Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/1-PqW8UmiSaov5LQilBVWMK5ZalY.roa
File: 1-PqW8UmiSaov5LQilBVWMK5ZalY.roa (raw, json)
Hash identifier: TOVF5pxyQFktaD7ChGQ0pQzpTOW/D5b1AiH6KqbdxuQ=
Subject key identifier: F8:FA:96:F1:49:A2:49:AA:2F:E4:B4:22:94:15:56:30:AE:59:6A:56
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 01941FFA5C6ECB1328A3E4FFE171D21CB6AE
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/1-PqW8UmiSaov5LQilBVWMK5ZalY.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 185.230.181.0/24 maxlen: 24
185.230.182.0/24 maxlen: 24
185.230.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5c:6e:cb:13:28:a3:e4:ff:e1:71:d2:1c:b6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8fa96f149a249aa2fe4b42294155630ae596a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:69:68:cf:85:19:48:0b:9d:57:c7:36:f2:
4e:51:cd:10:18:82:4a:c3:65:be:64:7e:f0:17:d2:
d3:1d:d2:84:02:2d:a2:91:28:36:2b:cd:5c:25:78:
cd:f9:a4:9e:cc:06:04:94:6c:2b:1a:b6:dd:2a:7b:
3a:89:5c:d7:7c:14:bc:e5:ce:ed:80:69:4e:50:4e:
07:c8:6f:b7:30:a2:f6:57:10:c2:58:be:8d:e8:43:
2c:f7:27:7e:7f:23:9d:99:02:ab:23:86:c7:bc:58:
e5:19:20:1e:49:90:a7:d8:3c:d3:71:3e:6d:43:d1:
ab:d5:49:1f:71:92:f4:33:99:6c:08:44:8b:1c:4b:
6d:d1:d1:e1:e2:eb:aa:e3:f4:cf:e2:28:80:47:42:
9c:4d:5f:5d:ae:9d:f6:92:7c:dd:92:b4:7c:25:05:
4c:f3:66:b5:b3:ec:1b:b3:78:2e:20:a1:60:f0:a9:
0b:a4:93:dc:20:7d:d5:d6:a1:0b:99:54:77:64:0a:
bd:3e:13:16:12:ee:43:f3:9c:a0:06:19:1e:4c:6d:
1b:78:44:be:a2:eb:64:93:b8:99:fb:43:e3:d7:00:
e9:6c:17:32:d3:52:4f:6a:cb:75:01:5c:fc:bc:f3:
27:55:aa:bf:b5:21:89:27:2f:85:c6:ec:b8:1d:cc:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FA:96:F1:49:A2:49:AA:2F:E4:B4:22:94:15:56:30:AE:59:6A:56
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/1-PqW8UmiSaov5LQilBVWMK5ZalY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.181.0-185.230.183.255
Signature Algorithm: sha256WithRSAEncryption
6d:f3:10:7e:10:56:34:f1:69:36:f1:03:11:6e:1b:c3:a8:84:
0b:f0:d1:4b:5e:92:4d:38:c3:8a:fa:f8:5c:c2:95:ab:2b:29:
c3:de:97:63:02:3f:94:11:db:5c:b5:f8:c4:41:e3:f7:77:ad:
aa:ab:ff:08:75:00:f2:4c:89:2a:9b:55:7c:8a:0d:af:18:a5:
9a:e5:d8:d4:e1:e8:1e:2f:ff:9a:08:59:d4:12:cb:ab:f2:23:
82:1e:eb:6f:3f:e2:55:64:3f:00:c1:07:f2:ff:f1:40:9e:4e:
eb:ed:e9:52:05:f0:43:4c:94:36:69:8b:b1:33:9e:73:aa:42:
fd:62:64:56:eb:41:9b:ff:e5:ae:26:d6:39:6a:ba:6c:56:a7:
41:e2:f1:46:3d:91:1d:6f:35:a9:e4:1d:d5:67:4e:3b:28:fb:
60:6d:92:fb:b9:98:3b:ba:55:f5:b5:c1:23:ce:de:2f:a6:a7:
55:d3:c1:19:c9:ce:70:c7:04:c7:71:c6:54:61:98:86:62:1c:
15:da:c8:59:c9:0c:1d:f8:fa:00:d6:20:05:b9:cb:0c:b9:df:
06:5e:01:a4:17:a7:b8:5d:bb:44:3e:d6:ff:59:7f:cd:dd:71:
49:69:82:ad:e2:15:fb:c1:2e:9f:80:3b:99:1e:18:d3:ef:45:
cc:cc:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:58:24 2025 by rpki-client