Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa
File: Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa (raw, json)
Hash identifier: 02V3u2HhlDHRSQCBXJk0WRbtuRTj5NgREYz36Htp320=
Subject key identifier: 06:9E:2A:2D:6F:DD:DB:1B:F6:F4:91:60:9F:7B:3F:79:40:E6:CE:65
Certificate issuer: /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial: 019477BE47B5C61074FAC4091A9113B44819
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa
Signing time: Sat 18 Jan 2025 04:49:06 +0000
ROA not before: Sat 18 Jan 2025 04:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204174
IP address blocks: 185.188.13.0/24 maxlen: 24
2a13:e2c0:fd59::/48 maxlen: 48
2a13:e2c6::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:77:be:47:b5:c6:10:74:fa:c4:09:1a:91:13:b4:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
Validity
Not Before: Jan 18 04:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=069e2a2d6fdddb1bf6f491609f7b3f7940e6ce65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:3a:8e:e4:56:8d:c5:3e:8a:a9:1f:64:b6:
8b:ae:5e:dc:a1:32:6c:e0:3c:0b:e5:e0:8f:78:dc:
fc:af:41:0f:e4:1f:90:49:93:e2:48:ef:d7:a3:a8:
c5:c4:a8:5b:21:aa:52:99:74:73:26:c2:5b:29:85:
1f:94:40:73:4b:0e:43:ed:b7:ba:a4:fe:99:f4:02:
e0:4e:36:ca:bf:f3:d0:8d:cf:08:a2:95:2c:61:05:
4e:e8:d1:ce:13:a4:c9:90:d4:d6:0b:01:4e:bf:30:
53:d1:99:ac:2e:bb:44:fc:73:0d:b0:ed:e5:73:09:
46:ad:4b:8c:92:86:75:bb:d3:6c:79:53:76:8a:27:
06:f3:ae:89:6e:9d:40:02:92:7f:8a:e2:70:be:5c:
c3:28:70:4d:e6:fa:0d:df:0b:47:9b:64:01:f0:5a:
7e:d5:3b:8f:da:d5:a5:3a:ae:d4:65:df:ad:c9:8d:
69:c4:35:92:4f:2d:8d:cd:c8:25:c6:a4:0d:d1:f5:
ef:b8:00:e4:0f:5f:d9:b9:fa:70:29:f1:a0:2b:27:
3b:80:d6:44:0a:04:df:d3:00:d0:5b:7f:3a:f8:7f:
87:49:78:62:70:fc:42:24:bf:10:7f:69:72:87:ba:
7e:e4:34:51:26:fb:f1:66:c7:6f:a3:5a:67:fc:c5:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:2A:2D:6F:DD:DB:1B:F6:F4:91:60:9F:7B:3F:79:40:E6:CE:65
X509v3 Authority Key Identifier:
keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.13.0/24
IPv6:
2a13:e2c0:fd59::/48
2a13:e2c6::/32
Signature Algorithm: sha256WithRSAEncryption
3b:af:98:55:86:f0:0f:d1:3f:e3:ce:05:ca:12:57:9d:b7:d9:
6e:70:11:ce:4a:38:24:26:05:e0:09:0b:75:88:de:c7:7e:c9:
36:50:a5:cd:23:b2:3b:e7:95:b0:d5:ae:09:a6:4b:b6:99:3f:
54:45:16:e6:cc:a4:98:87:51:6f:72:57:53:fb:58:05:76:72:
69:82:22:a1:9c:23:43:e6:63:28:42:b1:80:4f:4e:29:ed:67:
9e:d7:d3:6e:df:54:19:5f:77:5c:78:bc:7c:10:0a:a1:16:39:
aa:5a:6c:db:5c:b3:de:6f:c8:58:d8:50:09:e7:f9:56:23:3a:
5e:a2:ac:6f:6d:ef:7a:15:56:7b:32:80:67:8b:64:b7:3b:b6:
8a:6a:7c:8e:7c:6f:d9:17:89:25:4f:7b:ba:ff:d3:f5:0d:a1:
23:34:cf:8a:1c:bf:cf:ee:f2:c4:49:b9:e9:1f:d8:f4:72:d7:
68:9f:f1:1e:47:6d:6e:ee:67:ee:4c:4e:ff:12:fe:22:69:36:
a8:87:5b:42:0d:3c:ec:11:25:ec:92:af:63:e1:ba:46:c9:63:
98:71:90:a5:52:c9:d2:ea:2c:86:bd:29:9f:2b:30:2f:91:56:
7a:ee:9d:29:b6:04:c4:27:79:9d:d7:72:56:0a:2f:b6:52:18:
37:c8:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:07:17 2025 by rpki-client