Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/1-lHFpavrRPAxi2mxTPDKpLPcy14.roa
File: 1-lHFpavrRPAxi2mxTPDKpLPcy14.roa (raw, json)
Hash identifier: 2r+qTZtO07hGXOIWN+DFEL0ZIWfOdC+x8G7I0hOMy20=
Subject key identifier: FA:51:C5:A5:AB:EB:44:F0:31:8B:69:B1:4C:F0:CA:A4:B3:DC:CB:5E
Certificate issuer: /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial: 019426D92C81FDEDEE102BA4116E9E73C780
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/1-lHFpavrRPAxi2mxTPDKpLPcy14.roa
Signing time: Thu 02 Jan 2025 11:49:14 +0000
ROA not before: Thu 02 Jan 2025 11:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204366
IP address blocks: 185.250.64.0/22 maxlen: 22
185.250.64.0/24 maxlen: 24
185.250.65.0/24 maxlen: 24
185.250.66.0/24 maxlen: 24
185.250.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:2c:81:fd:ed:ee:10:2b:a4:11:6e:9e:73:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Validity
Not Before: Jan 2 11:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa51c5a5abeb44f0318b69b14cf0caa4b3dccb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:fb:97:6f:4b:a3:15:a2:41:3c:8f:fe:27:
7f:59:5e:49:df:c9:33:56:79:26:8e:79:15:0c:01:
bb:26:3e:95:fa:70:d2:4c:d5:9d:d9:08:d2:d7:fc:
2e:7f:1b:1a:e7:14:f1:e0:7b:c3:c8:3a:85:26:78:
1c:e7:23:8a:cc:62:ea:43:6b:16:94:b6:7f:a3:af:
99:45:35:70:e7:f8:d6:97:a7:59:e6:58:91:15:c6:
3e:9d:e9:ab:51:a8:3b:02:36:9b:f7:3b:b4:51:cf:
13:e6:1a:a5:18:c6:19:ba:76:2d:68:3b:53:f9:db:
e8:79:c2:7f:de:c9:7a:10:76:78:bf:91:67:41:46:
a2:e7:0a:69:3a:18:96:25:4f:76:5b:de:f9:48:2e:
cb:26:ad:cf:a0:2a:29:01:04:67:6e:b9:ad:72:d5:
b2:e3:98:51:12:52:2b:dd:1e:9a:09:3d:09:c1:58:
ad:4e:b8:12:34:f1:4b:5a:00:2e:2a:f3:f7:b8:b2:
30:19:68:76:65:11:63:10:68:18:61:9b:86:db:13:
d9:3e:f4:d3:2c:8e:2e:f8:56:f0:31:c3:87:7c:95:
1f:19:9a:4e:49:d1:40:6b:84:ec:12:c1:50:08:17:
86:83:42:52:9a:2d:fe:be:82:5a:50:96:d7:13:5f:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:51:C5:A5:AB:EB:44:F0:31:8B:69:B1:4C:F0:CA:A4:B3:DC:CB:5E
X509v3 Authority Key Identifier:
keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/1-lHFpavrRPAxi2mxTPDKpLPcy14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.64.0/22
Signature Algorithm: sha256WithRSAEncryption
88:3a:f4:18:58:f7:fe:20:5d:ae:04:d1:26:d8:cb:b4:d0:21:
fe:f6:32:42:b9:2c:36:41:58:77:71:2a:e7:53:13:af:16:8f:
e4:62:12:ba:f1:94:ac:32:e9:92:a5:46:0f:9d:7a:0c:8c:26:
90:03:66:ef:2d:70:6c:2e:73:38:52:07:f5:2d:04:c1:64:83:
bc:11:b5:17:92:e9:66:54:f3:51:b5:36:38:e7:36:eb:15:a2:
cc:e7:77:55:0d:c8:13:b2:4d:84:f8:c4:4f:29:f6:b7:9c:4d:
1c:05:fe:fa:e3:ae:e0:b5:08:a4:58:84:61:73:ae:96:ff:a9:
3d:5a:8c:80:51:f5:52:82:de:c3:9e:33:95:40:3d:87:f2:ef:
b2:29:5f:bf:9b:df:c5:61:f9:17:22:1c:9c:41:07:79:34:0a:
3f:f7:3b:b5:de:fa:12:84:c6:2b:56:93:de:11:7e:4e:b4:d6:
4e:9c:51:6e:9b:24:b0:9e:64:25:26:b7:40:cb:ff:a2:b5:0c:
1a:e3:93:6f:ba:b1:25:44:2d:70:b2:dc:12:0d:49:41:f1:3a:
8a:c8:9c:7b:9d:a7:b0:c6:9a:00:f5:e6:b1:1b:49:ce:86:82:
54:87:46:1a:d9:6c:a8:22:63:98:ed:d6:44:82:96:ce:ec:34:
2d:70:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:42 2025 by rpki-client