Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/tZra0lKMME8rCyc5RS2m46j2CZU.roa
File: tZra0lKMME8rCyc5RS2m46j2CZU.roa (raw, json)
Hash identifier: R2VUq9sIQAeoYLh6C5PVRaXrqq02IcDnoT4VUsQDtkA=
Subject key identifier: B5:9A:DA:D2:52:8C:30:4F:2B:0B:27:39:45:2D:A6:E3:A8:F6:09:95
Certificate issuer: /CN=ef8e107b9069c359c67bbdc2e170a9f902d9311e
Certificate serial: 0192526ED85A2E95138BD7F83F15E035175B
Authority key identifier: EF:8E:10:7B:90:69:C3:59:C6:7B:BD:C2:E1:70:A9:F9:02:D9:31:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/744Qe5Bpw1nGe73C4XCp-QLZMR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/tZra0lKMME8rCyc5RS2m46j2CZU.roa
Signing time: Thu 03 Oct 2024 12:50:48 +0000
ROA not before: Thu 03 Oct 2024 12:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43548
IP address blocks: 185.134.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:6e:d8:5a:2e:95:13:8b:d7:f8:3f:15:e0:35:17:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8e107b9069c359c67bbdc2e170a9f902d9311e
Validity
Not Before: Oct 3 12:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b59adad2528c304f2b0b2739452da6e3a8f60995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:e7:37:bd:86:2b:49:b7:74:4c:87:ef:dd:
0c:00:55:a1:81:d2:89:08:6f:29:a1:72:13:c4:5e:
8b:e6:d1:b9:7f:10:14:d8:85:28:41:b1:bb:07:73:
24:04:7d:f1:32:1c:08:46:ee:cf:32:48:fe:84:1a:
4c:d6:76:a9:1f:75:b2:a1:fd:12:a0:bf:77:a7:df:
2b:63:21:b4:3f:fe:82:b2:cf:18:a9:18:2e:6c:b1:
59:c2:ee:ea:b5:e5:bd:79:ed:38:29:5c:e4:0a:f7:
21:5d:76:2a:62:8c:91:12:eb:3a:d8:06:79:b8:5c:
f1:26:f2:21:29:12:db:22:c3:64:17:1f:42:98:5a:
f6:d0:4e:ac:b3:3a:42:19:90:9f:3d:84:72:b6:0a:
29:73:3f:c7:f5:1a:a3:a1:ca:8c:7d:bd:b3:cf:dc:
7f:8b:87:76:15:2f:e0:cd:ab:94:90:62:67:38:4e:
05:3e:a9:11:12:e4:0f:40:41:b1:6e:93:71:1e:76:
37:22:c1:04:6d:90:e7:d3:96:e4:ed:78:51:db:9f:
6e:13:05:eb:5b:fb:21:a7:d3:74:cc:63:0a:32:43:
1f:98:dc:60:78:6b:f6:7b:7e:93:b8:7d:47:56:1b:
57:32:6a:2e:36:07:eb:42:67:d4:5e:62:e7:c2:da:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:DA:D2:52:8C:30:4F:2B:0B:27:39:45:2D:A6:E3:A8:F6:09:95
X509v3 Authority Key Identifier:
keyid:EF:8E:10:7B:90:69:C3:59:C6:7B:BD:C2:E1:70:A9:F9:02:D9:31:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/744Qe5Bpw1nGe73C4XCp-QLZMR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/tZra0lKMME8rCyc5RS2m46j2CZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/744Qe5Bpw1nGe73C4XCp-QLZMR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:80:35:5a:93:58:9d:84:fe:70:c0:0d:1f:ab:97:d6:da:71:
88:52:8a:19:dc:87:20:12:78:53:95:06:c2:5e:c3:02:f9:ef:
58:8a:93:77:e9:81:85:a5:c2:00:ee:25:dd:ff:e8:5b:36:b8:
56:8e:e2:5c:b3:53:30:49:f7:56:f1:58:4f:f6:99:01:63:83:
a2:61:53:7a:00:5d:5e:4f:e0:1f:0e:d4:cb:36:c3:26:83:74:
54:9f:fd:c1:ec:6f:18:8e:65:7a:09:0b:cd:9c:62:28:92:fb:
13:3f:7a:a1:2c:71:77:40:f0:16:6c:7e:d2:95:50:90:d3:ca:
71:70:85:71:9f:85:56:f6:c5:f6:61:51:6b:8c:25:1e:3d:30:
c0:ba:91:0b:64:c1:4c:8a:f9:36:2f:ce:46:6c:ff:a4:a4:84:
14:e8:94:5d:18:14:74:f9:07:88:a8:d3:d1:b6:e2:b3:38:a9:
b7:d4:e9:3c:71:ca:ac:8a:f9:52:d5:aa:f7:f6:fb:81:fc:ff:
e7:7c:ef:f3:27:fc:97:e9:fd:ce:88:2c:25:9a:fd:9d:eb:83:
5d:fb:22:96:1f:43:cd:bd:e4:c4:09:a9:37:32:2c:96:7a:05:
39:51:f1:17:80:94:df:53:aa:18:0b:96:2a:97:52:58:56:59:
91:b2:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:00:09 2025 by rpki-client