Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/9e1MUKXIxCIaICqEHe7UTJr8ShE.roa
File: 9e1MUKXIxCIaICqEHe7UTJr8ShE.roa (raw, json)
Hash identifier: Btfq5eeDOydIVpZWwotHSouKFShIpZvMwrVNuJGrwJc=
Subject key identifier: F5:ED:4C:50:A5:C8:C4:22:1A:20:2A:84:1D:EE:D4:4C:9A:FC:4A:11
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0194CE4CC9C5CEBE35F85838DEE5F54B10F5
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/9e1MUKXIxCIaICqEHe7UTJr8ShE.roa
Signing time: Tue 04 Feb 2025 00:12:06 +0000
ROA not before: Tue 04 Feb 2025 00:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203459
IP address blocks: 185.122.255.0/24 maxlen: 24
185.133.224.0/24 maxlen: 24
185.133.225.0/24 maxlen: 24
185.133.226.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
2a06:7fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ce:4c:c9:c5:ce:be:35:f8:58:38:de:e5:f5:4b:10:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Feb 4 00:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5ed4c50a5c8c4221a202a841deed44c9afc4a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:d7:ba:b9:98:9c:f3:dd:1f:26:90:0d:db:
9b:ae:a3:bc:38:84:c7:4f:f1:d5:91:73:03:25:f6:
d9:ee:94:bc:ac:54:08:17:9d:2b:89:74:b3:32:72:
51:32:1f:46:fc:93:29:dc:70:02:09:4c:4d:1b:af:
08:13:54:27:f4:f9:9e:ba:b7:88:2f:23:4f:f8:64:
b3:28:6e:e3:9c:71:f2:bd:3d:1d:cd:45:44:d1:45:
4e:09:e0:7d:cb:95:54:d2:13:3f:95:27:37:55:08:
ec:b8:e4:8d:69:aa:29:43:c3:33:1c:5b:23:01:e6:
16:7b:80:20:73:f9:2e:e4:fe:60:b2:41:02:fb:19:
fe:1e:84:bb:8d:d9:51:20:fb:88:00:da:0c:e0:88:
85:35:d2:d2:08:8d:f5:a3:2a:9c:75:d1:d8:69:b1:
22:28:5f:ae:1e:28:17:ba:64:22:21:c2:f5:d5:3f:
f1:a0:1f:5b:bd:19:d2:65:2c:f3:8f:1a:04:79:ac:
56:d6:17:e5:7b:e8:9a:67:0e:43:ec:15:b9:68:0c:
1d:e9:6c:b9:ae:0e:d7:3d:24:b4:de:ae:3f:0c:ea:
81:68:10:76:26:bd:93:70:31:cb:ce:a3:3e:1c:b5:
98:51:a0:23:29:ef:33:be:7e:aa:6d:fc:30:f0:95:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:ED:4C:50:A5:C8:C4:22:1A:20:2A:84:1D:EE:D4:4C:9A:FC:4A:11
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/9e1MUKXIxCIaICqEHe7UTJr8ShE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.255.0/24
185.133.224.0/22
IPv6:
2a06:7fc0::/29
Signature Algorithm: sha256WithRSAEncryption
e5:54:f0:f1:b7:66:fc:52:0a:cf:9e:04:fb:42:b9:09:23:86:
cb:10:8a:f9:3e:17:75:18:2f:ad:cf:de:ee:c1:60:33:65:cc:
bc:df:5e:f1:ad:c4:a9:6e:49:f9:41:5c:0f:69:11:12:38:6b:
87:39:65:e1:8c:d8:81:41:4c:5b:3e:92:9b:3a:b2:84:3e:9f:
82:4e:bc:70:da:0d:35:23:2c:10:41:02:9e:57:33:d0:61:b6:
13:9f:8e:01:ca:86:95:e4:49:3a:01:5a:46:f4:c4:da:69:50:
7c:8e:4b:53:d0:d4:7d:d3:37:f2:dd:f2:80:ab:4c:6b:52:81:
10:08:68:03:8b:7f:c5:12:9c:af:db:2e:1c:90:88:51:f1:05:
b2:ea:02:9f:4c:1e:5f:b9:cb:8b:d7:7f:2c:4f:2a:a2:8b:8a:
3b:67:a1:1a:e6:bb:7f:b7:93:c5:71:e1:57:19:d6:f3:b0:f5:
a6:a8:08:51:0d:29:69:d9:3d:ec:5d:5b:69:e6:20:54:d9:9c:
38:2f:62:b5:7c:3e:a9:ff:a7:2a:a6:1a:85:25:f5:5d:36:c9:
c3:64:49:ab:ff:cf:13:b0:bb:5d:d5:21:6e:f1:d2:26:72:5e:
f8:d6:b5:29:2b:dd:8c:2d:a7:7e:4c:b3:de:fe:7b:1c:f5:0e:
d1:0a:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:50 2025 by rpki-client