Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/cHLxjuzlgoGDINIVaFsru4PZ9BE.roa
File: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (raw, json)
Hash identifier: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=
Subject key identifier: 70:72:F1:8E:EC:E5:82:81:83:20:D2:15:68:5B:2B:BB:83:D9:F4:11
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7A7C16A42A6E2351D8B1FD8E618B
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/cHLxjuzlgoGDINIVaFsru4PZ9BE.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47574
IP address blocks: 185.248.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7a:7c:16:a4:2a:6e:23:51:d8:b1:fd:8e:61:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7072f18eece582818320d215685b2bbb83d9f411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:7f:28:92:b4:87:79:c7:a4:6a:d9:40:9b:
9c:96:2a:ea:66:9a:a0:15:f6:df:af:76:4d:67:93:
33:45:79:68:34:c6:1d:73:db:5f:e5:b1:26:63:1d:
32:7f:4f:90:83:f1:0b:a5:f3:f9:ba:89:7c:02:1c:
f5:b4:58:44:d7:56:b5:91:02:57:3f:0c:dc:0f:64:
6c:cd:7a:6e:b0:25:83:5d:b6:67:df:ca:52:d7:cb:
fb:b2:23:ff:74:c7:0e:92:3f:5c:ea:5e:c6:9b:05:
ff:91:19:90:8b:b8:75:6d:2a:f9:c4:aa:51:43:50:
9e:37:88:1c:c3:92:28:2c:45:83:f1:62:5a:01:f8:
f1:76:5c:a7:a2:5b:3d:4e:88:33:d8:db:6c:93:7b:
17:33:bd:d1:3b:51:d6:23:aa:66:39:cb:e2:a1:a0:
b8:3d:f9:27:13:3b:72:6c:35:5e:ab:a1:16:19:86:
fd:a5:06:58:d6:50:85:74:ef:85:3a:29:84:48:38:
03:48:db:49:8b:fa:3c:7c:f1:91:4f:74:73:48:21:
d4:1e:68:4a:55:ee:d5:34:7f:19:fd:cd:78:a5:db:
a2:53:26:1d:20:1d:b6:02:d9:2f:c1:82:b9:20:f3:
3f:8b:d4:57:46:3f:eb:e4:f4:39:6f:f2:1d:0d:24:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:F1:8E:EC:E5:82:81:83:20:D2:15:68:5B:2B:BB:83:D9:F4:11
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/cHLxjuzlgoGDINIVaFsru4PZ9BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.136.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1b:13:d0:db:78:f7:83:41:99:50:e1:5d:b0:55:e6:fd:0a:
b2:09:38:9a:8b:6c:5c:fd:2e:16:92:91:de:4b:87:9a:10:d1:
fb:2b:68:eb:53:3f:62:f2:a4:6b:58:cd:b8:b6:c5:50:58:6f:
59:7d:9c:2e:3d:60:7b:18:4b:38:4a:bf:9e:7e:eb:29:a4:23:
0f:13:b8:83:8e:f3:a0:8f:74:24:54:e7:c0:83:49:f8:c6:85:
0c:d6:f1:e9:93:b8:08:b5:d4:3a:d6:9e:2e:12:55:4a:02:a4:
4b:44:29:1e:4e:4f:5a:52:61:e8:f2:93:37:cc:f9:07:35:33:
7f:87:91:16:6a:63:22:96:8e:93:ab:ed:1e:8c:2b:e0:dc:24:
d2:e1:2f:f0:32:60:5b:eb:04:ce:ae:fb:1a:ff:94:5b:b7:7e:
17:3e:1f:dc:63:61:8f:32:b6:c7:01:05:d2:9c:04:8b:3a:51:
d1:21:4f:b4:c3:59:8c:2e:38:b6:99:c1:20:89:84:f4:f1:86:
d0:67:62:13:70:16:0d:b9:9b:de:28:a7:ba:a2:50:7c:62:71:
bf:2c:6f:3f:96:dc:33:66:2b:75:44:a1:48:6a:db:87:a7:bd:
d3:03:04:5e:a0:50:cc:7d:81:f3:51:6d:73:51:2a:75:53:ff:
b9:3e:c3:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH3p8FqQqbiNR2LH9jmGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjUwMTAxMTM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDcyZjE4ZWVjZTU4MjgxODMyMGQyMTU2ODViMmJiYjgzZDlmNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYR/KJK0h3nHpGrZQJuclirqZpqg
Ffbfr3ZNZ5MzRXloNMYdc9tf5bEmYx0yf0+Qg/ELpfP5uol8Ahz1tFhE11a1kQJX
PwzcD2RszXpusCWDXbZn38pS18v7siP/dMcOkj9c6l7GmwX/kRmQi7h1bSr5xKpR
Q1CeN4gcw5IoLEWD8WJaAfjxdlynols9Togz2Ntsk3sXM73RO1HWI6pmOcvioaC4
PfknEztybDVeq6EWGYb9pQZY1lCFdO+FOimESDgDSNtJi/o8fPGRT3RzSCHUHmhK
Ve7VNH8Z/c14pduiUyYdIB22AtkvwYK5IPM/i9RXRj/r5PQ5b/IdDSSPtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBy8Y7s5YKBgyDSFWhbK7uD2fQRMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvY0hMeGp1emxnb0dESU5JVmFGc3J1NFBaOUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufiIMA0G
CSqGSIb3DQEBCwUAA4IBAQCXGxPQ23j3g0GZUOFdsFXm/QqyCTiai2xc/S4WkpHe
S4eaENH7K2jrUz9i8qRrWM24tsVQWG9ZfZwuPWB7GEs4Sr+efusppCMPE7iDjvOg
j3QkVOfAg0n4xoUM1vHpk7gItdQ61p4uElVKAqRLRCkeTk9aUmHo8pM3zPkHNTN/
h5EWamMilo6Tq+0ejCvg3CTS4S/wMmBb6wTOrvsa/5Rbt34XPh/cY2GPMrbHAQXS
nASLOlHRIU+0w1mMLji2mcEgiYT08YbQZ2ITcBYNuZveKKe6olB8YnG/LG8/ltwz
Zit1RKFIatuHp73TAwReoFDMfYHzUW1zUSp1U/+5PsM9
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:47 2025 by rpki-client