Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa
File: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (raw, json)
Hash identifier: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=
Subject key identifier: E6:C8:F8:39:F8:D4:1C:DA:85:C7:F8:F5:11:FF:20:ED:8A:70:EA:8A
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 01941FFA0EEDEECCD7866995684EB582551C
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62201
IP address blocks: 185.149.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0e:ed:ee:cc:d7:86:69:95:68:4e:b5:82:55:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6c8f839f8d41cda85c7f8f511ff20ed8a70ea8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:d3:72:c2:7f:27:97:a2:5f:e9:2e:69:78:
32:2a:9c:d4:db:0a:56:1f:87:83:9f:cf:34:36:c6:
9b:14:2b:fe:dc:40:5c:0a:5b:ff:5f:b1:9f:f5:3b:
f9:ea:06:b7:49:1a:f6:67:a3:ad:f7:fb:e2:6c:34:
b7:97:8a:32:e3:a2:af:ee:f6:1d:1e:0c:ab:fe:a0:
29:7c:05:70:9b:18:93:7a:96:30:fb:56:e5:af:35:
57:5b:45:67:fd:0d:60:b9:c6:da:06:fc:09:86:b4:
7c:8e:af:b2:d6:ed:ef:b9:07:9e:b9:68:05:69:47:
22:06:de:cd:c3:08:3a:51:e5:03:d4:84:a7:00:6a:
6d:e6:44:f3:f9:de:f2:c9:63:a7:db:42:9c:d6:1a:
60:c5:8a:92:e8:bd:9e:84:4c:42:d9:5f:ce:eb:98:
60:de:47:8c:b0:45:00:8a:74:7b:20:fa:f8:21:c9:
3d:e8:66:6a:5a:9c:39:e2:65:5a:1c:3e:78:0a:fc:
c3:60:56:80:d3:38:8a:94:0f:15:7f:3b:67:70:59:
d7:fc:4e:27:5f:07:cd:8e:84:6e:47:83:ba:32:66:
b4:8c:1c:59:18:b7:68:18:2c:2c:95:a6:10:1c:9c:
29:c6:f9:4a:41:d7:06:a2:90:26:f4:37:99:b4:2b:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C8:F8:39:F8:D4:1C:DA:85:C7:F8:F5:11:FF:20:ED:8A:70:EA:8A
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.200.0/22
Signature Algorithm: sha256WithRSAEncryption
26:80:e8:92:f3:4f:7b:b1:c9:30:b5:e4:6b:64:e5:df:e6:47:
42:23:d3:06:d3:84:78:52:1e:58:b9:a9:a0:47:76:2d:98:82:
db:a0:08:1c:30:46:40:54:e8:de:ee:88:39:9c:f6:f2:01:fc:
26:63:bf:60:63:bc:f8:be:05:7d:40:a0:1c:ac:41:79:cf:85:
0f:62:7c:81:a1:e4:fb:40:65:ab:a7:02:5b:a4:ba:9c:db:fd:
3a:df:d1:6a:3e:e6:42:e0:3b:fd:7d:e3:99:e4:46:68:d1:0d:
d8:cc:6d:df:c5:a2:f1:65:b9:ce:96:58:e2:85:96:4c:dc:dd:
b2:f3:c7:82:a5:aa:04:1f:6a:97:fe:04:0f:16:cd:c9:f8:75:
fa:77:06:c9:3e:6e:2b:2c:08:20:de:e4:ab:c2:9f:c4:66:58:
d2:cf:55:23:07:37:fb:e5:6a:c5:28:26:af:61:74:7a:a7:f2:
a5:a7:1f:b9:f8:3a:c8:69:d0:2b:b5:75:24:bc:78:29:61:b7:
1c:87:4e:07:a3:19:b7:0d:c0:65:2a:01:11:5c:32:f2:c6:92:
91:17:5c:f6:41:8c:73:40:98:f0:65:a1:09:fc:89:83:00:f6:
88:56:bb:88:dd:bb:68:4a:80:96:fc:5c:cd:cb:93:0f:9f:dc:
3a:3c:c3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:03 2025 by rpki-client