Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/R-F_sQF9KNUoYgcAJLK7ovQP8yM.roa
File: R-F_sQF9KNUoYgcAJLK7ovQP8yM.roa (raw, json)
Hash identifier: g1VC2Jx0IPgGJl6/7YkWZY8OlpnB9eCtQesJyWEycIU=
Subject key identifier: 47:E1:7F:B1:01:7D:28:D5:28:62:07:00:24:B2:BB:A2:F4:0F:F3:23
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193F404F4414888708FFE0F1A68F9C97F41
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/R-F_sQF9KNUoYgcAJLK7ovQP8yM.roa
Signing time: Mon 23 Dec 2024 14:56:25 +0000
ROA not before: Mon 23 Dec 2024 14:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47553
IP address blocks: 185.213.150.0/24 maxlen: 24
185.254.72.0/24 maxlen: 24
194.104.145.0/24 maxlen: 24
194.114.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:04:f4:41:48:88:70:8f:fe:0f:1a:68:f9:c9:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 23 14:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47e17fb1017d28d52862070024b2bba2f40ff323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:c4:e3:cf:fa:62:d8:c5:d4:68:c4:95:2d:
25:49:af:78:5a:56:4f:3a:31:cd:7d:1e:74:be:1c:
1f:3a:c1:16:49:79:d1:6b:c7:19:4f:22:f4:f9:c6:
77:ec:9f:1b:ed:b2:93:04:e2:d4:20:99:72:d3:24:
16:de:67:f4:c0:be:35:98:64:5d:14:bf:a6:ff:57:
a1:19:38:d2:22:eb:37:52:e7:45:f3:bc:6d:1a:f9:
66:08:8f:88:e5:b0:b0:5f:82:e2:8a:e0:c4:60:a3:
d4:d1:f2:37:da:ad:56:5d:ec:88:52:6d:ab:3a:85:
bb:0e:f9:6e:89:98:b9:b4:28:8f:5c:71:b3:b5:e7:
de:22:f2:fe:81:79:c8:2a:27:6a:fd:cf:40:4d:20:
1f:81:4c:3a:92:ac:4d:06:a1:20:13:21:73:2b:3f:
3b:03:c6:8a:c4:ab:75:e2:70:53:f0:dc:16:c4:0b:
df:46:5c:1e:d8:cc:0a:41:f5:8d:af:39:a8:8d:57:
d1:4d:0c:a0:cc:3b:ae:07:d7:ef:32:27:26:70:23:
ad:01:71:fb:7e:07:ae:01:3a:75:cd:c0:e6:de:3f:
f8:d7:e2:25:06:40:13:61:a8:1c:12:e9:b3:d2:01:
12:3d:b3:44:59:39:97:fa:94:e8:4e:90:33:18:13:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:7F:B1:01:7D:28:D5:28:62:07:00:24:B2:BB:A2:F4:0F:F3:23
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/R-F_sQF9KNUoYgcAJLK7ovQP8yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.150.0/24
185.254.72.0/24
194.104.145.0/24
194.114.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:23:14:75:83:a4:b7:66:a6:28:6c:b5:9a:a2:c9:71:35:b5:
30:1a:ae:ed:c0:e4:5e:77:4e:30:f2:4b:c1:41:15:7c:f1:b0:
19:c7:95:74:14:45:c4:03:04:b7:a2:9a:c6:b6:d0:93:ea:80:
22:9a:d0:1b:86:60:d3:9d:c2:40:91:9a:ff:a7:37:10:2b:30:
14:00:b3:ec:34:fa:7b:b0:ca:1c:3a:cc:9e:44:90:c9:65:e7:
f8:5b:52:34:1b:c4:95:9c:3b:12:3b:a2:14:84:d2:10:b3:09:
f3:ae:d6:eb:71:9d:43:b5:84:d8:1b:09:3e:2d:27:9e:09:e5:
76:8b:34:de:40:76:8e:a1:04:c2:7e:90:a3:b4:de:07:11:27:
4d:c0:b2:ea:8c:18:0a:fa:33:92:3a:97:83:92:ae:2c:71:04:
55:b0:b8:30:8c:ad:a1:73:94:c4:b4:f1:89:b8:00:16:68:cf:
ff:95:0e:1b:61:bb:7f:c7:b1:af:ce:42:df:a2:6e:d0:03:4d:
17:5b:b1:55:59:cd:4a:e7:23:7f:4b:5e:60:23:23:59:b1:f4:
75:e9:be:1e:55:3b:0f:8a:63:75:b7:05:53:76:4c:a3:de:ba:
67:65:38:33:d6:9c:69:9c:36:7c:f2:a1:38:ec:ea:86:a5:00:
49:6f:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:44:50 2025 by rpki-client