 24
185.149.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:eb:03:de:88:1a:df:72:3c:4f:86:0b:8f:73:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Jan 1 21:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=722b16fee3cc4d61a3a4c8053957fd1cd87f8d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:3c:55:ac:5d:7e:32:58:31:d9:74:68:78:
2b:5d:4b:f7:d1:9f:7f:02:8d:23:9a:9e:b6:b0:4b:
fb:50:ca:a1:9c:77:e1:fd:27:dc:ac:9b:5d:95:98:
65:a3:5b:15:82:3d:3e:dc:f7:7a:b9:d8:94:02:7e:
72:dc:98:0c:09:bf:23:47:b1:74:77:e1:24:97:fb:
f5:fb:d4:e5:6d:62:d6:a8:dc:20:51:ab:80:2f:8f:
7b:9c:69:27:e9:d8:2f:da:fa:16:4b:13:00:5b:e2:
fa:8b:a9:ca:3a:4c:04:3c:5e:3f:26:8b:f4:68:78:
a9:3e:65:2d:f2:16:ef:23:cd:42:e5:04:0f:cb:bc:
57:db:4f:3a:3d:82:b3:24:57:f5:83:67:9d:16:b7:
99:fb:69:90:94:d3:ae:9c:de:97:0f:17:fd:dc:a8:
55:2a:84:4e:e4:61:7b:50:27:82:16:ae:de:70:49:
fc:56:df:5e:99:0e:e0:e1:26:15:29:6e:09:79:58:
ea:f6:4c:0a:fb:af:86:8b:e8:fb:d1:5e:66:94:ee:
df:af:2d:49:68:f1:21:5e:4b:e3:26:ef:cf:fa:c4:
28:6a:3d:24:b3:04:b8:95:f4:23:5c:41:6b:f3:f3:
83:7c:26:22:6d:93:0c:85:a1:a7:6d:7f:34:1a:38:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:16:FE:E3:CC:4D:61:A3:A4:C8:05:39:57:FD:1C:D8:7F:8D:89
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/cisW_uPMTWGjpMgFOVf9HNh_jYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.248.0/22
Signature Algorithm: sha256WithRSAEncryption
79:55:a1:1b:a3:86:70:e4:bf:4d:60:14:b8:22:95:ee:fe:0e:
3c:02:a0:2c:af:63:07:50:02:43:ee:11:91:64:33:d1:0b:a0:
b1:60:ab:75:e1:b7:4f:0c:c2:00:4b:d8:5b:03:2d:22:82:73:
d0:38:00:30:27:f3:ff:5f:19:a4:fb:be:5d:d1:b5:5c:a0:a9:
34:87:bd:fa:06:75:77:a9:47:5f:dd:dc:28:56:de:f9:80:59:
e6:d1:ec:48:f1:32:17:16:db:d6:ce:da:18:94:69:6a:f8:e4:
2f:9b:bc:d6:1c:f9:ac:d9:fd:fd:9f:e7:84:56:48:90:1e:7b:
8e:16:b7:de:85:84:5f:05:ea:24:8f:66:fc:a4:ed:70:d5:d8:
42:e7:08:7c:45:6e:6b:84:7a:07:b2:3e:0b:87:0f:f6:4b:e7:
fb:0e:ed:e4:de:62:05:5e:de:f0:0d:e7:4c:07:4f:10:c3:98:
de:fa:bd:8b:04:8d:87:43:d7:e8:15:ef:2f:2b:17:a0:4d:3c:
02:63:0d:55:84:35:0e:59:a3:a0:39:c3:a6:48:be:b3:cb:41:
98:65:5c:93:55:50:9d:d5:b5:c2:ff:f0:95:ad:eb:ff:a5:06:
89:a6:a5:f8:55:55:d6:9e:92:a4:54:37:4a:1c:94:1b:27:cb:
fa:63:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:21 2025 by rpki-client