Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/Q07EucI5XyAYo9s-A9qqwpcEGlA.roa
File: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (raw, json)
Hash identifier: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=
Subject key identifier: 43:4E:C4:B9:C2:39:5F:20:18:A3:DB:3E:03:DA:AA:C2:97:04:1A:50
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 01942143FE20000D4204F1992C8E0013CFF0
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/Q07EucI5XyAYo9s-A9qqwpcEGlA.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211559
IP address blocks: 185.25.12.0/23 maxlen: 23
185.25.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fe:20:00:0d:42:04:f1:99:2c:8e:00:13:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=434ec4b9c2395f2018a3db3e03daaac297041a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:75:6c:3f:8c:15:5f:fb:5d:c3:66:4b:ea:
48:1f:c9:23:6d:30:5e:4d:5f:b4:51:81:1c:d8:bd:
f7:3b:e9:04:e0:8c:f4:a4:d6:ff:75:a9:e0:2f:47:
ea:51:ce:9a:ad:c3:f4:69:69:47:de:a7:e3:38:bb:
d9:cd:d5:84:dd:d5:fb:58:79:9e:2b:76:ef:f2:e3:
c8:07:a7:96:d3:18:90:ae:3b:b1:2e:24:3b:a0:2f:
d3:b1:d7:94:e9:28:c1:db:ab:9e:43:86:07:9f:b1:
22:f7:e2:39:e8:5b:29:41:93:7f:b3:9a:be:4d:0c:
13:0f:28:ce:dd:9b:84:9e:08:9d:92:9f:c7:ad:04:
77:fe:4f:b6:86:4a:50:58:9f:0c:3a:d9:0d:5b:45:
4e:05:53:a6:fa:11:02:73:09:33:f9:c2:5e:9e:c5:
07:86:e0:53:c4:70:f3:07:6c:30:86:dc:b7:cc:86:
da:5c:b3:3f:5d:eb:01:b7:ca:da:e4:fb:f7:f6:cf:
45:45:75:1e:bc:99:e6:8f:41:de:80:d9:d3:7e:ed:
d9:e4:04:d5:f0:01:00:e2:e3:f6:ad:4f:00:ab:24:
3a:f9:74:16:c0:92:fd:0d:45:35:9b:5b:46:a3:62:
1e:54:ff:42:8e:32:cb:a5:8e:4c:ad:95:11:52:10:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:C4:B9:C2:39:5F:20:18:A3:DB:3E:03:DA:AA:C2:97:04:1A:50
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/Q07EucI5XyAYo9s-A9qqwpcEGlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:0b:50:91:93:10:da:0a:a2:47:26:d6:7c:f3:e7:d3:54:03:
ee:7a:a6:ea:94:23:1f:fd:97:25:6a:fc:1c:bb:54:f8:83:b0:
dc:d7:a0:34:67:46:d6:e9:6b:55:33:ec:43:bc:04:76:d7:03:
c6:94:ab:8f:cd:5a:06:e0:d2:43:62:30:0d:13:b4:84:d3:0a:
0e:83:5b:2a:ac:d8:07:d5:5f:fa:96:e3:ee:40:15:a1:d8:8e:
8d:58:4e:8f:65:4b:81:6b:10:45:e1:ea:95:79:e0:a1:4b:23:
b7:3c:c4:52:22:3c:97:ca:3f:96:c8:9f:6b:8c:5b:0f:91:22:
ca:78:3c:75:e7:0b:ce:5a:84:75:5a:97:df:6c:d6:ab:6b:66:
79:d7:6d:f0:ff:dc:9c:48:49:a4:82:cf:e6:59:fa:47:00:eb:
69:e3:4f:3a:b8:8a:96:f3:8a:b0:a4:84:58:0b:79:9d:93:1d:
5c:be:17:c8:88:b6:d9:ce:cf:01:a4:a5:08:c6:60:40:86:5d:
29:84:bc:da:b7:d9:4f:04:f1:37:92:01:aa:8b:d9:68:ee:d5:
ae:93:25:e6:24:1c:a8:9e:2b:85:82:92:4a:33:5f:67:7d:c2:
af:23:8d:d4:d5:97:53:3e:a3:91:e1:06:aa:3d:4b:a8:35:6d:
99:2b:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:50 2025 by rpki-client