Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa
File: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (raw, json)
Hash identifier: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=
Subject key identifier: 13:59:A1:05:13:0D:29:42:A9:60:2A:7A:97:A7:18:9A:69:E5:FD:2F
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 01950551340C3207F7576BE344485D6077CF
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa
Signing time: Fri 14 Feb 2025 16:36:02 +0000
ROA not before: Fri 14 Feb 2025 16:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214794
IP address blocks: 185.193.20.0/23 maxlen: 23
185.193.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:05:51:34:0c:32:07:f7:57:6b:e3:44:48:5d:60:77:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Feb 14 16:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1359a105130d2942a9602a7a97a7189a69e5fd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:16:0f:c9:0b:40:98:b3:fa:54:99:d5:ef:
fb:ed:34:e3:ae:9f:ca:1b:61:ac:b3:1e:ea:34:6f:
b1:a2:bb:16:22:7e:06:dd:bb:60:83:60:fe:25:15:
73:bd:12:c8:8e:21:66:5d:8c:75:4a:89:fb:1d:44:
70:c5:5d:91:07:7a:7d:a2:be:3e:b1:74:0e:ad:e3:
94:ef:81:51:b4:61:80:d4:0d:38:4c:43:55:95:b2:
9f:a5:6e:0b:53:d4:e6:0c:22:fc:46:a9:18:a8:96:
f6:85:cf:fd:04:63:61:2c:ca:34:0d:49:a5:04:6e:
88:0b:8f:f8:c4:a8:8f:6a:a4:c9:9d:dc:3b:10:fe:
74:e5:34:06:2b:a9:5a:88:ab:56:63:cc:1d:a0:e5:
d8:f9:97:86:54:31:8c:e0:5e:29:38:f0:7e:15:e4:
69:ce:ac:50:e6:b1:27:65:51:a4:e4:ce:ba:6f:d9:
97:16:f5:61:9e:01:09:9c:75:57:fe:2e:42:0e:af:
19:2c:2d:51:81:6f:5f:09:1a:8a:b1:14:b7:da:c7:
0f:df:b2:2c:06:82:aa:63:db:77:6f:20:ff:31:d4:
b4:55:56:11:e0:d6:f8:3f:5c:a1:91:f8:4e:37:11:
4e:82:ae:17:de:f6:3d:0f:d1:64:96:6c:5d:95:30:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:A1:05:13:0D:29:42:A9:60:2A:7A:97:A7:18:9A:69:E5:FD:2F
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.20.0/22
Signature Algorithm: sha256WithRSAEncryption
e0:c3:6e:a9:75:c8:f3:e7:32:56:eb:d0:73:fd:4b:8c:3a:7f:
48:c9:c7:85:d8:c5:4f:10:70:41:45:a9:29:11:70:8f:f8:ee:
17:40:b5:a5:55:c7:2a:b3:7f:a0:9e:d8:b3:52:77:df:fb:d3:
44:ce:f9:c0:d1:55:9e:81:a1:c6:5d:84:c0:30:fa:60:95:88:
07:14:50:f2:93:07:0c:ea:0b:5a:73:19:83:d2:9d:de:4b:7c:
8a:f7:32:e2:e5:76:54:03:7f:2f:ec:4c:a2:ef:f8:ef:6b:39:
d4:b2:82:48:a6:18:ae:7f:1a:dd:b2:2a:89:b9:ec:8b:65:77:
e2:b1:59:a9:96:a0:c1:51:dc:78:e0:57:0c:df:07:45:30:bb:
52:67:02:4c:88:a1:db:2b:fe:12:7d:84:f1:fe:8b:74:22:1d:
d3:16:53:9a:ee:2c:17:98:06:13:16:42:f3:64:12:69:99:51:
dc:39:1c:3f:0a:e1:61:c4:d4:45:bb:9f:ed:94:39:38:a9:ca:
d0:84:86:07:8b:35:cc:59:b1:c2:a4:d0:23:f5:8a:a8:c9:79:
a0:89:ca:45:e7:96:c0:c2:45:62:15:fe:ee:ac:f8:93:b8:31:
ec:02:94:eb:ef:64:54:55:65:4c:a2:d7:67:d5:37:9c:8f:47:
c7:eb:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:21:26 2025 by rpki-client