Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/te1BEYyknIHyu0_rPD9wouFhl2w.roa
File: te1BEYyknIHyu0_rPD9wouFhl2w.roa (raw, json)
Hash identifier: mjtcxqaj0wdzyjfK3XlAxWvFesxIKgf5lnnf0YrLm5M=
Subject key identifier: B5:ED:41:11:8C:A4:9C:81:F2:BB:4F:EB:3C:3F:70:A2:E1:61:97:6C
Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial: 019421B1DF1BD0933F2E235260CCFF2A7646
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/te1BEYyknIHyu0_rPD9wouFhl2w.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201971
IP address blocks: 185.57.188.0/22 maxlen: 24
2a04:de40::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:df:1b:d0:93:3f:2e:23:52:60:cc:ff:2a:76:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5ed41118ca49c81f2bb4feb3c3f70a2e161976c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:57:d0:41:d1:7f:58:82:f7:51:81:d5:be:
e0:59:2e:3a:d7:d4:c1:bb:93:a9:5e:9e:b6:6a:58:
76:85:d6:6a:c3:4d:77:0f:fc:9b:8c:a2:55:73:46:
58:c8:a2:5e:3f:05:57:ea:fc:a5:02:e1:f9:98:4d:
31:b1:7c:48:93:85:e9:16:d1:dd:c4:e1:3e:6d:68:
6c:d8:f1:a2:2f:32:5c:33:8b:0b:3d:9f:98:36:21:
22:d1:6a:f5:dd:19:7e:f0:5d:b8:ac:16:15:4b:6f:
47:fa:1b:18:6b:21:a3:b0:9d:a6:23:c9:92:87:f7:
c1:42:84:0d:2e:ae:44:f9:3f:85:6f:4e:aa:6d:e0:
55:47:bb:ca:1a:49:ed:33:91:6b:77:dd:85:d9:dd:
35:f1:e5:ad:d5:3f:2b:18:83:5b:87:8f:e2:08:1c:
25:81:af:0c:2a:03:71:60:8a:36:10:22:45:46:d5:
ff:cf:e6:78:47:e2:74:93:32:98:d4:70:a1:e7:65:
6a:3c:71:a7:5a:5a:bd:bc:fe:b6:d1:17:87:da:59:
46:94:e4:d5:ac:31:6f:89:24:b3:bc:e5:82:7c:e6:
de:68:58:dd:61:ef:b3:87:4e:5a:d6:43:72:34:1c:
a5:9c:83:39:19:5b:13:db:12:12:61:3a:88:88:d2:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:41:11:8C:A4:9C:81:F2:BB:4F:EB:3C:3F:70:A2:E1:61:97:6C
X509v3 Authority Key Identifier:
keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/te1BEYyknIHyu0_rPD9wouFhl2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.188.0/22
IPv6:
2a04:de40::/29
Signature Algorithm: sha256WithRSAEncryption
35:9b:a4:7c:6d:4d:c2:80:b0:f6:55:be:0f:61:c7:27:b2:e5:
a0:3a:8b:8f:96:51:50:17:f2:26:dd:ab:36:9b:8b:b5:f5:50:
36:22:26:ea:a7:da:e5:7e:42:80:e4:04:0e:d1:ed:4e:33:46:
b8:4b:b1:06:6f:0f:eb:03:29:ff:a0:45:08:85:30:db:3c:23:
c5:fe:9f:55:b7:5d:ca:28:72:2d:11:cf:8c:d2:b3:45:0c:96:
8d:19:a5:12:e9:f7:ef:cb:52:5a:15:97:b7:97:ac:c7:cb:39:
ac:4d:85:10:74:80:e6:3d:4f:aa:19:92:1c:46:a8:04:5f:75:
ba:80:da:2e:ee:c1:e5:32:82:c5:22:4f:39:50:e4:5f:21:08:
97:b9:d7:79:db:fa:3c:63:a4:66:fa:19:50:d5:4c:df:b2:f9:
1c:05:55:a8:b7:02:45:07:c1:34:51:c9:1b:2f:b7:3a:c2:a6:
a5:93:68:2a:90:a2:1f:41:01:fd:06:d1:05:9e:1c:db:a1:66:
59:64:f7:da:3d:ac:4b:e3:32:7a:c2:49:ca:86:4f:d2:47:1f:
3f:8d:b2:c2:95:8b:48:ca:c2:ed:b0:4b:6e:d4:01:ae:94:a0:
49:56:45:eb:25:53:3a:d9:dd:74:cc:74:9a:32:0f:c4:cc:b9:
41:d3:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:19:35 2025 by rpki-client