Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/iwLZFs5miznhcY2Sn-yJxvK-W5Q.roa
File: iwLZFs5miznhcY2Sn-yJxvK-W5Q.roa (raw, json)
Hash identifier: xdKq+/ODUXejhJKyI2Ol9rOhJg9XTGoQZtrMhSTgxpw=
Subject key identifier: 8B:02:D9:16:CE:66:8B:39:E1:71:8D:92:9F:EC:89:C6:F2:BE:5B:94
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 0194252208BD9D3765290D49E516ACF6BB8E
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/iwLZFs5miznhcY2Sn-yJxvK-W5Q.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207785
IP address blocks: 185.153.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:08:bd:9d:37:65:29:0d:49:e5:16:ac:f6:bb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b02d916ce668b39e1718d929fec89c6f2be5b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:28:c8:ab:fd:11:5c:f9:e1:5c:f5:07:c8:17:
dd:97:3e:ad:a6:91:96:87:53:42:86:89:5d:f6:a0:
39:a8:13:0b:5f:f5:60:d2:64:ce:87:c4:52:7c:51:
52:cb:59:a0:96:92:e4:bb:b3:d6:f4:d6:56:d4:02:
fc:77:27:fc:27:48:6a:35:06:4b:51:03:93:ff:28:
33:14:0c:44:20:6d:95:82:81:73:42:fa:e6:3e:f9:
10:50:18:0b:b7:88:66:63:5e:43:72:ba:2e:54:28:
17:17:d5:c3:ef:39:cf:2f:a6:6e:e7:94:71:9e:28:
d6:25:fd:ed:5d:41:c6:54:4a:f3:38:25:a3:d6:3e:
c5:6e:73:86:02:9b:71:4f:d1:45:fa:f1:f8:7f:95:
02:48:e0:42:d9:d6:e3:a3:79:68:4c:8d:84:a4:35:
bf:57:36:50:40:9e:c2:b2:ac:89:96:bb:89:75:63:
98:36:b3:d1:1a:23:de:8c:94:dc:81:d3:53:fe:a6:
81:71:87:0d:26:fc:8f:19:e9:ba:a6:c5:4c:d1:bc:
13:bc:a4:49:f4:3f:61:7a:45:81:83:b5:01:8c:3b:
57:e1:a3:f9:00:ac:11:b0:20:20:5b:78:e5:a2:0f:
fe:b8:aa:bd:17:b3:d0:aa:34:55:06:f7:c8:c9:18:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:02:D9:16:CE:66:8B:39:E1:71:8D:92:9F:EC:89:C6:F2:BE:5B:94
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/iwLZFs5miznhcY2Sn-yJxvK-W5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:26:96:c1:2c:44:18:b0:b4:0a:f8:db:e3:92:b7:7b:60:23:
05:d3:4c:07:a0:02:c4:f0:d2:76:0e:00:3a:1a:59:17:ec:b1:
bb:d1:01:dd:d0:07:0d:54:20:1f:26:e5:f2:c7:da:3d:32:db:
7f:03:ba:8a:ba:ac:cd:ef:01:39:fa:e7:7f:9c:cb:53:bb:53:
0f:e4:66:af:01:85:28:f0:19:cd:fc:f9:bd:95:a2:be:d1:19:
54:79:43:09:da:1d:a2:31:5f:1c:62:2a:fe:ac:97:9a:1b:80:
d6:d4:8e:53:83:ff:21:7f:45:29:a1:98:f2:15:b2:0e:a7:15:
48:47:25:54:22:d0:f5:81:f0:e7:cf:00:21:03:00:8d:7a:b4:
b6:29:3c:31:ad:e0:e6:b6:13:3a:05:a3:19:a5:cc:9c:47:f0:
c8:a6:dc:4c:24:09:15:c4:57:52:04:63:59:fb:95:e4:cc:e1:
cf:02:2f:ce:01:fc:04:ba:8e:d4:ea:fa:99:43:6e:d0:c0:b7:
c0:a3:6a:6a:71:a2:b6:1f:c2:a6:af:67:cd:f1:c9:62:3e:c0:
86:7d:68:2d:82:58:6f:9a:53:f6:76:2c:c8:64:15:87:48:4a:
f9:d9:18:4c:2d:5c:20:c5:6f:79:6e:60:1b:5e:ba:8b:ce:da:
d6:53:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:10 2025 by rpki-client