Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/CELUTpBmSuqhjwRRI1l2uOlW34U.roa
File: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (raw, json)
Hash identifier: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=
Subject key identifier: 08:42:D4:4E:90:66:4A:EA:A1:8F:04:51:23:59:76:B8:E9:56:DF:85
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 01942143D8B26CE9DA28D4045E51FB030F22
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/CELUTpBmSuqhjwRRI1l2uOlW34U.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207603
IP address blocks: 185.101.140.0/22 maxlen: 22
193.41.58.0/24 maxlen: 24
2a10:5940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d8:b2:6c:e9:da:28:d4:04:5e:51:fb:03:0f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0842d44e90664aeaa18f0451235976b8e956df85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:04:8f:01:a2:18:f7:b4:77:1c:27:ce:dd:
53:e2:61:28:56:6a:aa:f5:49:0a:12:19:8f:74:44:
f3:e3:d7:60:be:40:c2:d8:9a:02:8c:7c:2a:52:74:
97:5f:71:83:0a:77:b7:f1:0c:83:53:88:0e:ce:f6:
1a:af:49:bf:97:83:b1:3e:c3:cf:aa:2b:c8:cd:db:
7a:ea:a6:a1:11:17:7b:4b:70:bd:4f:be:10:12:fc:
f3:60:24:e5:c2:3f:f3:a8:69:28:55:80:af:46:ad:
44:0b:fc:d7:3e:d7:ef:9f:2f:29:b1:56:ba:e5:91:
cf:f0:3b:17:f3:4e:00:29:ea:10:a6:c2:e6:22:b8:
c8:d0:12:b5:fe:76:b9:4e:41:f6:28:bf:04:c6:46:
b6:85:72:eb:f9:cb:38:0a:45:69:f2:d7:52:a3:09:
16:3b:42:3e:9b:81:4e:2e:31:a9:51:74:03:6c:c8:
42:e4:73:11:93:2a:b0:82:32:f6:37:c2:7d:3a:df:
cd:1c:da:8d:08:56:c7:86:52:6e:7a:b0:0d:9b:b1:
7e:45:f7:22:3d:d4:cc:cd:21:3b:f6:91:39:93:3b:
8b:dc:59:4b:6a:65:56:f1:26:a0:ec:3e:0a:4a:8f:
09:c3:09:a9:4b:16:83:c9:06:41:81:9c:20:a2:08:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:D4:4E:90:66:4A:EA:A1:8F:04:51:23:59:76:B8:E9:56:DF:85
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/CELUTpBmSuqhjwRRI1l2uOlW34U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.140.0/22
193.41.58.0/24
IPv6:
2a10:5940::/29
Signature Algorithm: sha256WithRSAEncryption
91:e3:f4:f6:8f:e4:9c:1e:f1:51:3e:66:d9:0b:20:81:89:41:
07:7f:bb:01:82:4d:f7:87:16:c8:a0:87:b7:3f:29:3a:23:9d:
04:88:12:da:59:ea:f5:b5:2d:e5:bd:2a:8a:88:47:db:29:76:
50:54:a9:7e:35:d5:df:a5:8e:4d:25:52:ac:7c:eb:f6:fc:76:
6e:8d:52:ab:19:59:b5:e5:9b:f6:dc:aa:f6:a0:a3:e4:88:9b:
5d:f8:c2:ff:4e:1e:4c:33:28:79:97:bd:53:c1:38:a2:7b:38:
0e:00:d6:4d:37:17:4f:f6:21:f9:21:a1:a0:a2:68:d0:e1:d0:
0c:74:e5:70:78:31:27:34:16:a9:30:d7:f8:16:8f:a4:82:2f:
be:3f:c3:3f:e7:76:35:63:a9:e4:37:f9:15:2d:d6:0e:91:b5:
b7:97:eb:b8:fd:21:01:63:2d:66:b4:7e:65:29:79:11:d6:0a:
f4:7b:0f:b0:1a:d5:51:1e:9b:fa:14:d6:3f:e9:1a:8d:4f:ee:
53:5a:c5:65:b4:c6:b8:af:1f:4d:e5:26:2e:a0:d8:37:65:fb:
5c:2d:4c:32:8a:b8:cd:73:57:ec:11:a2:ef:72:be:e4:e4:f5:
e1:5e:ea:40:29:19:56:7a:be:f3:b3:27:26:2a:37:83:de:98:
74:5c:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:13 2025 by rpki-client