Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/iYqIMSLhd13kAtHmsyVRJLCRELQ.roa
File: iYqIMSLhd13kAtHmsyVRJLCRELQ.roa (raw, json)
Hash identifier: Sy2brI825JIDwfnRYmv5+hBpQhClnbRKdRnTs+cKh/c=
Subject key identifier: 89:8A:88:31:22:E1:77:5D:E4:02:D1:E6:B3:25:51:24:B0:91:10:B4
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01941FFA0B2669FDE5698DD23C35C8460DD9
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/iYqIMSLhd13kAtHmsyVRJLCRELQ.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206143
IP address blocks: 185.195.62.0/24 maxlen: 24
185.195.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0b:26:69:fd:e5:69:8d:d2:3c:35:c8:46:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=898a883122e1775de402d1e6b3255124b09110b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:39:fd:37:da:e9:ef:d7:b3:29:0a:6f:6f:
ab:2d:c9:9c:28:96:b7:7d:f8:1a:2d:6e:27:99:4e:
68:5f:0d:ab:64:e8:76:94:fa:14:3e:57:3f:ca:a9:
b6:65:cf:29:12:ff:e2:5d:e6:59:7f:85:89:66:af:
b3:3e:a1:eb:d7:25:ce:c6:f9:82:84:62:28:a4:51:
2b:37:4e:92:79:c8:df:6b:26:a1:1f:13:b5:bb:92:
22:b6:b3:1d:7e:7d:69:45:3a:f0:09:b4:54:02:e0:
34:44:93:02:2d:bb:79:61:ba:6a:28:77:09:ab:e6:
fd:45:97:07:c6:0d:41:9a:a1:c6:e5:d3:44:7a:b7:
48:18:64:34:ff:f9:bf:4a:d4:72:c8:35:5c:68:7c:
e6:2b:6c:b2:59:87:a6:87:b0:5d:fa:42:3e:88:12:
d4:24:37:b6:ed:cd:a2:30:21:34:72:3b:79:e3:9a:
ca:68:8b:8c:b2:69:62:31:d4:88:b0:6a:20:84:eb:
28:4b:d0:d4:72:c8:56:14:fa:9d:e9:6e:10:3c:8f:
7c:9c:d2:ec:e7:7d:bc:ca:15:fe:69:42:89:43:f7:
ad:41:bd:62:16:72:49:97:b9:f4:9a:6d:00:2b:af:
e9:23:4e:fe:b3:13:c6:e9:42:a5:7c:8d:d1:bf:c3:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8A:88:31:22:E1:77:5D:E4:02:D1:E6:B3:25:51:24:B0:91:10:B4
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/iYqIMSLhd13kAtHmsyVRJLCRELQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:32:65:21:bd:b4:78:73:4f:f1:16:08:dc:6a:c5:a6:ac:a6:
b3:4a:55:4a:87:97:66:01:ff:f6:df:32:22:b2:2e:4d:96:d9:
d7:d8:7e:e0:c6:db:f4:18:7d:ee:ac:c1:3f:15:03:2e:d5:cf:
f6:bc:d5:5d:d3:5d:97:b0:5f:fb:6f:70:f4:ee:6a:7c:17:0f:
ab:ea:95:c9:42:aa:25:b4:04:89:e6:f5:cf:24:68:a7:cc:69:
2e:f6:13:18:64:98:04:bb:6a:ee:b3:04:3e:6c:f2:25:cf:a1:
f4:96:b9:ad:06:40:18:9b:6c:7d:6f:48:14:4d:95:44:31:3d:
44:87:cb:c4:12:ca:34:c9:bc:ef:7a:a3:6d:33:1e:6e:d8:aa:
9d:a5:fc:72:44:e8:a4:f8:31:76:c7:44:2f:73:d5:e0:46:b3:
00:a6:65:1b:1d:ca:7f:2f:e2:11:c1:bf:5e:df:29:9a:dc:e9:
ab:6c:81:17:6b:83:5e:17:9e:6b:b0:e3:70:94:29:ee:c8:bc:
ee:ef:0d:f2:f1:1d:cc:22:c6:ff:ab:18:07:05:a0:78:e9:02:
8b:8a:cd:43:e7:1f:59:76:2b:4e:ef:2f:ff:e0:21:b0:71:f2:
4a:16:f0:53:45:ce:63:83:e4:fa:14:a4:46:8f:16:f4:b3:0b:
2e:6f:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:30 2025 by rpki-client