Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/Po0728QWErCTmXCeFPKP0UlTEug.roa
File: Po0728QWErCTmXCeFPKP0UlTEug.roa (raw, json)
Hash identifier: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=
Subject key identifier: 3E:8D:3B:DB:C4:16:12:B0:93:99:70:9E:14:F2:8F:D1:49:53:12:E8
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 01942823DA84E0E56F017C6129D95B26FBED
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/Po0728QWErCTmXCeFPKP0UlTEug.roa
Signing time: Thu 02 Jan 2025 17:50:25 +0000
ROA not before: Thu 02 Jan 2025 17:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.151.44.0/23 maxlen: 23
185.151.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:da:84:e0:e5:6f:01:7c:61:29:d9:5b:26:fb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Jan 2 17:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e8d3bdbc41612b09399709e14f28fd1495312e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:9f:2a:95:a1:cb:af:9d:78:c1:7b:fd:19:
ed:17:38:fa:c7:d3:d7:c2:e6:75:55:37:ad:e0:6a:
69:c0:f8:17:f7:74:45:73:4a:ce:60:ba:77:6b:ee:
de:1c:92:a0:3b:78:5f:1a:8c:69:41:46:8a:e0:bf:
aa:09:88:e7:83:eb:a4:05:a5:34:e7:1d:25:ac:ce:
41:86:ab:fb:7a:6b:10:34:d6:4d:43:16:38:54:88:
2e:f8:ea:cf:ad:20:4e:66:c6:ab:5b:ef:c9:ea:fc:
00:d3:2c:72:89:e1:ae:53:df:18:43:24:b0:9e:14:
39:44:14:27:73:06:6f:ab:15:75:b1:f9:2e:e8:63:
b3:48:c9:d1:0c:e3:ae:cf:c3:c4:5e:b0:c0:f4:48:
96:9e:2c:b1:09:4f:35:f7:58:a1:f0:c5:54:82:b1:
7f:c5:a1:c1:d2:88:77:47:ba:3d:2d:8a:8a:2d:7c:
60:51:98:ef:ec:7c:97:ba:de:2e:e9:1b:3e:49:ac:
0f:8e:27:6e:13:de:00:4e:6d:41:ea:ab:9b:de:c9:
6f:57:b1:8d:41:35:44:fc:e7:2a:c3:e6:12:a7:fa:
61:12:d5:b7:30:ea:0a:3a:8e:34:01:f7:a4:f6:66:
7b:a3:86:93:c3:01:6e:03:4b:fd:a9:4a:cd:45:0e:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:3B:DB:C4:16:12:B0:93:99:70:9E:14:F2:8F:D1:49:53:12:E8
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/Po0728QWErCTmXCeFPKP0UlTEug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.44.0/23
185.151.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bf:53:cd:20:19:07:6f:25:b3:13:d1:2c:69:ce:34:39:9f:
38:72:0f:e9:f6:f3:94:df:3c:1a:75:1a:80:02:ee:9f:49:d7:
51:2f:0e:dd:c8:a1:22:cf:08:54:b8:53:32:32:e6:36:a9:c6:
21:05:40:cb:4b:bf:0b:ca:b6:bf:36:e1:31:ad:f4:37:4d:fd:
8a:4e:51:f2:b2:b9:c9:55:01:aa:0b:6e:37:b8:a9:54:da:a0:
1c:af:b2:02:87:04:4f:91:30:a5:c3:a3:e1:ff:01:f6:9c:92:
71:91:a4:d6:38:54:3f:15:6f:9a:e8:4e:c2:ae:52:21:ba:8a:
55:4f:3c:ee:da:11:fc:32:3e:a2:c9:f9:51:aa:d5:5f:2e:bc:
13:a8:c5:bc:05:b4:f0:61:24:b4:a8:5c:ab:15:38:92:20:54:
ea:e0:a7:fb:c1:65:4e:5c:28:57:db:e2:2d:72:66:5a:29:c1:
cb:b9:ac:42:03:85:eb:a5:2c:f5:f8:02:54:76:aa:c8:18:a5:
9f:98:a6:fc:6a:aa:56:19:af:e2:fd:f9:52:91:62:4b:dc:56:
e7:88:ed:33:1b:7d:a6:19:4d:62:cc:d9:19:11:53:0c:7f:7d:
c1:bb:91:f9:5f:46:00:86:41:0e:b0:04:c2:71:3c:06:d3:72:
7c:5c:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:35 2025 by rpki-client