Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/bollIzhNfRvYanh5m9u8c1tqdcM.roa
File: bollIzhNfRvYanh5m9u8c1tqdcM.roa (raw, json)
Hash identifier: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=
Subject key identifier: 6E:89:65:23:38:4D:7D:1B:D8:6A:78:79:9B:DB:BC:73:5B:6A:75:C3
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 01948956ACC9D9E4C9842B94E6E6CD3CEE8D
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/bollIzhNfRvYanh5m9u8c1tqdcM.roa
Signing time: Tue 21 Jan 2025 14:49:06 +0000
ROA not before: Tue 21 Jan 2025 14:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214415
IP address blocks: 185.175.108.0/24 maxlen: 24
185.175.109.0/24 maxlen: 24
185.175.110.0/24 maxlen: 24
185.175.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:56:ac:c9:d9:e4:c9:84:2b:94:e6:e6:cd:3c:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Jan 21 14:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e896523384d7d1bd86a78799bdbbc735b6a75c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:13:8d:e0:bb:a4:1c:0c:c2:4f:04:96:80:
59:94:9c:46:49:76:bf:13:62:9f:70:6f:18:ae:60:
ba:39:66:df:4f:a0:71:f6:56:5a:1f:b3:77:cc:54:
02:d9:ba:54:93:4a:0d:5c:b0:59:0f:7d:e8:02:23:
11:cc:50:01:db:19:c3:39:45:f7:cd:08:8b:ad:f2:
21:59:da:f8:0d:ee:af:66:7f:60:cb:13:20:29:a8:
d6:67:38:98:c9:8b:39:03:0e:cd:73:c7:7b:c5:03:
c8:a0:7a:2f:93:52:7f:9c:b1:0a:52:52:70:3e:bb:
1b:b8:8f:ff:4d:10:67:65:db:4b:84:b2:60:b6:2b:
20:11:f3:19:66:51:86:4a:7b:2a:cc:37:3a:cb:67:
30:0a:b0:64:d1:a4:3e:65:51:b2:bb:ad:5b:92:b3:
7c:c1:cc:46:65:82:b6:fc:ab:fd:80:bd:63:8e:9a:
84:7a:eb:be:e4:9f:d2:00:e8:7f:9b:90:36:1f:ef:
9b:3f:2c:92:46:1c:ea:bb:39:14:75:2b:db:f6:9b:
80:81:79:80:fa:c8:14:9d:5f:4d:10:5d:5b:76:39:
95:e0:9c:dd:96:34:b8:07:b0:cb:32:9e:b6:1a:73:
ae:7c:1c:d1:82:1d:a2:95:ba:3d:d0:42:f2:56:82:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:89:65:23:38:4D:7D:1B:D8:6A:78:79:9B:DB:BC:73:5B:6A:75:C3
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/bollIzhNfRvYanh5m9u8c1tqdcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.108.0/22
Signature Algorithm: sha256WithRSAEncryption
35:47:ea:3b:a7:9e:84:d9:30:ea:dd:1a:35:ef:71:9c:96:da:
1d:d2:dc:dd:e7:65:56:75:c8:e5:a0:f6:cc:80:3f:85:e5:c0:
4f:42:a6:89:f1:d3:b9:8b:ea:28:7f:4a:48:19:f3:f1:71:a3:
ea:8a:b1:f4:cc:59:56:56:b0:ed:e4:02:37:66:2b:53:aa:ab:
08:53:d5:2b:c5:6c:b4:d9:0d:11:cf:f0:ff:44:b1:ca:74:cb:
71:b8:9d:f5:0a:98:4c:91:ad:f0:04:bd:41:71:c5:c8:dc:da:
49:37:57:2b:6b:52:6c:7a:a4:97:14:65:f0:27:d9:2e:54:70:
06:81:12:b0:b4:14:23:b2:fe:39:16:f5:ab:11:1f:e7:32:60:
ec:fa:0c:07:1c:66:39:c9:7c:99:a8:97:67:0a:73:68:36:9c:
a4:04:25:ca:66:d5:98:3e:be:85:cc:d2:7f:33:76:e2:ba:ac:
c7:5f:52:c1:4a:c7:3e:57:de:45:6b:34:42:4e:46:bd:2f:9d:
da:ef:2d:14:dc:da:86:31:78:82:f0:13:7b:08:06:86:f9:fc:
eb:f8:a8:6c:e1:72:a7:c7:f9:90:c3:e2:6e:5c:3d:c4:fd:15:
db:e1:e0:a9:2f:1c:ec:89:af:1f:94:20:a3:50:a0:f5:ad:1f:
67:78:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:13 2025 by rpki-client