Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa
File: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (raw, json)
Hash identifier: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=
Subject key identifier: 12:31:D0:49:DD:8D:7F:A4:14:75:53:A3:05:AE:40:93:93:77:21:4B
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 01941FFAB51AC18E415B1AE4D1A7D5ADDEC8
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202482
IP address blocks: 185.161.28.0/24 maxlen: 24
185.161.29.0/24 maxlen: 24
185.161.30.0/24 maxlen: 24
185.161.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b5:1a:c1:8e:41:5b:1a:e4:d1:a7:d5:ad:de:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1231d049dd8d7fa4147553a305ae40939377214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:51:be:6e:de:9d:42:c2:22:97:9e:7c:ad:
aa:4c:80:bb:fe:02:a0:2a:74:65:5e:a4:e4:26:52:
ed:d8:89:8e:99:f6:fe:f9:00:5e:85:89:65:9b:1b:
e7:03:e3:ef:3a:6b:4c:73:10:8e:8f:cc:b8:43:27:
39:43:5d:a8:0f:ef:b4:c8:b2:c9:db:89:da:96:17:
ff:f6:ab:8d:1c:4c:6e:3f:54:88:f9:9e:bf:10:f0:
84:fa:de:23:a3:de:c8:5e:04:76:89:c2:58:fc:51:
44:43:20:06:00:ac:c2:c7:cc:0d:8f:03:af:67:53:
85:65:de:73:d7:19:00:6c:a3:96:35:c8:40:70:3a:
90:60:22:a9:1e:26:85:18:6f:58:68:67:a0:1e:54:
72:54:ae:a1:1e:96:7f:9c:34:1a:03:ef:bd:4d:0f:
21:11:25:f0:99:7c:6f:23:4a:da:3c:dc:65:5a:ab:
e2:2c:2f:fc:bc:59:2a:a1:4b:25:62:74:d0:3c:c2:
16:5d:df:7b:56:58:61:6c:bd:78:a6:aa:a9:98:48:
7a:e1:22:51:4b:bd:27:6d:96:e1:49:7c:d4:21:1f:
ce:db:aa:9e:b3:35:5c:2f:ac:53:81:c3:05:ab:1c:
8f:64:2d:cf:79:6b:75:83:f8:19:c0:42:75:cf:00:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:D0:49:DD:8D:7F:A4:14:75:53:A3:05:AE:40:93:93:77:21:4B
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:01:c2:60:32:be:4c:43:5d:a2:37:d8:e7:a4:06:20:7a:40:
8f:18:6d:dd:3a:c7:5d:03:b6:03:59:64:7d:30:3e:c0:fb:4f:
67:3f:ef:83:44:3c:4b:35:36:b2:21:fe:ec:0e:04:57:15:87:
15:f7:0b:2c:6f:b7:c2:7a:c8:d8:a0:b4:f8:11:23:7e:f4:96:
c9:b5:af:23:a5:7e:51:e7:99:92:a1:4d:88:90:37:66:59:56:
11:90:55:5f:e9:c7:a9:6e:38:21:d2:39:54:35:d1:5e:6a:86:
45:38:4d:d2:c9:cb:a9:fe:b1:07:58:ac:28:5c:08:de:5d:1c:
a1:51:37:87:fd:6d:87:24:d6:cd:b2:bd:93:23:19:21:8c:93:
2c:1e:36:fc:21:99:7d:ba:a7:41:32:cc:1b:5d:c1:8b:89:82:
87:4f:82:d6:c0:c8:e1:e3:9c:ba:8d:65:af:ba:3a:4b:b1:26:
bd:1a:7a:0c:30:05:d3:51:68:6d:1f:46:76:2b:f4:96:11:18:
29:bb:0c:0d:25:13:24:48:ef:90:81:ce:6e:d3:a6:ec:a9:a9:
f4:52:30:b7:0d:75:2e:e0:cb:8a:65:4a:bb:9d:21:5c:8f:dd:
4e:83:b9:9a:a6:9a:55:9c:fd:56:53:2d:ec:2d:70:33:bb:74:
b0:46:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:06:20 2025 by rpki-client