Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa
File: EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa (raw, json)
Hash identifier: 9DLeiprUkEPr3xfx5ncHn6G4kT050WW6ahOVAnuzCHg=
Subject key identifier: 11:B3:AE:D6:A0:EA:ED:99:4D:D2:57:B7:17:04:49:DB:62:70:50:47
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 01942445666A43ED5AE248023DB79458680D
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204457
IP address blocks: 185.248.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:66:6a:43:ed:5a:e2:48:02:3d:b7:94:58:68:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11b3aed6a0eaed994dd257b7170449db62705047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:83:69:bd:0f:2a:57:99:16:16:c6:c4:4c:
f5:23:7c:24:5e:24:44:bc:1c:8a:10:ba:7f:82:9b:
12:5e:15:87:20:65:4c:8a:92:11:35:14:09:ae:00:
f6:1e:3e:7d:73:03:79:5a:e4:03:f5:d6:96:dd:38:
5c:e7:c6:7f:74:d0:bc:23:73:c0:57:c8:d4:a6:1b:
0f:ac:bb:40:bc:4d:f8:8d:7c:18:8b:e5:8e:89:21:
af:97:9b:4a:15:53:e3:77:19:1c:02:9f:e3:f0:e4:
9f:ce:8d:34:1a:42:21:38:08:fc:d7:85:36:b4:38:
a4:59:79:9e:0e:ac:32:eb:ea:f5:aa:77:3a:33:73:
50:36:76:d9:11:cb:e5:11:b0:26:30:57:2e:3b:c3:
40:a4:9b:49:cd:7a:27:fb:95:5d:86:40:cb:ba:3e:
41:72:ba:af:c4:36:f8:72:79:95:25:ff:1e:4d:be:
0d:63:81:23:1c:5b:d1:92:c0:d7:35:30:ae:09:60:
1d:de:db:1c:d5:17:03:b5:8d:a7:89:0a:7f:ad:64:
11:76:07:76:fa:b8:0d:15:76:2c:97:fd:37:2a:05:
55:2d:bb:b4:7e:e0:5e:b9:0e:00:5c:b4:89:d8:53:
3f:fd:33:cf:c5:63:6b:fc:54:13:ae:4f:4f:cb:fe:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:AE:D6:A0:EA:ED:99:4D:D2:57:B7:17:04:49:DB:62:70:50:47
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.12.0/22
Signature Algorithm: sha256WithRSAEncryption
14:ed:71:2a:e5:f9:82:1b:d1:77:40:23:a6:79:47:e4:3c:5d:
60:cf:9d:4d:f0:ca:49:d7:55:74:f1:e7:7c:f5:ca:b1:37:ab:
b4:dc:fb:5f:48:6c:70:e1:d0:85:22:cf:ba:e9:1b:79:92:b1:
d6:4b:4f:f4:e6:6f:cc:fa:bc:cc:55:0f:63:de:62:66:5e:a7:
a5:86:0c:a5:66:22:49:d6:0e:b5:fc:35:45:54:71:8f:c1:bd:
84:f8:d3:4b:3f:30:6e:e1:55:e7:8c:94:68:83:ef:6d:28:f1:
e0:2a:1b:03:76:97:e7:32:6d:8c:a3:b9:4b:bb:59:0d:3a:24:
b8:98:9d:6e:85:27:88:12:9e:ce:33:fd:69:ab:5d:5c:53:ec:
27:b7:e0:ae:f6:3f:c9:fe:86:bf:a6:06:41:55:4a:24:ba:d8:
97:92:9a:c9:95:26:7e:6e:46:1d:eb:f9:19:71:a4:b1:47:c5:
49:75:d2:6f:f8:31:ff:65:23:dd:f6:b5:71:ce:bd:5c:22:ec:
d7:d1:42:05:45:fd:82:41:61:b3:74:f3:f9:e3:50:8c:ba:2a:
6e:b5:35:8e:fe:bc:19:b4:0a:a5:3e:3b:83:4d:77:9b:ea:29:
34:6b:d7:81:c0:18:9f:af:52:ad:85:07:09:d8:36:27:10:5d:
1a:a7:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:33 2025 by rpki-client