Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/cTkzelFg_-EfS7l9udnxkMrP0Fs.roa
File: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (raw, json)
Hash identifier: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=
Subject key identifier: 71:39:33:7A:51:60:FF:E1:1F:4B:B9:7D:B9:D9:F1:90:CA:CF:D0:5B
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 019425FC41FCD663132203A4E4B249E8BBC9
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/cTkzelFg_-EfS7l9udnxkMrP0Fs.roa
Signing time: Thu 02 Jan 2025 07:47:56 +0000
ROA not before: Thu 02 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135357
IP address blocks: 185.216.248.0/22 maxlen: 22
185.216.248.0/24 maxlen: 24
185.216.249.0/24 maxlen: 24
185.216.250.0/24 maxlen: 24
185.216.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:41:fc:d6:63:13:22:03:a4:e4:b2:49:e8:bb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Jan 2 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7139337a5160ffe11f4bb97db9d9f190cacfd05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:e1:e2:e1:7f:05:d6:7f:ff:24:e2:39:cd:
9a:d7:fb:c3:c9:8f:c0:8a:a8:fe:e1:b3:fb:05:43:
0a:1c:df:72:16:e7:0d:5d:fc:d6:b5:bf:83:49:86:
54:fa:36:e2:f5:10:dc:4c:9c:97:8a:21:71:7e:6e:
13:6c:c5:c1:3d:6b:6e:32:c5:b3:73:09:e9:b2:6f:
bf:9b:f9:86:cc:74:6e:da:66:8c:3f:c3:d7:13:b0:
c8:4e:91:06:e4:4a:b2:07:60:a2:a4:2e:3d:99:1e:
38:98:aa:be:33:5a:7c:49:f1:fc:79:bc:53:c7:be:
5b:c2:87:57:dd:86:03:a9:5e:08:18:bc:1c:9a:44:
64:99:37:59:79:61:02:42:fa:e5:c1:fb:d4:74:6f:
fd:28:9c:a9:0c:8b:d1:2f:a2:62:56:a1:bb:6d:ee:
3d:d1:97:54:9b:e0:5b:ed:ce:42:f8:db:97:4c:f0:
23:17:a8:c2:04:be:d1:4f:2c:d0:9e:39:54:f8:e8:
7e:1d:09:f7:bc:20:39:11:84:6c:b9:dd:0a:62:a9:
49:4d:d4:d8:d4:77:f4:9e:e9:cb:39:44:de:ee:9f:
32:65:1d:0d:42:7b:76:d7:c2:04:75:b3:a3:49:8f:
9d:db:59:41:fc:63:c4:6d:c4:cc:0e:2b:2b:52:a0:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:33:7A:51:60:FF:E1:1F:4B:B9:7D:B9:D9:F1:90:CA:CF:D0:5B
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/cTkzelFg_-EfS7l9udnxkMrP0Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:2d:cb:d2:a2:05:a2:93:0c:4a:3a:36:fd:cf:9a:cb:75:ce:
84:8c:b0:ce:30:5d:e8:76:b6:a8:67:ff:18:66:1a:bb:4a:5f:
9e:f5:9e:b5:9d:f1:f2:7f:e3:bb:01:6f:93:17:db:a3:41:d7:
35:df:28:8b:37:6a:c0:52:96:77:9d:00:d5:4b:c8:44:4d:bb:
9d:fc:b6:50:1c:e0:b9:f9:3a:80:75:db:3c:3b:c9:e7:47:b2:
c0:20:1b:ec:16:6b:93:f0:bd:1d:45:b8:13:76:e5:4b:47:74:
ca:cd:ac:eb:b5:98:66:94:7b:67:c9:73:eb:5f:56:7b:87:6b:
af:0c:b6:59:41:ca:3d:88:a3:9d:c5:0b:1f:96:2d:2f:3b:a7:
c2:f7:4b:29:bb:19:4b:8b:fb:86:19:d9:b5:91:ea:1c:6a:67:
8d:7e:1b:7b:d6:b7:71:36:c9:c6:a3:49:9c:2c:e6:ee:74:d2:
5b:ff:e3:89:0e:83:03:52:b9:d8:eb:e7:e4:eb:b1:88:be:3e:
5a:7a:58:47:9b:0a:1f:fd:36:98:9f:d4:e7:f1:7f:67:ea:60:
3c:e2:49:80:34:bf:9b:57:a0:af:7d:06:dc:4d:df:83:3d:0d:
67:2b:f5:b3:36:d8:87:b1:dc:88:80:ed:a7:85:ec:61:eb:8c:
b8:0e:e3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:15 2025 by rpki-client