Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/pZSrV2l3WhVw5oetxkzKTuFut08.roa
File: pZSrV2l3WhVw5oetxkzKTuFut08.roa (raw, json)
Hash identifier: OVPrfbWkq15CVQU+AkW9e1dfy6vyOgMcPm5QJ7yajMY=
Subject key identifier: A5:94:AB:57:69:77:5A:15:70:E6:87:AD:C6:4C:CA:4E:E1:6E:B7:4F
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9EC0B73763BE26F4F253E0CE8169F
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/pZSrV2l3WhVw5oetxkzKTuFut08.roa
Signing time: Thu 02 Jan 2025 11:50:03 +0000
ROA not before: Thu 02 Jan 2025 11:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3209
IP address blocks: 185.45.248.0/23 maxlen: 24
185.45.250.0/23 maxlen: 24
194.126.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ec:0b:73:76:3b:e2:6f:4f:25:3e:0c:e8:16:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a594ab5769775a1570e687adc64cca4ee16eb74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:e0:86:d5:c1:44:fb:c5:2b:67:44:bd:99:
c5:a8:c3:d3:05:17:9e:59:4f:0e:67:89:1d:d5:54:
58:01:f1:c1:97:83:3a:7d:fd:59:1a:f8:f2:2a:5a:
34:f7:f6:18:7b:36:2b:c6:9b:82:88:c4:1d:3f:9f:
8d:97:b9:97:87:39:cb:eb:c2:cd:46:d0:9d:4b:de:
e0:3c:3d:e7:28:d4:0b:ec:dd:88:d9:d3:42:b0:b8:
38:f2:04:46:15:2d:8b:17:1e:4b:9c:aa:f1:85:f8:
de:82:7e:ec:e8:44:ba:63:1f:46:8a:d6:c1:e6:ec:
24:52:2a:6f:99:85:aa:9f:37:18:67:e0:1e:41:84:
b8:04:58:f3:05:30:71:d3:c2:8d:c4:c8:07:99:01:
99:64:83:cd:7f:27:78:5d:12:e8:34:b9:fb:62:8b:
d8:04:8b:10:1d:af:12:03:7b:60:16:e7:66:a8:17:
de:bb:3e:27:2c:c2:ef:09:f4:e3:93:ca:0d:45:b5:
41:15:ab:25:03:43:5a:42:65:f6:e8:4c:ae:b5:96:
41:5c:39:5d:1b:56:af:c6:81:a3:4b:b3:17:2a:b9:
d5:c4:3c:90:ef:67:bc:b4:98:12:3d:43:6d:07:14:
ea:41:07:ce:60:d2:43:c2:cc:b5:d1:9b:36:bf:37:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:94:AB:57:69:77:5A:15:70:E6:87:AD:C6:4C:CA:4E:E1:6E:B7:4F
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/pZSrV2l3WhVw5oetxkzKTuFut08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.248.0/22
194.126.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c4:ac:cd:11:a8:5f:22:d8:7d:e6:11:2d:c7:84:eb:43:c1:
5d:79:53:b4:63:13:ca:8f:4f:b6:f9:13:01:cf:33:42:f5:bb:
45:f9:47:d2:32:75:71:ed:1d:c6:64:08:31:bc:e3:3e:b7:ae:
e4:94:28:26:98:29:31:15:90:da:ea:dc:35:cd:39:6c:32:42:
b7:b1:35:05:64:01:5c:f3:9a:79:a0:c2:61:05:82:b6:30:25:
c4:a5:a5:31:76:a1:73:f6:6b:07:89:6a:05:a5:5f:5e:7f:5c:
ec:2f:b6:8d:ce:b2:e5:e8:f8:92:c0:50:c1:16:6a:fc:6a:0f:
35:51:5f:27:99:7b:93:88:c3:1d:3e:1e:a4:de:4e:be:34:8b:
cd:28:a0:fe:80:1d:58:76:e4:bc:2d:e5:62:42:0c:33:a9:e6:
96:79:08:9f:bc:51:14:81:f7:af:b1:48:dc:da:73:5e:75:5c:
1b:c9:c8:00:7e:44:49:4a:7b:03:4e:97:35:c1:b9:0b:42:cc:
ca:2c:3a:4b:aa:c0:6a:e2:ad:5c:fc:c2:ee:3d:b3:cd:a2:bf:
57:fa:c8:62:4b:23:63:c5:43:42:82:18:1d:57:10:67:c1:1f:
a7:70:6b:41:d1:4e:15:cd:c2:75:d7:e8:47:41:e3:ad:25:b7:
b1:5a:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:11 2025 by rpki-client