Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa
File: 0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa (raw, json)
Hash identifier: WB89xP0WXfzR4P8TznMXEjV3olpCtGvnlUvlrgb2708=
Subject key identifier: D3:FE:64:DD:9D:F2:0B:B0:E0:6D:AF:A1:C4:8D:1F:DE:C5:97:72:B8
Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial: 019420D5C30006BFB8BC076E6F408E9F74C7
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa
Signing time: Wed 01 Jan 2025 07:47:47 +0000
ROA not before: Wed 01 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199786
IP address blocks: 185.50.140.0/22 maxlen: 22
2a01:abe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c3:00:06:bf:b8:bc:07:6e:6f:40:8e:9f:74:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Validity
Not Before: Jan 1 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3fe64dd9df20bb0e06dafa1c48d1fdec59772b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:94:98:87:58:b6:91:6e:37:af:16:a9:6e:
8a:bd:84:8f:28:a6:ee:b1:9f:9f:3c:6f:db:55:10:
e3:1d:7c:b4:ee:38:e3:0d:b4:4c:b6:fa:2c:a9:ac:
10:96:ce:02:e2:58:f7:e8:3d:5a:f9:0e:8d:59:dc:
49:93:1a:0c:55:cf:5d:d7:dd:63:29:f3:d9:61:cc:
87:f8:23:68:54:46:a3:2c:c7:e4:30:e0:22:d7:d4:
a1:38:b8:7c:22:8b:d9:13:9f:ce:e7:62:c9:fd:e9:
e6:1e:01:5a:48:b5:e1:54:1e:56:dc:56:20:ef:d0:
f2:88:2a:70:c6:b8:47:48:fa:b3:7d:89:fa:ec:78:
2c:5d:9c:1c:bd:0d:6e:d4:11:1d:de:eb:c1:46:51:
e2:1c:e0:99:08:c1:70:87:6c:9b:ca:6f:41:89:fa:
c5:a6:0a:06:32:12:f5:d2:8c:ee:19:ae:63:6b:0d:
89:f1:a7:f5:5a:5a:47:5c:72:42:a6:97:b9:23:5f:
21:29:c1:de:a7:9d:d7:83:58:5a:16:85:65:c5:c8:
0a:9e:0d:4d:bf:9f:51:53:8f:93:68:e6:87:94:cc:
1b:0c:2f:5c:99:59:d7:4a:60:9f:5b:dc:80:b1:ab:
eb:48:b6:21:e7:e9:cd:7b:8f:23:2a:c9:2b:c6:94:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:64:DD:9D:F2:0B:B0:E0:6D:AF:A1:C4:8D:1F:DE:C5:97:72:B8
X509v3 Authority Key Identifier:
keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.140.0/22
IPv6:
2a01:abe0::/32
Signature Algorithm: sha256WithRSAEncryption
55:4b:57:71:4e:f8:bf:d6:54:07:98:3b:76:b3:b8:7c:0a:e1:
d1:0a:d7:1a:29:db:3a:2a:d0:8d:3c:38:d4:42:e1:7e:de:d5:
59:08:42:a7:da:ec:d3:65:41:59:a1:1f:b7:fd:49:ba:dd:fc:
56:d6:7b:b1:c8:6b:8d:29:63:a2:ad:a3:05:74:de:19:02:dc:
25:69:ac:40:72:f8:ba:d8:95:a7:0f:04:4d:0c:cf:5f:a3:1c:
d7:1c:54:1a:95:9f:ee:70:33:d3:21:ac:86:a1:32:1e:0d:4e:
de:f1:0f:3d:27:a3:c3:97:9f:ba:fe:ee:2a:ea:51:b1:fa:3b:
34:e1:23:08:37:82:aa:32:55:00:5b:b8:93:2b:1e:ef:3a:84:
75:de:29:2f:03:3d:c2:a2:1a:09:4f:6c:80:1c:4f:d3:1f:0f:
61:34:86:f0:15:3e:ac:a9:66:77:e0:4a:89:a7:52:34:65:b4:
b4:f3:97:ed:8d:8f:2a:93:d6:66:f2:eb:cb:2e:e1:93:4c:e6:
d2:68:65:8d:58:9b:78:35:11:57:60:80:a8:1c:ec:10:c2:53:
2f:74:40:bc:cd:0c:98:ab:6e:23:05:46:85:10:89:6c:27:63:
94:76:17:d9:a5:84:f7:c0:26:b5:a5:cb:56:a0:05:70:d3:d8:
0e:d9:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:48:52 2025 by rpki-client