Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/Ek9o5ka71DKMDLeoqlfXboM-5Rc.roa
File: Ek9o5ka71DKMDLeoqlfXboM-5Rc.roa (raw, json)
Hash identifier: UhctXG9OiyqphaFFlrHHz2fzuVy0lqLpWXXD1hu5SvU=
Subject key identifier: 12:4F:68:E6:46:BB:D4:32:8C:0C:B7:A8:AA:57:D7:6E:83:3E:E5:17
Certificate issuer: /CN=9c1927417d461755aefac39978a58be1d322d0c0
Certificate serial: 0A942FDA
Authority key identifier: 9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/Ek9o5ka71DKMDLeoqlfXboM-5Rc.roa
Signing time: Thu 24 Mar 2022 11:10:41 +0000
ROA not before: Thu 24 Mar 2022 11:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12345
IP address blocks: 185.251.46.0/23 maxlen: 24
185.247.228.0/24 maxlen: 24
185.247.229.0/24 maxlen: 24
185.251.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177483738 (0xa942fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1927417d461755aefac39978a58be1d322d0c0
Validity
Not Before: Mar 24 11:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=124f68e646bbd4328c0cb7a8aa57d76e833ee517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4c:7f:98:32:2b:9a:57:c3:b6:20:56:fe:7c:
30:89:1b:f1:7e:7d:48:c1:91:86:e9:58:dc:3b:7a:
85:9a:df:1b:87:2d:8b:ed:92:d8:08:f5:f7:f6:d4:
21:b2:93:c2:03:79:15:e6:f0:9b:47:4d:f7:51:b9:
57:b5:da:31:ac:1a:ca:8f:25:a4:a4:e2:24:64:ea:
5f:1d:1d:7a:71:ae:8d:1f:56:eb:61:3d:92:84:a8:
c5:72:07:72:61:a5:34:97:4a:ea:c7:70:c4:70:9e:
18:f3:78:98:06:ca:e2:ac:11:f4:87:29:1d:33:f2:
51:04:07:28:fd:80:2e:e3:43:83:e7:d9:cb:a1:c7:
9e:d6:f9:1d:97:52:3d:4a:68:1c:37:a2:29:26:72:
70:64:e6:3a:3d:fd:9c:8a:f8:0b:f9:33:e3:7d:1e:
ee:73:18:41:fb:e8:e8:83:1a:15:64:88:92:66:b8:
4c:57:38:17:09:23:3c:92:d7:c2:59:df:db:49:9d:
ab:24:29:dc:c9:b4:12:54:9f:18:10:bb:c7:fe:ee:
cc:20:84:4d:ef:31:86:2c:ef:1a:4d:74:5e:43:21:
fa:e5:91:e3:3e:4e:b8:e5:85:b9:14:93:60:41:4a:
a4:93:32:32:a0:cc:06:f0:59:e0:46:99:95:60:cd:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:68:E6:46:BB:D4:32:8C:0C:B7:A8:AA:57:D7:6E:83:3E:E5:17
X509v3 Authority Key Identifier:
keyid:9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/Ek9o5ka71DKMDLeoqlfXboM-5Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/nBknQX1GF1Wu-sOZeKWL4dMi0MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.228.0/23
185.251.46.0/23
185.251.250.0/23
Signature Algorithm: sha256WithRSAEncryption
88:36:f1:76:ee:b1:91:b5:6a:33:5a:bf:f2:91:43:d7:22:47:
8a:18:98:03:3f:be:48:19:b9:de:b4:1a:de:29:cd:5e:36:da:
2c:9d:a6:67:21:7f:27:f7:d4:a7:ae:53:33:42:1b:b0:7a:9f:
36:e2:67:5d:21:9e:25:1f:c5:e4:43:5c:76:49:17:f0:d8:8b:
ed:df:21:f3:31:41:3f:31:7b:53:6c:fd:1a:e5:bd:ab:36:40:
4c:b9:83:d3:4f:b7:be:0b:ea:d3:b0:30:e7:0e:05:72:f3:c8:
9e:53:f2:9d:3c:fb:1d:02:d2:ae:47:10:b1:82:84:41:7a:6f:
25:29:d2:aa:ef:a0:f2:18:a7:2c:b5:7f:78:f1:94:dd:79:ee:
e3:32:82:db:87:0f:2e:c5:66:63:51:89:de:c7:4f:36:81:ac:
2c:fa:f3:19:f8:bd:1d:cf:1a:e9:56:53:c1:f5:ec:9e:b0:07:
fb:73:fb:08:ab:f1:d7:c0:bf:0f:b1:4b:58:c2:24:32:a9:d2:
6f:a0:2a:4a:9f:38:16:d3:c6:7c:e6:f6:b3:d5:cb:61:c6:1c:
b0:bd:e9:88:63:c9:a0:e7:4a:e0:5b:69:d4:ca:55:fc:6e:b0:
f3:f6:87:98:e4:5c:ed:0c:b6:93:e0:9f:a8:0c:59:c9:9b:3a:
0e:7e:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:47:11 2025 by rpki-client