Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/GqM4YVlqC8-erWafuFUuhTFle_c.roa
File: GqM4YVlqC8-erWafuFUuhTFle_c.roa (raw, json)
Hash identifier: i4cVcC9yh3IAaqw92giD4QCQEZ24C42b9AxtQz5mdqI=
Subject key identifier: 1A:A3:38:61:59:6A:0B:CF:9E:AD:66:9F:B8:55:2E:85:31:65:7B:F7
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 0194252151E81FF8466E1A4E12663ACED580
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/GqM4YVlqC8-erWafuFUuhTFle_c.roa
Signing time: Thu 02 Jan 2025 03:48:48 +0000
ROA not before: Thu 02 Jan 2025 03:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211717
IP address blocks: 185.51.44.0/22 maxlen: 24
185.51.44.0/23 maxlen: 23
185.51.45.0/24 maxlen: 24
185.51.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:51:e8:1f:f8:46:6e:1a:4e:12:66:3a:ce:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Jan 2 03:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa33861596a0bcf9ead669fb8552e8531657bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:84:a8:f0:c5:50:7d:29:4f:42:c3:be:e3:
f8:20:2d:c6:c6:5d:60:be:61:33:71:9f:b7:7a:9b:
5d:ec:f3:a8:b0:5e:03:7e:cb:4c:14:a2:1c:e4:bd:
a3:1c:02:46:c2:9f:fc:8c:70:47:82:3d:dd:f6:ad:
bd:31:4d:f3:55:8c:a5:62:34:aa:e8:96:19:70:36:
9e:cf:6a:e9:77:30:3c:aa:8f:f7:a4:3a:4c:6b:bd:
0f:c3:1d:6b:b1:8a:2e:4f:f7:d0:f3:0e:b2:bd:ca:
51:b3:0a:63:23:fe:1c:9b:c3:bb:c6:61:c5:4f:6d:
17:63:4b:64:43:09:af:9e:e6:41:5b:e1:cc:09:89:
30:0d:29:8e:ab:24:d9:3c:38:59:39:13:04:3b:8f:
20:38:0a:3c:52:bb:2b:71:88:da:5e:a5:07:56:1d:
30:63:9e:8b:b5:94:db:8d:ec:42:7e:98:98:65:c8:
8c:1b:41:8e:4c:c6:78:80:c3:d2:40:14:2d:09:de:
5f:95:a1:26:ec:61:d7:a6:c5:54:84:ec:22:79:11:
01:7f:b1:87:fe:0f:6a:1a:33:30:56:12:c2:71:f8:
d3:79:44:0e:92:ef:91:da:e2:6c:9d:45:dc:5f:05:
76:96:a8:09:94:b0:80:3a:a4:64:2f:12:eb:bb:b9:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:38:61:59:6A:0B:CF:9E:AD:66:9F:B8:55:2E:85:31:65:7B:F7
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/GqM4YVlqC8-erWafuFUuhTFle_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:73:70:4e:7a:6f:f9:d1:9e:11:4d:82:ca:3c:e3:8d:ba:1c:
d3:2b:52:74:a4:0c:df:ac:24:69:eb:d8:18:5d:a1:33:73:3f:
ff:ca:a1:67:08:72:0c:80:17:89:06:49:44:a0:53:dc:76:5c:
e0:be:e4:ef:c6:09:7c:d0:64:6d:4e:26:a6:f4:c6:05:1a:7f:
3b:fc:d8:e6:a8:b0:ed:3e:81:30:82:00:f3:25:69:83:e4:56:
44:3a:e3:30:8d:5e:7f:e8:36:aa:52:61:22:77:e2:d2:9b:ec:
2b:21:a9:0d:36:5a:ee:b0:70:e2:f5:43:be:ce:4c:2c:57:c6:
02:90:2e:1d:7c:6f:6c:34:51:4a:7d:12:c9:78:d8:e5:bf:64:
48:21:79:e5:2c:9f:48:42:43:0a:1d:40:24:f0:3c:cf:3d:17:
7f:65:60:1b:0f:47:7d:bc:4d:03:ec:8e:e7:e4:1a:54:db:4a:
82:8f:f7:e2:ff:cf:80:ae:bc:c5:1d:18:0a:a2:4b:68:45:0a:
69:ad:bb:a1:bc:57:7d:4f:9f:80:c0:8b:21:cb:82:85:05:fc:
bb:e8:29:e1:5b:9d:fe:cb:a6:c5:cb:4d:e7:e1:8f:2b:bf:a0:
8b:5d:ca:33:e5:97:97:1d:c6:63:41:6d:c3:9d:ac:f1:59:5a:
51:92:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:34:16 2025 by rpki-client