Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/iBTxA6wf53PMi32aogrQ-jvltRQ.roa
File: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (raw, json)
Hash identifier: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=
Subject key identifier: 88:14:F1:03:AC:1F:E7:73:CC:8B:7D:9A:A2:0A:D0:FA:3B:E5:B5:14
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 0194236A4BEECC94B57826974D32D3373C5C
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/iBTxA6wf53PMi32aogrQ-jvltRQ.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207948
IP address blocks: 185.1.149.0/24 maxlen: 24
2001:7f8:e3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:ee:cc:94:b5:78:26:97:4d:32:d3:37:3c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8814f103ac1fe773cc8b7d9aa20ad0fa3be5b514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:9d:97:00:30:58:db:d8:32:73:d7:15:b7:
3a:c9:f8:4a:56:d6:2a:3a:f1:a0:07:fb:d7:d5:fa:
34:e0:63:f6:f8:ea:49:be:6b:5a:01:62:4c:3d:b6:
b6:f6:4f:00:14:10:a7:94:79:5c:72:c4:b8:17:3d:
8b:dd:a6:34:bc:92:18:f0:03:28:ea:ea:b2:b2:cf:
5a:a5:bf:55:6b:81:d9:b9:2c:e1:2d:68:d4:28:8d:
37:a7:86:a0:d0:f5:b0:fa:88:48:d9:a2:7a:7d:85:
4d:5c:c6:20:b0:e9:01:c8:da:b0:04:2f:14:b0:cc:
46:03:6b:ee:90:db:6e:9a:48:5e:9f:1a:69:d4:48:
bb:f1:26:cd:7c:f7:6b:c1:0e:60:b6:49:8c:04:a1:
68:e4:74:06:f8:a6:f0:22:00:83:81:c1:69:3a:c2:
0e:92:2b:33:08:66:dc:5b:54:6d:b3:66:a2:f1:fa:
13:36:f6:4d:d4:b6:38:86:58:c4:9f:5d:12:93:48:
53:d4:75:19:49:f7:0f:5e:4f:b4:c0:fc:e3:f4:df:
c4:2e:ae:b8:aa:09:74:9a:48:f2:e8:a1:a7:ab:78:
a2:4d:4f:72:a4:ac:dd:a7:b3:0c:10:52:42:04:03:
ce:41:a7:22:e2:55:25:61:ca:28:13:f0:38:f9:d9:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:F1:03:AC:1F:E7:73:CC:8B:7D:9A:A2:0A:D0:FA:3B:E5:B5:14
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/iBTxA6wf53PMi32aogrQ-jvltRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.149.0/24
IPv6:
2001:7f8:e3::/48
Signature Algorithm: sha256WithRSAEncryption
72:1a:52:1b:a3:2a:da:f8:f5:2d:0f:34:f4:68:dd:e8:51:96:
f7:b5:ad:04:4d:0e:fb:84:98:5b:dc:69:23:d9:e8:f3:36:7d:
44:43:07:a1:0d:fb:43:49:0a:51:64:b7:37:25:9d:1d:f6:4d:
2f:47:98:34:82:f1:65:a3:16:9c:2a:8b:48:06:3a:22:a3:69:
81:a9:36:6e:a1:01:69:dd:73:b4:f8:ad:8d:7a:7b:1a:5f:6a:
a3:af:0d:d4:a6:ee:42:ed:db:a8:d1:61:64:36:30:15:71:ea:
f0:bd:4b:7c:fd:17:59:05:82:31:29:d5:09:26:bc:5a:56:96:
c2:4d:8d:0b:68:fb:e5:92:ed:5d:5e:a7:13:85:fe:45:d0:b7:
c8:ea:7c:00:33:2a:40:fe:3a:79:64:a2:06:a9:9a:1a:b8:cb:
80:3a:6f:62:56:36:09:96:d8:7b:32:13:5b:b3:ce:89:d6:e7:
88:b5:20:4b:99:5d:09:65:36:da:f8:78:f7:2b:73:58:9e:bc:
64:de:51:e8:a7:98:c1:b6:94:ed:da:f1:1b:f1:2e:bd:87:ff:
a2:5f:72:17:cd:ed:d6:1c:58:27:c3:4e:88:bd:99:18:9c:2b:
9b:1a:6b:fa:7e:33:dc:6c:db:de:94:9c:73:de:38:9a:4d:4e:
d9:e1:1d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:10 2025 by rpki-client