Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa
File: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (raw, json)
Hash identifier: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=
Subject key identifier: 47:1E:53:93:63:85:0F:80:14:08:66:97:A3:8E:CD:26:DC:C6:96:59
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 019422FAF000C523160DE3D230E3184B0E79
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208034
IP address blocks: 185.194.248.0/24 maxlen: 24
193.169.106.0/24 maxlen: 24
193.169.107.0/24 maxlen: 24
193.169.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f0:00:c5:23:16:0d:e3:d2:30:e3:18:4b:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=471e539363850f8014086697a38ecd26dcc69659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:d0:f2:f7:d8:8e:da:f5:75:b5:91:74:4b:
f9:a3:ee:66:15:31:57:b6:f0:28:4d:8f:4e:36:d7:
54:bd:ad:2e:d0:7d:19:26:6a:6d:03:52:24:54:2d:
d6:40:66:6d:b3:f1:63:aa:03:a7:99:11:b4:df:94:
d9:b9:d8:bf:ee:4b:86:0d:82:a2:39:9a:a0:83:fb:
25:31:35:14:3d:a6:00:94:c7:75:3e:00:9a:16:22:
e3:4a:22:8b:9e:0e:6f:2b:a4:eb:ad:1c:f7:d9:f8:
23:96:5f:38:22:aa:7b:93:8e:f0:f4:8d:09:8b:cf:
ee:00:7d:02:9b:54:08:9f:2a:de:3f:be:90:80:54:
b4:3f:6e:5f:dd:52:6f:0c:e0:6e:30:9a:f5:76:f0:
a8:37:de:f3:74:25:01:df:9f:25:c2:4f:6a:46:74:
7d:eb:16:aa:d6:65:ac:9e:e6:41:7a:2a:ab:b9:5b:
4f:24:56:f6:57:b6:d9:3e:95:e7:3b:65:22:ab:ed:
b6:01:e7:91:e2:3c:70:1e:7b:c8:74:b8:07:4e:4b:
6d:ae:fc:ad:d5:6c:49:bf:23:6a:84:b0:bc:c5:c4:
6e:5c:c0:79:66:2e:99:d0:a7:c4:7b:ec:ce:1e:dc:
93:61:44:06:41:2a:81:ff:67:ac:c5:08:59:b5:9a:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1E:53:93:63:85:0F:80:14:08:66:97:A3:8E:CD:26:DC:C6:96:59
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.248.0/24
193.169.106.0/23
193.169.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0e:9c:4e:0c:90:65:e1:a4:52:50:bc:24:8a:68:e9:16:d3:
af:ff:fb:4b:72:79:20:18:b8:8e:fb:52:9b:8b:da:3c:a9:ed:
29:90:2e:e9:ea:48:d1:ea:d7:62:ef:b6:a7:5f:36:a5:33:95:
0e:1b:14:71:a8:84:f7:79:fa:d2:8d:1b:73:b2:d2:78:ba:c8:
b3:d4:e4:1a:be:79:83:a4:f8:f5:20:ec:a1:6b:37:26:d4:7b:
e0:4b:43:a0:b0:6b:e0:4a:36:e2:c5:cb:cc:08:db:2c:57:1d:
71:5c:79:b0:77:22:88:4d:ec:da:66:38:91:17:16:e5:38:63:
74:58:62:25:6a:cf:41:89:de:57:ff:e8:be:ad:08:b3:72:16:
27:14:b3:9d:10:85:cc:98:47:9c:49:9c:c9:7e:1c:26:31:f9:
ad:c5:c6:90:c1:8c:da:25:1b:a9:61:5a:96:c1:6e:0f:3b:7f:
f9:b0:7f:a5:08:97:c1:79:b8:2c:d2:a4:72:e5:89:a2:b5:7a:
fa:d6:0c:e7:ba:51:ad:77:d0:66:0a:df:ec:18:74:3d:07:f0:
26:ff:8f:ca:53:dc:4f:b4:46:ad:36:39:7b:9a:ed:53:f6:1b:
5f:bc:8b:7c:81:e5:ea:c7:bb:44:d2:1f:7f:8a:1f:bf:34:93:
ff:f0:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:40 2025 by rpki-client