Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/i0b6D-rT2FVTM19LqLSh15LYCRI.roa
File: i0b6D-rT2FVTM19LqLSh15LYCRI.roa (raw, json)
Hash identifier: eAyg6w88G2QnqmNNJFWUnwDhKYl0dByuSLnfnUOvCnA=
Subject key identifier: 8B:46:FA:0F:EA:D3:D8:55:53:33:5F:4B:A8:B4:A1:D7:92:D8:09:12
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 0194258EF9EDDF9BEADCEABAE04A19DA139E
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/i0b6D-rT2FVTM19LqLSh15LYCRI.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30758
IP address blocks: 185.48.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f9:ed:df:9b:ea:dc:ea:ba:e0:4a:19:da:13:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b46fa0fead3d85553335f4ba8b4a1d792d80912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:a6:fa:eb:70:7e:1a:78:ae:d0:f4:a0:9c:
b8:58:23:c4:37:3d:78:fc:7b:3a:f8:37:8d:92:4a:
25:7a:c1:89:6e:79:88:ac:35:78:98:fe:07:a3:9a:
d4:06:b1:67:4a:89:e1:85:c4:b2:22:cc:d6:5c:17:
0e:b0:71:88:2b:33:8e:ee:b6:d3:90:56:78:86:d7:
fb:9b:d6:82:53:62:48:74:8b:d7:7e:cf:f6:1a:af:
47:aa:38:85:e5:c5:2e:91:5f:5b:4e:cd:9d:5c:8e:
f2:9e:fb:c1:2d:0e:b6:65:9b:76:c4:5d:5c:f8:42:
58:71:a7:36:b5:83:d1:fc:ff:d4:1c:30:4f:89:06:
d5:c9:39:09:ce:f5:8a:80:e6:fe:6b:5a:17:cb:76:
f4:4a:d1:19:57:0b:8f:8d:09:83:22:1d:ca:8e:c7:
d8:63:45:59:dd:ca:67:c8:9e:b1:5d:6d:54:98:9d:
0c:36:f9:82:52:3d:b0:d6:3a:d5:03:a2:2d:bb:bc:
f8:4e:37:01:65:87:61:65:98:3e:30:53:e5:74:cb:
f4:9a:54:66:37:bd:34:6a:fe:32:ff:45:a9:ee:9a:
ba:12:fb:95:da:b2:6b:18:69:82:12:b0:a8:04:8e:
7b:1f:02:64:e2:59:0c:fa:51:fa:12:e4:13:63:51:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:FA:0F:EA:D3:D8:55:53:33:5F:4B:A8:B4:A1:D7:92:D8:09:12
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/i0b6D-rT2FVTM19LqLSh15LYCRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.25.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9d:13:85:c4:7b:b1:92:8a:54:29:c3:fb:d3:3f:d3:61:54:
95:8b:67:c9:11:95:ec:ea:d8:18:9e:c2:6f:5d:97:53:5a:bc:
5e:6f:e9:59:1f:6f:48:27:02:22:67:b3:5f:20:01:a3:83:c9:
76:ed:87:1c:a2:6c:62:5d:db:37:a5:9c:9c:01:62:b1:6e:86:
ee:20:02:c9:59:fa:4b:9f:d3:fb:f5:88:85:4a:59:d6:e4:1d:
74:96:5f:52:86:87:81:36:5f:ed:f8:a9:03:3c:de:49:38:90:
c4:51:70:7c:8b:e4:76:4b:be:5b:04:38:72:a0:96:7e:03:2c:
ba:7b:42:a9:93:c7:ed:c6:fc:d8:f7:c9:16:cf:11:34:1c:0b:
b6:35:20:fa:43:ed:01:1d:e3:ab:64:e2:e9:6a:ba:49:7e:14:
e5:a1:17:40:bb:a8:3f:8d:5d:f8:c1:ab:f6:10:b7:d9:b0:e0:
be:cb:10:7c:53:4e:7a:03:79:9c:06:ea:72:ec:fa:dc:48:3b:
2e:d3:fe:29:1c:7f:ef:ec:61:fd:1a:5a:98:da:3c:42:55:4f:
c1:64:06:65:89:7b:53:8a:c7:37:6e:e0:60:ff:b2:8b:08:9d:
95:39:19:f4:67:77:6b:0b:35:49:09:1f:97:6d:76:b6:43:2d:
6a:7f:29:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:52 2025 by rpki-client