Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/_r9VXnRhX59SlkMjtvLRFSYFSEc.roa
File: _r9VXnRhX59SlkMjtvLRFSYFSEc.roa (raw, json)
Hash identifier: slFzMEPjDs6Sm1wwpBIppxAF68+f1ihfiQqqaYlV/do=
Subject key identifier: FE:BF:55:5E:74:61:5F:9F:52:96:43:23:B6:F2:D1:15:26:05:48:47
Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial: 019423D701E03112D8CB4A3526D1DD0C010F
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/_r9VXnRhX59SlkMjtvLRFSYFSEc.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8356
IP address blocks: 185.109.124.0/22 maxlen: 24
217.198.48.0/20 maxlen: 24
217.198.56.0/21 maxlen: 24
2001:768::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:01:e0:31:12:d8:cb:4a:35:26:d1:dd:0c:01:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=febf555e74615f9f52964323b6f2d11526054847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:78:7d:6c:38:55:d3:6c:df:22:29:f2:14:
7e:cf:05:43:5d:72:0d:94:4f:f8:1f:49:64:92:a6:
26:d6:98:3a:40:01:b1:4e:0d:dd:2a:4c:1d:c7:0a:
f4:d0:02:56:bf:90:c5:aa:c6:d2:db:da:75:73:ab:
42:81:38:54:5a:01:ca:f5:32:14:db:01:1d:df:05:
2b:c3:45:a2:e1:58:42:11:1e:ee:1a:a9:d6:b1:bc:
77:03:26:ad:f6:e9:bb:32:06:02:d0:9f:f1:08:9b:
25:31:97:5c:c4:16:22:e9:1d:0e:e4:e0:22:50:ef:
3f:bd:15:15:5a:04:46:c0:91:06:a6:11:86:c9:00:
36:20:81:90:06:7c:05:57:0d:6c:ae:c9:54:5f:21:
a9:d0:71:98:4f:7a:bf:f7:af:67:86:68:d7:3a:47:
e0:bd:a5:f7:0e:88:d4:c8:c3:79:aa:70:4e:5f:ef:
d7:52:26:6f:bd:c5:91:dd:d4:28:ea:d7:6b:26:c0:
b8:ae:70:07:76:af:72:4a:34:70:9c:78:a9:05:bf:
d3:53:75:af:7d:68:13:59:f6:15:08:67:bb:5d:64:
b4:db:a8:e4:ef:46:a3:1c:1f:49:cc:23:8c:8e:9b:
74:14:f0:52:aa:ac:ef:56:fe:ee:06:30:32:d9:41:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:55:5E:74:61:5F:9F:52:96:43:23:B6:F2:D1:15:26:05:48:47
X509v3 Authority Key Identifier:
keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/_r9VXnRhX59SlkMjtvLRFSYFSEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.124.0/22
217.198.48.0/20
IPv6:
2001:768::/32
Signature Algorithm: sha256WithRSAEncryption
9b:80:54:3e:26:d7:89:fc:75:5a:b6:99:3f:53:85:8d:01:4b:
52:f4:f9:a0:bb:52:97:9a:61:52:b3:8f:15:6f:e1:70:0a:b7:
63:86:c2:dc:87:b4:fb:49:6f:6e:28:9f:ad:11:12:a8:5e:17:
99:59:3b:7b:2e:d6:a6:26:87:7f:73:4e:5c:ad:3c:d6:7b:6a:
e7:89:76:7a:d3:ed:d3:d6:0d:91:8f:be:c8:21:9d:44:00:b0:
e7:68:8a:14:e7:57:1f:5f:95:34:7d:dc:5a:a4:56:d1:49:92:
4c:0b:67:ad:12:75:25:1a:e1:94:8a:67:98:5f:1d:9e:73:70:
1a:6b:fd:b7:00:a4:34:0c:ef:e1:df:98:67:4e:ae:3a:9a:f4:
f4:60:eb:72:77:0d:18:58:f1:76:49:34:6c:6c:1b:af:73:84:
5f:0b:88:d2:5b:40:f7:ef:ee:c8:3a:7e:b7:0e:37:76:b5:02:
20:df:34:39:93:cd:ef:ba:14:c4:35:28:6d:8d:59:90:14:fd:
06:6e:f4:b2:81:46:db:2a:61:9d:e3:77:ab:9f:58:eb:1b:ac:
15:15:74:8f:17:26:c1:81:64:07:1f:47:fa:f1:30:50:89:68:
19:c6:24:ff:ba:a6:65:3a:bb:66:26:4f:3a:5d:65:8a:5a:58:
f2:aa:b3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:50 2025 by rpki-client