Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa
File: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (raw, json)
Hash identifier: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=
Subject key identifier: 1B:50:AB:00:E3:94:3E:FC:8E:18:EE:15:AA:5F:B6:FA:B4:F5:9D:55
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019426D92B942E6E78EFAD228D83637FC5A0
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa
Signing time: Thu 02 Jan 2025 11:49:14 +0000
ROA not before: Thu 02 Jan 2025 11:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201719
IP address blocks: 185.65.120.0/22 maxlen: 22
185.65.120.0/24 maxlen: 24
185.65.121.0/24 maxlen: 24
185.65.122.0/24 maxlen: 24
185.65.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:2b:94:2e:6e:78:ef:ad:22:8d:83:63:7f:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jan 2 11:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b50ab00e3943efc8e18ee15aa5fb6fab4f59d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:92:01:9e:87:55:af:fb:92:37:26:41:22:
f3:6c:70:bb:dc:8c:cf:0c:8a:cd:f4:85:f5:95:e0:
47:94:66:6b:30:c4:fe:c1:03:c5:d1:b0:11:c4:5c:
e7:80:91:22:a1:55:21:ac:aa:58:73:e5:99:09:c9:
40:8d:04:58:5e:88:c4:4d:68:ce:e4:62:e9:a6:aa:
f5:d0:e4:c2:82:22:1d:4c:52:c0:ad:69:ae:c8:d2:
78:6a:6b:45:b0:84:ec:cd:0b:f8:9a:c7:b3:aa:7d:
dd:d9:52:78:77:a4:12:39:74:ee:a5:7b:94:4c:85:
37:83:63:8b:9b:fb:3a:25:9d:64:bc:3b:2a:7c:cf:
e7:a2:a2:78:8d:e0:f6:62:de:4c:d4:b6:0a:74:e5:
c3:25:0d:0d:c1:20:2e:49:45:ec:a3:b0:e5:a6:3a:
16:0f:d1:e1:56:df:33:43:95:42:25:09:2f:77:d6:
1d:c2:d0:d7:74:ff:f6:40:7e:a2:2e:1a:48:ed:24:
c6:cd:cb:f1:59:79:6e:95:58:e0:34:87:5f:64:97:
3e:03:80:fc:d8:0b:29:33:b7:34:76:d3:00:66:29:
80:fc:5b:62:54:06:da:f9:82:a3:e4:1c:11:58:df:
7e:51:73:c0:17:cd:0c:96:90:09:80:d5:fb:e3:d7:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:50:AB:00:E3:94:3E:FC:8E:18:EE:15:AA:5F:B6:FA:B4:F5:9D:55
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:d7:f3:e9:6b:99:a2:7f:58:29:4d:67:a1:b4:3d:61:df:31:
c9:a9:2f:6d:4b:cd:e9:75:85:f5:52:f6:60:6c:30:5a:f0:02:
e2:17:c6:d3:5d:41:76:35:3b:10:b8:62:65:c9:9c:e7:e5:7d:
8c:3b:1b:11:91:7f:39:1e:6a:32:d9:c3:7f:f0:b6:e2:2a:20:
ac:35:72:9a:21:a2:7e:cc:19:cb:68:c9:b1:45:26:30:70:65:
98:0e:3c:c4:76:30:a2:21:89:b8:73:ac:17:c0:ac:0b:c8:73:
37:ef:21:16:4f:01:5a:8e:e8:9f:19:16:5b:55:f8:91:79:4b:
c7:88:dc:f8:2c:0a:41:fc:d6:f3:2f:76:75:fb:39:41:70:54:
ae:83:7e:d6:ac:d3:46:d3:62:b3:66:81:66:7f:5d:f5:1f:e1:
b3:46:31:57:8b:2b:65:7c:0a:f0:a8:28:b7:ce:a0:dd:05:e4:
bf:ee:2e:9d:ee:a6:79:8c:52:d2:77:f1:92:d1:e3:78:29:f7:
1e:ab:bb:84:d9:3e:92:8c:1b:ea:f6:6e:ef:f4:7d:3d:19:97:
0e:59:46:16:f7:c6:8a:e3:cb:61:2d:12:ea:21:85:e3:f0:9a:
e1:94:4d:3b:2d:f2:42:67:92:ea:e1:0d:f2:d0:de:9c:25:73:
57:7f:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:03 2025 by rpki-client