Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/B5L5vO55nBhfniljBpOUow8aXpw.roa
File: B5L5vO55nBhfniljBpOUow8aXpw.roa (raw, json)
Hash identifier: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=
Subject key identifier: 07:92:F9:BC:EE:79:9C:18:5F:9E:29:63:06:93:94:A3:0F:1A:5E:9C
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 019427B61AF0A96EABA11CE04919C857232F
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/B5L5vO55nBhfniljBpOUow8aXpw.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 185.159.40.0/22 maxlen: 22
217.67.164.0/22 maxlen: 22
217.67.168.0/21 maxlen: 21
217.67.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1a:f0:a9:6e:ab:a1:1c:e0:49:19:c8:57:23:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0792f9bcee799c185f9e2963069394a30f1a5e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:65:f3:d4:16:dd:e5:3c:c5:26:f9:b9:f4:
aa:f1:1f:51:18:fa:07:96:4c:67:31:38:12:59:2c:
7a:93:5e:6a:f3:9a:ed:52:17:ad:13:f2:67:c6:6f:
3f:88:07:01:dd:88:77:0c:e3:fb:ee:3b:72:71:1e:
58:ad:ff:92:dc:9d:23:50:d2:63:af:4e:1b:57:34:
23:eb:b4:43:9e:5f:57:0b:71:17:68:fe:1d:89:d7:
6b:b4:32:02:2e:c4:86:01:80:5b:40:34:65:89:a2:
1e:06:b2:55:c8:55:62:c2:7b:ac:4f:a0:cd:21:07:
d0:15:2d:00:30:8e:17:57:2b:b2:25:b4:a1:46:ca:
bf:10:1c:53:33:02:b0:0d:f7:d9:7e:44:d4:5b:00:
06:38:b3:f7:ad:69:da:2b:fb:31:77:a7:f5:75:e5:
7c:89:b4:29:57:a0:a4:1b:b9:2f:bf:8e:37:1b:29:
1a:82:e9:3d:ce:ee:dd:27:0e:9f:e8:e6:21:fc:39:
17:c9:f6:bb:15:95:e6:fb:d9:78:9f:b9:9d:07:f4:
37:c9:0e:a2:b5:97:80:50:98:64:06:8c:87:49:4e:
2a:df:8b:10:9b:66:62:04:66:0e:ca:52:10:79:d9:
fb:bb:0b:99:5b:28:e0:24:ab:1c:b1:00:e6:8a:2b:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:F9:BC:EE:79:9C:18:5F:9E:29:63:06:93:94:A3:0F:1A:5E:9C
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/B5L5vO55nBhfniljBpOUow8aXpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.40.0/22
217.67.164.0-217.67.175.255
Signature Algorithm: sha256WithRSAEncryption
8e:c4:43:9b:32:67:8a:5f:67:cc:59:b5:ed:19:f1:9d:d7:fe:
54:92:5c:da:eb:66:a4:ea:0e:86:be:d6:dd:a4:82:96:fa:b7:
37:80:f8:30:e1:18:34:ed:46:c9:95:dc:91:4b:fb:61:b0:4b:
2d:85:b2:eb:ab:30:45:eb:6f:d0:11:6e:51:13:a0:dc:ab:03:
3e:5b:91:8a:99:96:81:93:73:9c:41:f9:33:34:88:3c:37:4c:
22:c6:60:14:ac:b6:85:69:a7:19:d5:4d:d4:3a:25:e6:96:d4:
45:fb:53:40:d2:50:ec:14:6e:12:5b:ce:ca:c6:9b:53:4a:18:
8c:8c:9f:3d:d2:78:00:2a:d3:8f:93:37:b8:1a:3a:9a:e6:64:
4e:10:88:a5:d9:0d:8d:5a:fa:7f:e3:4e:65:57:2f:52:d3:a3:
fc:42:88:66:50:62:4c:e9:ee:7f:34:60:b1:68:3a:0c:80:4a:
9e:5c:0e:72:55:e4:ab:d1:ea:b8:e5:e0:fa:f3:04:11:8a:2b:
d4:3a:70:d5:b9:49:36:ff:95:b1:8b:1f:b2:21:03:df:13:1c:
d8:f4:b0:a6:dd:96:d3:67:1f:4d:3b:83:64:09:c1:9b:89:c5:
38:bf:22:56:16:9c:25:ea:b6:7c:a6:e0:5e:4b:d1:a5:ac:e6:
10:a5:28:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:21 2025 by rpki-client