Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/biUWqJNkwCLwTQCIKmoRRrKwBdQ.roa
File: biUWqJNkwCLwTQCIKmoRRrKwBdQ.roa (raw, json)
Hash identifier: GnO+QVei8Vle4+1N/MUYYQK1LOgHwUlkdAPzcdRPuE4=
Subject key identifier: 6E:25:16:A8:93:64:C0:22:F0:4D:00:88:2A:6A:11:46:B2:B0:05:D4
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0195D2E44409B2195F14B127D78CD84CA926
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/biUWqJNkwCLwTQCIKmoRRrKwBdQ.roa
Signing time: Wed 26 Mar 2025 14:38:49 +0000
ROA not before: Wed 26 Mar 2025 14:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.189.244.0/23 maxlen: 24
185.189.246.0/23 maxlen: 24
194.104.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:e4:44:09:b2:19:5f:14:b1:27:d7:8c:d8:4c:a9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Mar 26 14:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2516a89364c022f04d00882a6a1146b2b005d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:4e:83:9c:79:a3:b5:2d:c1:86:9a:ba:7e:
dd:4b:5a:5b:e0:fc:8d:d9:fb:60:10:95:d9:dd:78:
4b:53:69:6e:a4:12:6f:e2:95:94:67:74:1a:c0:85:
da:6f:9c:cf:49:aa:fe:8f:23:3f:8d:c1:b9:8d:82:
6d:e3:79:cd:48:77:87:ec:10:9a:2d:0d:28:f4:53:
ab:36:fc:da:63:ed:5c:1d:fa:24:f0:37:01:9f:ca:
31:a5:ec:1b:c0:68:0d:4b:94:cb:7d:b9:5e:2d:75:
b7:3e:a3:39:1b:85:fd:7a:e9:0c:36:92:7f:5c:6f:
e3:a9:55:b4:c2:20:2f:89:6d:f1:c5:86:8e:38:e8:
be:55:71:61:0e:e9:af:d3:82:0c:9b:78:81:49:2e:
f3:d3:58:cf:a2:9c:b5:3a:4e:16:5d:12:91:96:4b:
d9:5a:c5:92:79:f3:21:58:2d:88:2e:88:32:6a:f1:
6b:a9:5b:44:8e:e7:9e:a8:0c:91:40:db:84:65:83:
97:13:04:0d:02:cc:5a:c9:90:29:08:dc:63:28:94:
0a:4e:d5:25:6f:47:d1:d1:6b:68:23:2f:3b:d1:6b:
c7:d6:7a:2f:b3:ac:ef:db:87:5c:17:72:fd:b7:0b:
0b:f5:3a:6f:fd:62:4b:b4:c1:0c:ea:75:ff:c3:cf:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:16:A8:93:64:C0:22:F0:4D:00:88:2A:6A:11:46:B2:B0:05:D4
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/biUWqJNkwCLwTQCIKmoRRrKwBdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.244.0/22
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7a:23:63:07:86:b8:e8:3b:fa:76:f1:77:9b:dc:b6:cc:e7:
ee:2e:86:9c:12:c4:5b:b3:e1:49:a2:89:50:cf:95:0c:b4:a4:
5d:b8:02:48:8a:a7:02:5d:80:84:2d:f2:b8:d1:f4:4a:76:f0:
d8:ce:7c:90:e9:cb:35:bc:b1:40:d3:1c:80:0d:13:cf:7f:1e:
02:0a:b1:98:51:bb:da:2e:1b:50:aa:58:5d:30:5a:e4:b9:5a:
c4:27:85:ab:21:4d:d9:2a:58:02:32:5c:37:71:74:d3:1e:e6:
fc:9b:92:cb:13:01:75:d0:3c:27:ce:32:65:a1:93:5d:9a:c1:
6e:f2:c2:0f:f4:77:bc:1d:52:c1:ed:6a:4a:ae:a6:d0:1b:61:
5e:fc:7d:62:53:91:a5:7c:87:9d:53:9c:3b:0a:b3:f6:5e:5f:
7d:1c:14:f3:fe:5b:78:f1:f8:e4:38:3d:71:d1:c1:e3:1a:c9:
7c:98:1e:fe:2b:c3:60:3f:f3:60:d8:d6:19:87:8c:d2:53:49:
92:85:96:7a:bd:4b:fd:29:c1:82:85:48:ba:50:46:5d:cb:dc:
bd:82:64:3a:ae:4f:2e:5d:8e:72:6a:ee:e5:44:b4:69:02:8f:
cf:60:e2:58:85:e2:80:fc:b2:96:b3:36:69:06:09:bf:fc:9c:
56:c7:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:23 2025 by rpki-client