Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/JEDgkveNrJ65vuQX11mg8UnyJUY.roa
File: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (raw, json)
Hash identifier: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=
Subject key identifier: 24:40:E0:92:F7:8D:AC:9E:B9:BE:E4:17:D7:59:A0:F1:49:F2:25:46
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019425209A283B7CCD7FA9BC77B21C97E9A2
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/JEDgkveNrJ65vuQX11mg8UnyJUY.roa
Signing time: Thu 02 Jan 2025 03:48:01 +0000
ROA not before: Thu 02 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208058
IP address blocks: 185.125.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:9a:28:3b:7c:cd:7f:a9:bc:77:b2:1c:97:e9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 2 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2440e092f78dac9eb9bee417d759a0f149f22546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:7d:0a:ee:9f:ec:99:94:6f:45:4f:12:d2:
ba:e4:5b:3b:fe:c1:60:7f:99:ed:b0:ec:cb:04:db:
65:f6:b8:f6:f4:40:3a:3c:2e:fa:58:3b:27:be:73:
bd:b8:2c:a2:bd:24:64:2f:82:2e:7f:ac:78:c1:68:
95:37:e1:80:e6:ad:b4:de:a9:4c:36:75:c2:63:66:
56:58:26:50:f9:d6:54:b1:74:18:2c:f5:e1:8b:d8:
c9:0d:dd:70:5d:5e:95:2b:0f:25:5d:9f:4d:c7:ae:
7b:56:32:dd:e3:c0:e3:00:7c:42:4e:0b:4b:6f:a7:
04:a7:d3:0e:86:78:e9:62:d3:27:18:47:6c:b4:96:
92:6b:77:28:79:2a:24:1c:94:d0:d9:e6:7c:12:8a:
78:cc:d3:5b:2b:da:d5:e2:4d:c7:c4:44:19:66:ce:
0b:22:24:5f:21:ed:4f:e3:d3:2a:6f:9b:da:27:9b:
10:66:02:72:45:b8:a6:4d:56:fa:c3:62:83:fa:1b:
cb:e5:ea:c8:d0:05:d4:70:f3:e1:87:bf:33:35:d9:
1b:56:89:b1:23:1e:72:0d:ad:60:26:fe:b0:fb:6c:
cb:8b:8f:fd:bb:19:8c:67:ef:c8:e1:51:68:53:e5:
41:28:4f:bd:a6:9d:e5:18:c1:ce:83:14:66:3f:40:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:40:E0:92:F7:8D:AC:9E:B9:BE:E4:17:D7:59:A0:F1:49:F2:25:46
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/JEDgkveNrJ65vuQX11mg8UnyJUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.192.0/22
Signature Algorithm: sha256WithRSAEncryption
09:88:2b:24:ef:82:53:9b:b1:2e:91:88:a2:d9:79:16:fc:1b:
18:1f:6a:34:d9:18:db:28:88:05:1d:4c:bb:e1:ac:f5:b9:6d:
f0:73:3b:12:b6:64:58:fd:6f:50:36:72:48:ea:7f:fb:5a:b2:
e4:88:78:da:f4:77:31:f5:43:c1:27:2a:97:d4:63:d4:d8:7a:
3a:60:1e:d8:4a:0f:21:ea:67:33:bd:9e:e4:1e:44:26:35:50:
94:90:7c:6b:d3:35:cf:d7:db:47:0b:9f:3a:d0:dc:53:e7:5b:
6a:0a:7e:67:ac:72:b8:47:7f:69:e0:3c:18:b2:9f:03:6d:4d:
2d:1c:df:53:6f:0d:a3:75:f3:63:da:dc:6f:c2:ae:ec:49:5b:
74:b6:7a:ac:84:57:c7:ba:df:7e:64:01:6e:df:fa:aa:c8:fd:
4d:be:28:40:b9:45:04:e5:0b:c8:92:17:5f:58:a9:6e:08:76:
e6:9b:94:1a:a1:ca:89:85:3e:bf:73:65:98:f0:cf:83:d8:0a:
be:a4:a0:9b:d2:87:d5:d7:ed:6d:2d:ab:08:60:b8:0d:cf:8f:
2f:e3:d3:83:ce:55:20:69:7f:7e:c0:64:57:b6:5d:b0:c1:be:
be:d0:54:36:e0:fe:85:c5:60:cb:3a:03:a9:e1:58:8a:f6:9e:
d6:9d:4f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:11 2025 by rpki-client