Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/gNsZz63lZz-xYYJApJes6zZtWTc.roa
File: gNsZz63lZz-xYYJApJes6zZtWTc.roa (raw, json)
Hash identifier: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=
Subject key identifier: 80:DB:19:CF:AD:E5:67:3F:B1:61:82:40:A4:97:AC:EB:36:6D:59:37
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 019424B3853BF45DB1204E783EC1A28C8D0F
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/gNsZz63lZz-xYYJApJes6zZtWTc.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48101
IP address blocks: 185.244.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:85:3b:f4:5d:b1:20:4e:78:3e:c1:a2:8c:8d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80db19cfade5673fb1618240a497aceb366d5937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:12:3a:79:d6:57:3b:49:8a:21:53:d1:e0:
84:ac:c2:05:5c:b1:67:c0:8b:25:45:24:9c:b0:e6:
5c:27:51:b8:97:0a:c4:4f:f0:94:03:09:9c:38:75:
73:9a:30:65:3f:64:fc:df:56:0a:32:58:58:04:21:
89:99:75:f7:58:f0:82:79:5c:1e:ff:9a:05:4b:26:
93:f7:6e:02:d6:6c:53:87:25:ce:61:ba:0b:db:aa:
57:be:9d:73:01:f0:0b:20:04:6c:89:e8:ad:ea:2a:
00:89:ea:e1:86:d5:a8:9c:76:bd:26:31:77:57:bd:
85:e5:2f:0a:5c:b5:26:3e:63:8f:1b:9b:24:45:5e:
29:6e:c1:d0:a7:ee:a6:55:44:c0:cb:1c:44:25:da:
06:86:9c:fe:23:93:10:67:fb:73:a5:25:a8:83:f9:
01:14:67:46:1e:f8:cc:22:08:ec:9f:82:a4:8e:07:
be:ec:db:d1:54:e8:f2:11:dc:9f:31:e8:eb:7e:62:
cb:5e:d7:25:92:b4:e6:9f:ec:18:7f:0f:a0:d8:9a:
40:e0:8f:91:ca:be:87:02:11:90:b7:2d:92:8c:da:
ff:87:56:ec:78:8d:f1:cb:01:cf:18:15:96:f0:27:
00:63:08:eb:da:a9:e2:84:ca:70:e8:7a:92:b2:7c:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DB:19:CF:AD:E5:67:3F:B1:61:82:40:A4:97:AC:EB:36:6D:59:37
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/gNsZz63lZz-xYYJApJes6zZtWTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.250.0/23
Signature Algorithm: sha256WithRSAEncryption
54:ba:07:5e:81:9e:ef:e6:b1:f3:74:e2:dc:b5:0c:bb:44:29:
74:76:8e:06:d9:82:0a:23:39:6c:d3:02:2b:71:bd:14:db:f3:
35:18:10:51:e8:9c:21:5f:c6:16:5c:d6:9f:a4:e5:29:12:f0:
00:19:df:2a:40:75:6c:e9:c9:a7:4a:a4:ae:09:4d:21:51:ac:
c0:8a:56:73:86:f8:79:4c:04:29:3d:f4:ab:54:8f:0d:f7:e1:
6b:d3:33:3b:b1:bd:16:54:f6:97:12:e1:1b:89:59:a7:47:52:
93:48:2d:a6:ac:7d:89:d3:32:37:6c:1d:e3:d8:ed:5d:9a:3b:
42:b6:e2:9c:a5:bc:d3:89:3d:61:04:79:d1:d3:cb:7d:38:0c:
b0:5c:63:be:a1:07:e1:31:20:5a:44:fc:ec:9a:f1:c0:ca:1d:
04:38:24:ae:38:9e:fa:63:d7:1c:ca:3b:e1:c6:7d:7e:5e:bb:
0a:57:1a:44:f8:3e:f7:d0:68:97:60:7b:6d:d2:1c:a0:e5:56:
9e:fb:d1:86:e6:b9:d7:e2:32:d0:55:e5:38:c0:52:27:87:78:
f7:ce:b0:49:f1:cb:e3:54:70:d2:78:b2:17:a7:2f:17:f5:9f:
57:b6:02:8f:2a:12:e6:c1:2a:f8:8a:ae:22:fc:e8:a6:83:f5:
ed:ee:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:22 2025 by rpki-client