Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/sraNB3Tq9hs6fPR3orHTINDfXdM.roa
File: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (raw, json)
Hash identifier: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=
Subject key identifier: B2:B6:8D:07:74:EA:F6:1B:3A:7C:F4:77:A2:B1:D3:20:D0:DF:5D:D3
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 0194258F6D30824C53FD7552DB35376F2ACC
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/sraNB3Tq9hs6fPR3orHTINDfXdM.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205452
IP address blocks: 185.218.40.0/22 maxlen: 24
2a0b:d2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6d:30:82:4c:53:fd:75:52:db:35:37:6f:2a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2b68d0774eaf61b3a7cf477a2b1d320d0df5dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:09:f8:03:25:a4:af:f7:98:0d:c8:5e:61:
7e:d0:5f:95:82:b4:02:4a:5d:e3:5e:b5:0f:9b:18:
e7:de:8d:5a:31:53:ec:15:80:b5:63:4c:63:38:f8:
2d:41:7b:a0:1c:6d:a3:d9:12:55:a5:10:44:b3:08:
13:ed:7e:4c:c1:18:49:e9:a6:f1:ab:64:1d:9e:55:
96:7e:5d:45:80:e1:a5:e3:e6:ff:43:e6:90:6a:ef:
86:88:59:15:48:7a:96:e6:ec:e4:6e:70:28:e0:f6:
b9:2f:b8:eb:4d:d8:39:10:9d:37:05:e6:03:ed:53:
7c:4f:58:4a:95:78:35:09:9d:82:29:9d:10:e4:4d:
46:49:5f:7f:0e:9e:61:d2:af:a0:ab:87:a0:4e:39:
e4:2e:d4:a6:01:75:96:47:d4:e3:62:69:c3:2d:45:
d8:19:51:9a:39:f9:08:68:2c:04:6d:23:ad:e9:a2:
0f:e8:a2:32:63:9a:52:4c:91:c0:67:5b:1b:5f:d6:
95:10:21:70:8d:54:3a:c0:10:21:67:d8:16:46:bd:
52:32:44:64:07:ca:11:36:3a:04:dd:5d:24:0f:0e:
e9:7e:5c:bf:13:66:25:f3:dc:e7:71:1d:dd:ca:92:
10:07:6e:58:34:6a:8c:d7:3e:ba:1f:e8:b6:8d:1f:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:8D:07:74:EA:F6:1B:3A:7C:F4:77:A2:B1:D3:20:D0:DF:5D:D3
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/sraNB3Tq9hs6fPR3orHTINDfXdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.40.0/22
IPv6:
2a0b:d2c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:a5:9d:37:8a:62:ac:ba:d1:ba:cc:fc:0c:f3:30:11:a6:ee:
05:27:f0:7c:ab:27:ee:08:9b:66:3b:9f:f5:c1:cb:93:0b:4a:
c7:2f:51:50:8e:78:60:c1:a1:52:ea:11:9d:13:bf:f9:65:86:
93:af:96:db:49:70:93:0c:df:f0:cc:a7:88:76:c4:3e:15:d0:
5b:ac:98:92:1b:36:94:ea:d7:71:bb:ea:f8:c4:83:77:88:f2:
53:54:5a:7b:54:5d:1c:f5:56:3e:fd:df:76:26:bd:3f:14:74:
47:25:c2:3d:c8:fa:9f:cd:77:ee:ff:e6:41:93:f6:d3:d1:83:
18:9c:03:5c:35:4d:19:9d:cb:a8:10:5a:2e:83:41:82:ac:91:
e1:7b:21:ae:91:85:42:f3:4f:cb:d1:46:f3:4b:71:d8:e6:25:
1c:a6:10:76:37:84:1f:ec:78:27:8a:68:75:c0:68:f0:f1:7e:
b8:eb:49:08:c0:4b:36:23:e9:35:cc:70:f1:44:9b:37:d3:96:
a9:6f:5b:58:c9:f2:cb:d5:55:c2:48:75:fe:5c:0d:ee:6c:b0:
e7:db:12:e0:01:2b:18:3d:5e:7b:8b:0f:c1:6a:68:4e:da:c3:
77:91:de:a9:6c:64:51:1e:4c:d7:d6:56:51:e8:05:9a:ca:12:
ed:8b:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:47 2025 by rpki-client