Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/E5IVKgbJt2zbKiLJbsrX3LIySFU.roa
File: E5IVKgbJt2zbKiLJbsrX3LIySFU.roa (raw, json)
Hash identifier: tGHo3B7TRCKpsC+++roBe0/3ivzBH+Ps/KgroLhmH0s=
Subject key identifier: 13:92:15:2A:06:C9:B7:6C:DB:2A:22:C9:6E:CA:D7:DC:B2:32:48:55
Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial: 01942521F286F9F65CD7182BBE5C872B6D50
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/E5IVKgbJt2zbKiLJbsrX3LIySFU.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59462
IP address blocks: 185.22.231.0/24 maxlen: 24
185.150.16.0/24 maxlen: 24
2a0e:d487:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f2:86:f9:f6:5c:d7:18:2b:be:5c:87:2b:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1392152a06c9b76cdb2a22c96ecad7dcb2324855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:2a:49:ef:cb:cb:2e:04:36:8e:86:99:10:
b9:1f:c4:2a:87:db:fa:5b:ab:20:b8:4b:ef:8f:c2:
72:8d:b6:6e:7f:23:53:3e:86:3f:4d:08:03:05:d2:
b1:68:50:a9:08:04:77:fe:83:fc:d6:be:6d:eb:16:
3b:16:41:1e:a7:21:3e:62:bb:f4:7c:4f:bb:17:56:
49:aa:d0:cb:4f:b9:d8:15:1c:9b:22:83:79:d3:d9:
ca:9e:96:f5:23:64:9e:56:2f:7e:60:c1:3c:14:5b:
2d:40:a5:43:f5:23:08:40:07:73:19:11:5c:80:ad:
08:d7:8f:bb:98:33:5e:6c:83:55:0f:48:f8:ab:38:
6f:88:d8:70:d6:93:c4:4a:94:5c:ff:01:8e:92:27:
6a:f4:24:cf:43:69:f6:00:1f:d7:a7:ec:e8:d4:6a:
3d:aa:c1:5c:72:1c:a1:04:07:2c:19:bd:78:40:b9:
34:e6:89:4a:91:db:b4:66:c5:8d:a8:40:2b:53:4b:
b0:61:9e:c3:bb:0f:25:f6:97:28:f7:ec:8a:a7:ba:
2b:4d:1d:d3:74:f3:8c:d2:0e:2b:c5:81:d0:18:ac:
72:57:b4:0b:cc:0f:ad:07:ae:d1:a4:8c:9b:58:33:
ff:9c:f5:cd:93:39:44:ca:3f:6a:e8:42:08:23:27:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:92:15:2A:06:C9:B7:6C:DB:2A:22:C9:6E:CA:D7:DC:B2:32:48:55
X509v3 Authority Key Identifier:
keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/E5IVKgbJt2zbKiLJbsrX3LIySFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.231.0/24
185.150.16.0/24
IPv6:
2a0e:d487:f000::/48
Signature Algorithm: sha256WithRSAEncryption
9b:b0:1b:ea:39:9f:a1:4e:e8:67:09:44:b2:00:99:64:06:bd:
64:e8:fa:0e:9d:72:18:48:aa:9d:d7:45:4f:1b:02:62:8c:33:
2a:20:91:db:a6:5f:76:8c:90:5d:3e:a7:16:ae:f2:76:18:9f:
b7:37:ff:1c:3a:46:25:28:97:54:da:3c:95:5a:b0:c4:76:d7:
1c:18:b5:88:f7:a6:ee:97:d2:02:e5:55:cb:4b:54:3b:8f:fa:
94:02:30:51:58:44:44:bd:d1:aa:26:59:b3:3f:36:53:13:f4:
e0:66:36:10:3b:e9:3a:ff:f4:f4:0c:9c:e0:78:43:3d:d9:64:
3a:1f:40:d9:35:96:9f:8f:9c:8c:fa:56:ff:34:33:ba:d4:74:
85:39:10:ab:83:b3:3e:cb:32:e6:e5:45:fe:9a:66:57:c4:b1:
0b:2c:d6:5a:1d:e7:69:4c:44:4c:98:29:c2:13:b1:dd:79:68:
bc:37:f2:ec:9f:86:08:8c:7c:6c:86:ba:cb:3f:ff:28:34:80:
7c:3d:d4:c4:3b:20:df:05:32:f4:01:f1:80:65:0e:57:c8:aa:
37:5e:e9:68:b2:1e:fb:2b:8d:c2:d6:27:b7:6f:58:35:f6:c3:
7a:4e:d9:33:8e:5b:6c:25:24:6f:50:75:bf:85:80:a8:4f:40:
7b:33:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:40 2025 by rpki-client