Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/It1W1nFMSnvON6n0WueAxjrC3W0.roa
File: It1W1nFMSnvON6n0WueAxjrC3W0.roa (raw, json)
Hash identifier: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=
Subject key identifier: 22:DD:56:D6:71:4C:4A:7B:CE:37:A9:F4:5A:E7:80:C6:3A:C2:DD:6D
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 019422FBA1012C90BEF60C56C3B7C01EA858
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/It1W1nFMSnvON6n0WueAxjrC3W0.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 185.234.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a1:01:2c:90:be:f6:0c:56:c3:b7:c0:1e:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22dd56d6714c4a7bce37a9f45ae780c63ac2dd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:61:96:4e:a1:2d:3b:a2:7d:19:c8:51:b4:
cc:71:eb:44:39:6f:59:5a:a8:41:a2:e3:ff:57:51:
2f:2c:fd:b0:eb:62:70:f4:e3:3c:f4:30:b0:37:17:
3a:40:84:80:70:89:7e:23:6a:6f:e7:02:8f:63:18:
df:81:ee:5f:1d:d1:7b:e3:b4:0f:4d:fe:44:34:ce:
d3:af:5c:e4:6f:68:43:18:da:d1:3b:7c:a8:df:46:
af:16:fc:dd:09:ee:52:4a:4c:74:65:17:ce:71:e3:
ec:89:c4:56:e7:8c:30:53:4b:83:ba:8c:d3:b0:09:
41:aa:27:bc:b0:b1:96:80:d8:1a:a5:d9:5d:04:de:
69:43:d7:84:63:e5:ff:5f:88:1f:95:29:12:56:6f:
8c:1c:7a:2f:a3:84:57:bc:b8:90:7f:9e:6d:a2:6a:
09:7e:dc:0a:53:4b:c7:a3:51:44:7d:be:a4:13:c6:
5c:44:10:58:c5:ff:d1:86:e5:d6:8f:42:05:42:55:
03:0a:5b:0c:f1:73:4c:1b:39:5f:2a:b1:fc:42:61:
50:ea:41:dd:0e:9c:21:b6:5f:86:57:7e:b4:c8:4d:
07:d1:86:96:67:e5:17:e5:50:6d:aa:ed:be:97:e8:
40:8e:17:8d:dc:07:51:98:92:28:76:44:35:35:b9:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:56:D6:71:4C:4A:7B:CE:37:A9:F4:5A:E7:80:C6:3A:C2:DD:6D
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/It1W1nFMSnvON6n0WueAxjrC3W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.136.0/24
Signature Algorithm: sha256WithRSAEncryption
93:19:5f:d3:33:cd:28:c3:f1:35:a0:4e:34:41:f4:2d:f4:23:
2d:99:a3:df:ba:29:07:27:c0:a5:61:7c:47:6f:bc:ce:65:09:
2a:30:f6:64:8e:78:0f:fe:73:01:40:b5:2d:5b:d7:61:16:38:
f8:3c:ad:d2:b6:64:6f:d8:de:13:28:50:08:62:a6:ef:4c:d7:
b0:f8:e9:1e:68:d8:11:40:9d:98:73:c2:07:28:ea:50:ad:af:
c9:30:f8:8e:c7:fa:5d:3a:d1:6a:ab:ed:b5:ab:b3:a9:3e:79:
73:3a:b0:09:9d:71:a3:0f:b7:6c:af:60:c8:08:cb:04:62:e5:
81:84:75:8c:7d:a1:6b:53:3a:e6:b7:26:30:e9:18:e0:40:61:
8a:d8:aa:e0:41:52:83:e5:c4:d7:ce:ba:36:29:cb:e2:58:32:
d4:02:ac:e1:b2:a8:c7:32:43:b2:bc:ad:e7:b4:47:66:bc:b8:
ac:da:77:ec:ec:bb:18:1e:1b:1b:56:75:77:91:c4:5a:17:0d:
3a:42:c7:ae:2d:bf:5c:5a:78:0f:fe:a5:f1:dd:d1:a8:5b:30:
c9:b7:f8:3c:aa:a5:55:1f:1e:22:b5:9b:20:3f:7c:5c:fa:98:
1f:ad:04:c8:0d:e8:3c:40:68:78:95:d7:96:a6:7f:ee:03:34:
03:a2:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:05 2025 by rpki-client