Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/1tTKxE7bwQfchkwslQXxnYbzsJg.roa
File: 1tTKxE7bwQfchkwslQXxnYbzsJg.roa (raw, json)
Hash identifier: 5+EJxKuD23N+Q8WaFwzZJ+wyeA6DdNR0OHPQg7+6ADs=
Subject key identifier: D6:D4:CA:C4:4E:DB:C1:07:DC:86:4C:2C:95:05:F1:9D:86:F3:B0:98
Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial: 01942748883EA5BFB56FF876048A5B4B23FA
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/1tTKxE7bwQfchkwslQXxnYbzsJg.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202423
IP address blocks: 185.149.194.0/24 maxlen: 24
193.0.178.0/24 maxlen: 24
193.0.179.0/24 maxlen: 24
2a0b:9080::/48 maxlen: 48
2a0b:9080:1::/48 maxlen: 48
2a0b:9080:2::/48 maxlen: 48
2a0b:9080:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:88:3e:a5:bf:b5:6f:f8:76:04:8a:5b:4b:23:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d4cac44edbc107dc864c2c9505f19d86f3b098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:2e:1a:8b:f0:9b:1e:e9:65:aa:fc:bb:f3:
96:f0:3f:e3:df:f0:c5:5e:69:ec:44:12:25:69:e6:
61:9b:d8:b4:fc:95:66:89:23:d4:e5:24:42:b9:29:
74:ed:2a:2c:f1:44:09:1b:22:48:89:80:8c:ac:dd:
f8:e3:af:d1:48:3c:38:d0:e8:c1:8a:50:ce:0a:de:
67:8f:24:40:28:13:b7:a7:b9:a8:f4:ce:35:94:d5:
c9:29:46:0e:17:c5:21:0d:63:98:af:86:d7:0b:39:
3c:de:c9:50:63:86:06:73:87:e8:64:f6:09:34:17:
eb:c0:b7:c9:80:b2:de:aa:b0:0c:4f:45:31:f5:b6:
2f:28:7d:28:ec:f0:5b:9d:8e:5e:93:cd:19:ba:f1:
4f:db:98:41:d8:4f:9a:82:64:c0:fc:44:49:92:73:
d5:cf:4e:8e:19:f1:27:2c:7f:82:a3:32:ef:9f:1b:
bf:8e:70:dd:3b:cf:1e:70:1e:cd:dd:ab:36:2d:9a:
db:41:fb:e8:e2:5d:c7:37:81:e1:e6:dd:57:19:18:
9d:15:ac:b8:8d:a0:62:53:a7:46:75:79:92:7b:2c:
db:58:a6:ca:eb:ad:7b:ff:00:08:c5:4e:c4:78:d4:
14:17:ea:c6:3c:c9:30:7b:cf:8d:a7:71:d7:98:0d:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:CA:C4:4E:DB:C1:07:DC:86:4C:2C:95:05:F1:9D:86:F3:B0:98
X509v3 Authority Key Identifier:
keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/1tTKxE7bwQfchkwslQXxnYbzsJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.194.0/24
193.0.178.0/23
IPv6:
2a0b:9080::/46
Signature Algorithm: sha256WithRSAEncryption
46:ff:b3:a2:05:2a:ab:60:2e:56:be:e2:46:2e:de:54:6b:79:
e7:d3:a3:b7:be:5b:a8:b5:ab:d1:ef:22:d9:8b:f7:64:08:aa:
ca:40:53:a4:bc:e7:9a:16:0a:0b:f9:8d:45:02:bc:bf:ec:77:
99:04:f3:19:3f:99:3f:51:da:54:e5:a5:cc:31:65:72:04:16:
c8:fa:d3:c6:ef:34:b7:52:b6:9d:de:c4:7d:5b:85:fb:fd:e6:
2e:05:c5:33:a6:f5:68:b3:81:09:92:38:0e:e4:a3:c9:4d:4a:
3d:51:30:63:70:25:81:44:06:ea:0a:e4:12:84:85:43:00:02:
be:3f:da:c2:97:e4:10:64:b4:92:40:2a:0e:89:1f:d7:5e:1d:
0f:dd:7b:47:25:06:28:f5:b8:8a:e5:cc:28:94:31:ad:61:c2:
a6:02:a4:c8:c5:22:37:7f:1b:e6:b5:78:c5:30:ef:65:f8:79:
75:0b:79:91:2c:56:7d:47:94:6a:0b:8b:6b:b2:57:9b:85:1d:
dd:e7:40:9a:bf:42:60:91:52:18:51:7b:a1:c3:5c:d4:63:25:
b0:52:21:15:db:de:24:da:08:69:82:ef:7a:fd:b0:72:8e:55:
7d:94:37:f1:37:37:71:c3:3c:e4:41:e6:44:75:67:61:7e:ee:
64:53:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:17 2025 by rpki-client