Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/tTd9p4NqupDCloMQdgmNyQHYk3g.roa
File: tTd9p4NqupDCloMQdgmNyQHYk3g.roa (raw, json)
Hash identifier: lJm8RdkWxnblYU+2E+ipc27rUTVUJMsw2N1fWIPb2uM=
Subject key identifier: B5:37:7D:A7:83:6A:BA:90:C2:96:83:10:76:09:8D:C9:01:D8:93:78
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 0189E4F9BB1D238F7BF3A7A3AF96A4B067E8
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/tTd9p4NqupDCloMQdgmNyQHYk3g.roa
Signing time: Fri 11 Aug 2023 14:21:58 +0000
ROA not before: Fri 11 Aug 2023 14:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.21.131.0/24 maxlen: 24
185.25.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:f9:bb:1d:23:8f:7b:f3:a7:a3:af:96:a4:b0:67:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Aug 11 14:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5377da7836aba90c296831076098dc901d89378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:c1:cf:95:60:b2:c2:60:f9:e2:ec:d0:d0:
b9:2d:c4:51:5c:4a:d9:01:d0:d6:66:47:8b:d1:19:
7c:67:78:54:2e:cc:2c:4b:70:93:89:c5:f3:16:ef:
7c:7b:9a:0f:5a:75:83:10:d3:f0:1d:90:49:13:70:
1b:7b:08:59:7e:bc:5c:a4:99:8c:fe:df:e1:4a:b0:
36:44:81:8e:c4:80:89:c5:96:9b:4b:ee:71:cd:72:
23:26:0d:d2:78:a0:13:05:14:ca:d6:cd:1f:0b:21:
0f:0f:1d:0a:46:69:6f:d0:4d:6f:c0:01:33:2c:42:
82:43:42:49:73:9a:15:24:84:69:eb:f8:96:78:73:
dd:ba:8f:d4:b3:97:ac:5b:71:15:ed:8c:d9:cb:40:
5d:00:d2:69:7e:50:e3:e5:9d:15:d6:cd:a0:79:59:
49:2f:aa:62:db:14:b9:84:47:6c:45:68:25:4a:f2:
26:73:35:21:b2:f3:71:9e:64:58:4c:b5:6a:cc:02:
51:d5:92:f2:f6:b8:c7:cf:fc:f9:1e:5f:26:9d:07:
2d:32:ff:ec:8f:51:21:e8:97:0b:8f:82:01:94:c6:
aa:0c:c4:7d:76:4d:14:21:0e:6f:a8:fc:cc:e3:26:
88:2f:e1:12:97:c2:18:ce:8e:bc:d9:d3:1e:f2:83:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:7D:A7:83:6A:BA:90:C2:96:83:10:76:09:8D:C9:01:D8:93:78
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/tTd9p4NqupDCloMQdgmNyQHYk3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.131.0/24
185.25.104.0/24
Signature Algorithm: sha256WithRSAEncryption
21:77:10:30:5e:7e:a6:22:d3:96:0a:80:7c:ec:48:ae:b9:b8:
51:39:50:58:02:01:8d:fb:b7:05:c1:50:8f:29:3e:88:17:b9:
88:e2:87:8d:76:47:f6:7e:8f:be:05:cf:45:b3:d7:17:de:54:
d0:20:0e:a7:85:77:fc:c4:34:09:a2:4c:15:1c:e4:8d:f7:cf:
d3:47:f2:52:90:fa:67:0c:0b:be:9a:73:fa:00:91:e9:20:75:
49:b5:89:44:f5:01:63:88:76:2f:6f:c8:7c:db:e0:04:fa:8b:
8f:5e:93:1d:00:03:0e:98:8d:1f:78:10:62:45:65:66:bf:0e:
78:6c:10:f6:0f:8f:83:de:f2:33:31:71:83:00:eb:3c:82:5c:
7b:93:96:55:21:f4:46:a4:1d:ab:00:90:c8:07:62:37:ab:4f:
cd:08:81:e2:8a:d1:45:6e:52:dd:2f:e9:4e:c4:ed:a6:04:fd:
c5:99:b7:a6:de:03:5d:66:29:85:fc:8e:ba:d2:db:de:1f:d9:
8e:1d:98:64:3f:8e:3a:f3:0f:e2:3e:5d:05:cc:80:09:34:53:
81:95:c7:eb:81:3e:68:86:50:ce:da:f4:55:0f:6d:5d:7f:ae:
26:94:45:2d:41:e2:5c:90:29:8b:1e:19:6c:03:72:1d:ab:06:
45:7a:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:38 2025 by rpki-client