Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa
File: XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa (raw, json)
Hash identifier: G4U5UCTvd/mqwuDmGGvlZs+iLYiclpaGMY0aTsyHcfE=
Subject key identifier: 5C:46:AD:7E:0D:13:93:D2:A5:D6:55:62:04:F9:C8:6D:7C:39:17:31
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 0195D2C438932E6AC840171E8DFFF8EBAED1
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa
Signing time: Wed 26 Mar 2025 14:03:49 +0000
ROA not before: Wed 26 Mar 2025 14:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207073
IP address blocks: 185.150.248.0/22 maxlen: 22
193.193.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:c4:38:93:2e:6a:c8:40:17:1e:8d:ff:f8:eb:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Mar 26 14:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c46ad7e0d1393d2a5d6556204f9c86d7c391731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:3b:fe:05:ec:7d:a0:8c:39:56:19:ec:77:
d1:22:3b:29:c3:60:78:11:78:21:59:9c:12:b3:9c:
1d:25:61:f8:bb:3b:36:69:59:bf:c7:30:e9:4e:6c:
f9:4a:5d:94:06:2a:42:74:03:16:d5:3a:bb:b5:89:
62:a5:08:c1:4a:f2:89:24:c9:2d:88:45:23:8a:f6:
21:f8:d1:53:ad:02:d9:8b:84:d1:86:e0:13:15:71:
6b:a6:f7:d5:af:fe:e3:70:0b:25:60:e1:da:ec:45:
b6:6a:58:41:67:bd:1e:f7:1c:73:d8:4b:99:cd:79:
25:4b:69:0b:13:66:51:3d:60:39:d0:ce:fb:c3:f6:
36:ee:d2:81:9f:72:2a:fb:ce:fa:ec:5c:e8:b6:43:
7b:30:e1:c6:f4:d8:9b:a8:8d:aa:66:59:7e:8a:ff:
27:2e:c0:4e:88:6b:35:72:92:43:15:07:d9:ac:7d:
65:d3:aa:ef:1e:d0:af:03:ca:56:fd:47:2d:81:b2:
c2:67:df:51:5c:fe:23:b4:d6:1d:5d:ac:ea:12:48:
66:d6:0a:4c:6b:7e:03:5f:bd:81:7b:5a:94:fc:1a:
69:f3:b9:d6:4e:02:62:ef:5d:3d:dc:fd:1c:e8:9f:
04:7a:46:91:fa:23:8b:3f:7d:ea:8c:26:f7:95:3d:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:46:AD:7E:0D:13:93:D2:A5:D6:55:62:04:F9:C8:6D:7C:39:17:31
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.248.0/22
193.193.168.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f0:2d:da:87:41:7a:1d:6b:75:0e:21:a4:b5:f4:09:20:52:
df:60:21:f4:18:2c:f4:a5:a2:a2:e3:78:3b:ea:52:22:aa:a6:
43:40:da:33:5c:44:e3:4a:55:93:3a:71:cf:f9:a3:c1:20:39:
48:99:fe:41:ea:6c:34:9d:16:97:8c:4c:f9:9d:95:9c:f0:2b:
d6:a1:fd:34:aa:e3:fc:07:3d:05:45:93:33:b3:7c:63:2a:8b:
df:c2:61:57:b9:a7:c2:39:75:3e:6d:87:f6:59:66:71:73:39:
7b:2f:64:21:34:e0:c9:52:1e:ee:53:03:12:c8:f5:14:b8:ce:
ea:28:ce:8f:d5:c9:b0:38:1e:fc:e0:e1:42:2b:38:9a:6d:f6:
4f:be:2c:ee:4e:fc:9b:37:06:6c:07:5b:ac:bf:b8:82:b9:57:
78:09:60:cb:3e:d4:44:1b:1a:02:0a:e1:cf:49:6c:80:23:65:
01:b2:9f:7d:a4:68:f0:d1:7c:4a:a3:20:98:9b:16:d9:0d:87:
4a:12:c0:2d:53:c8:ba:65:9c:0c:47:46:4e:b8:82:42:e6:b9:
62:6b:92:69:48:98:19:79:13:eb:22:b8:59:bc:74:ee:45:b8:
14:bd:aa:57:24:e2:e4:ed:03:cd:ee:6d:79:00:57:38:11:f5:
49:d5:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:46 2025 by rpki-client