Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa
File: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (raw, json)
Hash identifier: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=
Subject key identifier: 5F:62:01:83:ED:19:A0:6D:E7:CD:D6:CE:52:AA:05:A5:F3:73:4E:23
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 0195B9305E91B0C88E2DF6C97680595F0361
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa
Signing time: Fri 21 Mar 2025 14:51:49 +0000
ROA not before: Fri 21 Mar 2025 14:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 185.211.132.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:30:5e:91:b0:c8:8e:2d:f6:c9:76:80:59:5f:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Mar 21 14:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f620183ed19a06de7cdd6ce52aa05a5f3734e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:ef:18:5b:73:43:da:d4:59:e8:2e:62:cf:
73:06:6a:81:d5:84:d1:47:e8:ab:ab:9e:df:3a:ed:
6b:96:da:01:03:9e:c2:00:09:1a:9d:97:8a:d6:f6:
8f:5a:47:5b:7a:62:85:15:84:c3:61:b7:1f:1c:f6:
3c:ad:f2:d8:97:20:f2:6c:b3:9d:d9:7c:08:4f:02:
22:d9:c4:bc:75:1c:d3:76:d4:f1:76:a3:80:4b:a5:
d2:49:1b:62:c9:6b:dc:da:ed:b4:00:b6:4f:6d:df:
33:3f:43:99:31:9d:2c:3e:7e:62:02:c7:96:5c:50:
0a:74:00:4a:27:34:da:cf:2c:bb:14:ec:da:02:ec:
82:3c:6e:10:e8:6f:56:77:cc:2b:64:74:84:b7:63:
db:87:24:2d:81:59:1f:cb:76:7a:a3:d3:97:30:dd:
8e:ae:97:2c:79:ad:6e:e0:7b:2c:d2:91:72:00:38:
58:84:1b:6a:48:ca:da:5d:24:8b:61:9a:4a:ae:4b:
31:e0:32:2b:d4:ca:d1:18:d1:59:52:20:e3:e2:0f:
3a:ab:4e:07:c3:38:f7:fb:df:77:16:8b:d4:39:5a:
38:f8:b4:a5:70:4b:d3:ec:d8:fc:86:2a:dd:66:60:
2c:ab:22:9c:77:64:5a:97:26:38:28:b4:91:68:84:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:01:83:ED:19:A0:6D:E7:CD:D6:CE:52:AA:05:A5:F3:73:4E:23
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.132.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d7:10:62:79:30:5d:7f:e7:56:71:29:3a:c6:36:35:57:f4:
c8:d3:22:13:8c:2d:25:44:60:45:da:f4:9a:42:9b:25:cf:f9:
f5:4d:68:32:f1:f2:ce:e3:c3:b4:50:b3:a7:0a:9b:40:8e:cd:
4f:a3:77:c8:a2:ff:aa:97:02:39:fa:f5:f9:22:a2:df:67:a5:
42:df:dd:b1:f7:61:35:e1:ef:8a:1c:76:0b:40:22:1f:c2:f4:
79:31:c1:99:17:1f:fc:a8:68:6b:58:62:89:2e:6d:b1:af:32:
af:69:08:f3:a4:b3:ce:aa:fa:6a:78:61:67:13:6b:6d:56:12:
68:33:62:f3:0d:dd:61:b2:df:94:b1:3a:63:6c:1d:15:7b:40:
07:b6:f0:29:01:b6:0a:94:88:05:3e:19:2a:cc:a9:a3:52:23:
73:4b:25:57:44:93:eb:fa:4e:41:7e:fc:2a:0f:fe:4b:5b:42:
02:a7:50:be:b3:c3:84:e9:38:19:07:1f:af:8a:2e:fe:d6:64:
de:16:42:51:eb:b3:7b:79:34:ad:74:eb:68:84:bd:96:0f:52:
22:f3:34:23:52:95:c9:a9:92:9f:fa:bf:4e:84:96:fa:e3:39:
fa:28:94:c7:43:5b:62:da:99:19:08:a9:40:d3:03:aa:c7:1c:
ce:e9:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:50:38 2025 by rpki-client