Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/diSC8nPgEABB-CJx_ksMgSsNles.roa
File: diSC8nPgEABB-CJx_ksMgSsNles.roa (raw, json)
Hash identifier: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=
Subject key identifier: 76:24:82:F2:73:E0:10:00:41:F8:22:71:FE:4B:0C:81:2B:0D:95:EB
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019427B5CF2AFB45648204ABE344C4510D61
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/diSC8nPgEABB-CJx_ksMgSsNles.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201152
IP address blocks: 185.55.248.0/22 maxlen: 22
185.55.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cf:2a:fb:45:64:82:04:ab:e3:44:c4:51:0d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=762482f273e0100041f82271fe4b0c812b0d95eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:1a:6c:49:83:76:31:41:66:b3:c8:94:67:
b8:b8:21:f0:2c:5c:df:cc:d5:d0:f4:90:42:51:76:
a0:c5:b0:be:56:39:38:b8:ca:92:1a:6c:b2:e0:5d:
51:ea:3d:25:74:ce:92:4d:1d:7e:26:94:0d:2d:2b:
a7:11:f8:b2:54:93:7c:2c:bd:88:eb:a8:18:a0:3b:
54:4a:0c:c6:72:51:a0:d4:1f:a0:90:f7:52:b4:4b:
09:29:a5:14:75:9e:51:e5:8e:e9:8a:95:92:d1:c3:
d0:05:7b:34:ee:27:54:9a:ef:45:89:d8:6e:dd:5e:
f2:7c:f8:9e:6a:0a:b3:cf:10:20:e9:43:b3:68:21:
7e:94:c1:ad:c2:76:0d:45:a7:07:aa:6a:64:40:3b:
75:0e:57:19:3a:6b:f1:2f:e9:fe:7d:d4:75:12:48:
a4:17:d1:69:a6:ab:3f:6b:cf:a2:ad:52:af:2a:95:
9b:6d:4d:df:6e:19:3e:82:61:ae:b3:a7:01:e2:4c:
56:c3:75:68:22:28:c7:9c:ca:27:49:1f:53:76:90:
d5:6b:46:e1:a2:15:ed:aa:6f:13:38:db:f5:e5:ec:
ab:b2:1c:53:15:04:b7:4a:6f:0f:a3:8a:ca:62:5c:
05:bd:4b:15:67:29:2f:3d:54:b6:5c:42:04:bb:da:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:82:F2:73:E0:10:00:41:F8:22:71:FE:4B:0C:81:2B:0D:95:EB
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/diSC8nPgEABB-CJx_ksMgSsNles.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.248.0/22
Signature Algorithm: sha256WithRSAEncryption
96:0e:f5:60:0b:9d:af:43:07:03:5d:0f:5f:6b:14:4c:fb:7b:
96:f2:25:9c:c6:24:de:4f:bb:3d:ea:02:50:f0:98:d0:61:13:
57:72:0c:0b:7a:0c:a7:32:94:4a:1f:48:52:25:b7:a1:52:77:
80:22:38:68:30:a6:ab:70:aa:2f:c9:9a:f7:33:c8:76:79:c2:
1c:27:72:c3:97:fd:ac:7a:f6:7d:25:14:fa:cc:2d:6a:38:e0:
c5:5a:0a:50:77:33:4f:68:a0:02:77:60:ac:d6:9d:f4:ce:10:
77:fb:5b:3e:df:22:b5:34:a0:1d:38:3a:92:15:b8:14:50:cb:
5d:fd:23:61:4b:63:f7:20:d1:f0:f6:13:8d:49:ae:d3:75:6e:
6e:80:66:e6:f7:38:70:67:9c:e9:16:d8:90:42:70:b4:1c:69:
cb:f9:04:63:ad:e4:15:11:24:ad:61:aa:6c:1d:00:73:69:5b:
d3:5f:4a:54:23:e6:28:06:b0:34:63:0d:52:4e:07:68:8d:0e:
b3:33:96:2d:03:2e:1c:7f:51:11:78:d6:1b:bc:dd:00:fe:b4:
1c:ef:92:dd:87:18:6f:72:77:2e:45:53:c2:a3:8c:44:42:53:
6e:0e:14:cf:39:26:5f:15:04:7b:46:6e:06:78:71:dc:72:40:
f2:93:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:23:10 2025 by rpki-client