Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/BUih8qlxlM36nVLgODl8U2c6gUs.roa
File: BUih8qlxlM36nVLgODl8U2c6gUs.roa (raw, json)
Hash identifier: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=
Subject key identifier: 05:48:A1:F2:A9:71:94:CD:FA:9D:52:E0:38:39:7C:53:67:3A:81:4B
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 019424B3CE6053E65DB079A9E373E7CBBC85
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/BUih8qlxlM36nVLgODl8U2c6gUs.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.55.188.0/24 maxlen: 24
185.55.190.0/24 maxlen: 24
185.55.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ce:60:53:e6:5d:b0:79:a9:e3:73:e7:cb:bc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0548a1f2a97194cdfa9d52e038397c53673a814b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:5b:0c:31:aa:47:84:f9:40:b9:1d:5d:01:
b0:ad:8a:4f:a3:b1:29:fd:73:49:71:8a:cd:1c:b0:
c9:7a:72:5c:7b:07:58:ba:84:f3:a4:85:50:ff:f1:
fb:07:ae:b2:dd:c6:ee:95:96:f8:d7:e8:e7:59:04:
7a:b0:c2:65:75:f4:e6:0d:e1:bf:eb:84:ec:13:08:
d0:ca:6f:01:f5:6b:26:5b:8d:55:02:4c:7d:b1:70:
a2:26:25:b2:08:e1:a3:7e:e4:66:b8:c2:b0:5b:a1:
29:07:86:da:57:25:ff:e0:ce:a0:55:d9:08:67:2b:
05:21:f9:1b:f9:c3:de:80:a6:64:ca:f9:b5:d1:50:
be:2d:bc:33:b0:9f:01:4f:71:ad:5a:52:72:b9:c2:
ec:53:c0:ea:29:97:b8:9c:a4:70:4c:28:3b:78:fe:
6d:2a:4e:d9:54:d1:e3:65:87:16:8d:ad:3e:f3:a1:
67:97:95:a3:8b:6d:ab:cd:7f:80:55:46:57:3d:54:
f4:7e:58:b7:b2:ba:6f:90:73:1d:37:f6:ad:51:aa:
72:c8:67:bc:37:0b:67:af:d2:9d:35:e7:46:99:28:
1f:97:e1:c2:b6:e0:37:3a:3f:bc:61:75:5b:9c:91:
18:6e:27:42:dd:67:cd:d8:a2:a9:77:f9:bd:53:50:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:A1:F2:A9:71:94:CD:FA:9D:52:E0:38:39:7C:53:67:3A:81:4B
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/BUih8qlxlM36nVLgODl8U2c6gUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.188.0/24
185.55.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:d2:22:2d:81:7e:30:5c:d1:cc:4d:68:08:68:61:86:c8:5d:
2e:0d:c3:87:cf:73:a6:16:8e:ce:24:83:b6:89:fe:0a:6c:91:
a6:a7:14:78:27:70:eb:33:89:40:8b:19:0b:87:70:f2:3c:fc:
1f:6d:2e:55:e1:eb:90:3c:ad:89:84:7f:69:ab:09:96:64:8f:
45:1a:e0:67:10:b2:ab:68:ed:48:a7:7e:a6:e3:70:b0:68:94:
1b:99:fc:82:9f:ef:48:08:6b:4d:91:aa:5d:ab:15:8f:37:dd:
e4:76:99:8d:57:80:74:e6:d6:f6:24:a2:4a:2d:59:e3:79:11:
8a:c4:2c:48:1a:61:4b:9e:b2:8d:6f:32:45:46:63:16:e4:37:
e3:c3:5e:54:19:12:14:20:34:1a:e2:2c:18:0f:ad:e0:e1:87:
49:10:a3:f6:30:96:4d:0c:05:84:3e:02:50:b4:8b:62:46:9c:
7e:9f:5d:cc:5a:0e:00:45:a7:25:6d:b6:13:76:63:c3:53:a8:
73:36:44:9b:52:18:84:1b:09:40:58:24:cf:2b:d8:5c:b3:a3:
d6:e1:51:6e:cb:73:03:40:81:9d:41:41:07:dd:96:9e:88:9e:
1e:59:5b:a7:97:e8:df:a3:f7:aa:ee:05:93:0d:5b:98:7a:b4:
8f:fd:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:46 2025 by rpki-client