Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa
File: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (raw, json)
Hash identifier: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=
Subject key identifier: 11:68:FE:20:A0:5D:8B:E5:50:6E:0E:85:15:B2:22:69:A2:23:ED:40
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 01942369A465079F85C113ADE8FE9473F917
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202753
IP address blocks: 185.133.25.0/24 maxlen: 24
185.133.26.0/23 maxlen: 23
2a00:6700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a4:65:07:9f:85:c1:13:ad:e8:fe:94:73:f9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1168fe20a05d8be5506e0e8515b22269a223ed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:25:da:d3:e6:20:45:7f:c4:77:61:10:ba:
04:b6:dd:23:11:d7:5d:39:a3:3d:86:db:46:5a:ac:
89:15:ad:4e:aa:3e:85:86:b9:9a:2c:c3:a5:51:c9:
7e:cd:e9:8c:bb:cc:b4:43:94:8a:9f:ad:92:16:ef:
5d:9c:7a:48:6e:fa:f5:2d:7a:be:85:5f:57:bc:fb:
56:29:f2:3a:a4:b3:84:49:0f:5a:4a:0a:8c:26:a3:
70:2c:c2:e5:46:a6:43:42:22:5a:37:ea:d7:10:cc:
3e:e5:3f:40:f0:70:a9:59:71:b0:ba:9b:d8:10:d1:
f4:ff:4c:5d:6a:3a:1f:0c:40:0c:f3:3f:47:bc:a6:
b3:3d:af:ae:e0:e8:a3:1d:be:4a:10:c8:b2:10:1d:
86:b1:a9:67:94:db:74:96:1c:aa:50:e3:30:90:fa:
4e:12:95:10:e8:45:04:45:da:ee:26:96:35:c7:f0:
2d:ec:db:4f:0f:e2:ac:f9:e2:2d:8c:6b:4a:02:2b:
19:db:7b:e1:84:c2:f5:ac:7e:c3:49:11:dd:fb:29:
2d:50:df:99:f0:e6:91:78:00:d8:ca:f6:5f:d7:cd:
27:dd:81:ac:54:5b:29:42:89:01:a8:28:b4:1b:2a:
f4:6f:2a:a3:57:52:de:4f:40:90:29:b0:80:e7:d6:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:FE:20:A0:5D:8B:E5:50:6E:0E:85:15:B2:22:69:A2:23:ED:40
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.25.0-185.133.27.255
IPv6:
2a00:6700::/48
Signature Algorithm: sha256WithRSAEncryption
83:38:58:bf:74:20:95:66:77:7b:b4:52:44:02:87:13:42:2b:
28:d0:7b:9f:7d:98:e2:c4:e2:76:a1:d5:9c:a9:49:a1:d8:b0:
c8:b7:64:f1:68:1f:35:b7:df:80:fb:d3:e1:98:6c:7f:8a:a3:
92:d7:73:39:7b:60:74:d6:a0:ab:dd:5d:63:77:cc:2d:44:d4:
65:42:6e:a3:41:1e:75:8b:af:bf:31:7b:94:77:1c:3f:c3:45:
61:ef:d9:b8:cb:c2:94:d8:fe:5f:8d:11:f0:25:54:d5:71:b2:
4e:92:20:67:db:c5:d8:5e:5f:b8:ea:d7:fa:24:6d:10:cc:41:
be:41:fb:68:21:1b:41:e9:55:e9:2b:c5:b6:f8:68:5e:98:97:
d5:7c:1b:98:ab:68:e7:1b:7b:70:4e:fd:c8:4f:47:d0:13:bb:
d3:49:f7:88:90:01:5b:92:0e:f1:2a:8f:07:7b:aa:7c:55:2e:
b7:26:ba:6c:ef:c6:28:f8:e7:c8:c3:ad:a1:ee:51:8d:4f:65:
64:a6:a2:c8:d8:9a:96:93:d9:7c:58:84:fa:a6:24:c5:2a:4a:
16:f9:7d:80:4a:23:33:46:c3:59:39:d5:2f:f4:ed:54:ea:6c:
bf:17:3b:0c:3d:ab:9c:ec:8a:6d:0e:58:9c:c4:bc:aa:9e:47:
c4:89:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:01 2025 by rpki-client