Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa
File: C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa (raw, json)
Hash identifier: 7Q2JdX8Sk5ec7oQfahOu2+Hx1b1UUmWGaNbADZbL4l4=
Subject key identifier: 0B:8F:8C:04:4E:CE:8B:C4:E0:92:AA:4E:53:12:A1:41:55:E4:C7:30
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 01942823153BB88CB42FF1AEAD48176EDBED
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa
Signing time: Thu 02 Jan 2025 17:49:35 +0000
ROA not before: Thu 02 Jan 2025 17:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204824
IP address blocks: 185.218.48.0/22 maxlen: 23
2a0b:d340::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:15:3b:b8:8c:b4:2f:f1:ae:ad:48:17:6e:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jan 2 17:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b8f8c044ece8bc4e092aa4e5312a14155e4c730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:38:43:02:9e:7d:22:03:3c:6f:ad:f9:0b:
bb:28:6f:41:9d:34:3f:f8:3b:6f:4a:98:14:d7:fa:
bc:c4:38:cd:ba:65:f9:06:31:74:fa:13:14:82:0c:
ae:e6:51:81:43:ac:a7:15:ac:c5:6b:95:c4:27:fc:
b8:a0:4c:1e:8c:f2:e4:cd:f8:5f:ce:01:6e:46:28:
4e:1c:d7:36:b3:2e:dd:39:5c:8f:81:ba:fc:30:4f:
cf:59:53:bc:71:4b:28:53:b5:88:f1:56:78:82:28:
fa:49:4e:ce:8e:11:a1:bb:04:c2:90:7a:de:d1:43:
eb:2b:bb:c5:de:75:ad:19:a2:b8:99:c5:46:41:59:
e0:1f:3e:be:d6:cb:a0:8d:21:e1:73:e6:4c:eb:87:
52:b1:f5:91:32:4e:f6:cb:99:f1:2d:3c:82:da:d1:
8f:d2:a7:8b:9b:06:d6:1e:4f:ff:c4:f4:31:83:8d:
25:1e:d4:cf:a3:b2:b5:ee:d0:64:b6:f1:b9:f3:2a:
7e:bf:b1:59:b9:6b:ac:93:1b:a0:ca:ce:c9:53:48:
00:cd:02:e3:ce:b5:24:07:22:94:72:ce:ca:4e:57:
38:fa:b8:46:10:91:c0:d0:8d:0a:50:4c:ba:51:8b:
7b:f6:16:1c:58:0f:03:1b:14:8e:9d:57:18:c4:15:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:8C:04:4E:CE:8B:C4:E0:92:AA:4E:53:12:A1:41:55:E4:C7:30
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.48.0/22
IPv6:
2a0b:d340::/29
Signature Algorithm: sha256WithRSAEncryption
1b:20:58:7e:5b:c5:4e:19:31:8b:5a:1e:73:ae:3f:eb:f7:01:
90:2e:d1:13:f6:d0:39:6a:b8:1e:aa:41:e3:14:31:32:b1:cc:
f8:d7:fa:8e:68:1d:cf:eb:26:54:a3:44:c7:0a:e0:3e:05:49:
e0:41:7b:53:be:20:49:32:53:d4:bb:ad:b7:72:ea:df:d6:57:
17:e4:ad:e0:d6:00:1d:59:b9:d5:85:47:ba:bc:24:bb:12:6c:
89:44:af:5b:d9:bb:a7:0f:ff:cf:65:44:fe:3d:4c:94:b0:fb:
eb:03:10:43:fb:1d:1a:3f:a9:fd:3e:e5:36:2a:98:e8:a8:bf:
21:9e:ab:8a:10:98:c3:46:e6:04:79:7f:54:32:45:97:fa:9d:
fe:83:a8:3a:35:ea:51:ad:99:5c:d6:65:2e:09:17:67:cb:ae:
d8:2b:64:0b:9e:46:d9:34:ae:f1:08:99:e8:a7:4e:3d:7c:0a:
4e:5e:85:4e:96:92:72:e8:1a:0f:05:e5:2d:57:52:05:57:a1:
90:7e:3b:c3:b3:aa:37:c5:35:86:d7:71:39:a8:a5:b8:0a:38:
c1:fc:0f:4b:6e:72:d9:28:ba:95:83:8c:d3:b6:9a:ec:4d:e3:
18:23:8e:92:67:1e:39:0c:05:a5:bf:c0:4d:98:15:9c:95:ad:
3b:6d:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:06 2025 by rpki-client