Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/XXE5WlIT_ozyEAytSpXB35caxkQ.roa
File: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (raw, json)
Hash identifier: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=
Subject key identifier: 5D:71:39:5A:52:13:FE:8C:F2:10:0C:AD:4A:95:C1:DF:97:1A:C6:44
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 019421B16F2FE37BD11F5DEFAEABF6A61C78
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/XXE5WlIT_ozyEAytSpXB35caxkQ.roa
Signing time: Wed 01 Jan 2025 11:47:43 +0000
ROA not before: Wed 01 Jan 2025 11:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62451
IP address blocks: 185.35.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:6f:2f:e3:7b:d1:1f:5d:ef:ae:ab:f6:a6:1c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Jan 1 11:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d71395a5213fe8cf2100cad4a95c1df971ac644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:ef:b3:07:1e:9b:05:51:87:30:7f:3d:d1:
b1:4f:60:b3:7b:47:ff:b6:a1:22:05:16:5d:c1:23:
e5:26:f7:81:e4:7a:e2:5d:18:92:e3:20:26:a4:5c:
9d:f6:93:a8:14:b3:91:bb:51:a3:e8:d1:62:d8:e7:
23:30:85:0d:4c:8f:40:17:97:f7:b6:60:a9:dc:20:
13:bb:b7:13:75:11:e3:69:14:2d:aa:9b:87:f0:16:
22:5a:99:f8:41:bd:44:9e:1d:0e:96:c6:5a:9b:3d:
96:4b:76:de:2a:9f:8d:db:75:0c:d2:9b:5d:29:04:
ae:05:25:d8:cf:93:a7:b6:bb:ef:9f:d3:66:a2:84:
71:b5:de:72:91:d4:2b:99:3a:bd:92:4a:bc:09:b6:
75:42:00:b6:bf:b8:4a:8a:64:78:8d:44:6d:2d:17:
ad:10:b5:16:36:ed:b1:42:c7:dd:81:41:39:a9:21:
6b:1e:41:87:61:4e:c0:91:86:64:ac:2c:a0:42:78:
c7:9f:4b:06:35:9c:a0:08:c1:6d:8c:b2:5c:79:6c:
a6:d8:b9:8e:a7:7e:12:87:6a:5d:18:41:a8:32:7e:
9f:42:47:fc:40:54:fa:68:79:55:bd:67:f5:c7:c3:
6f:48:76:41:be:29:f6:ac:03:ae:47:38:30:73:2b:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:71:39:5A:52:13:FE:8C:F2:10:0C:AD:4A:95:C1:DF:97:1A:C6:44
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/XXE5WlIT_ozyEAytSpXB35caxkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.152.0/22
Signature Algorithm: sha256WithRSAEncryption
43:a6:56:3c:84:6a:f2:91:21:26:68:04:09:0d:f3:4d:be:15:
d5:44:bf:bf:2f:e6:bf:64:75:99:42:a3:6a:08:48:f2:6a:6f:
f7:e9:15:3d:e4:ae:13:e8:02:1f:63:50:d6:34:f0:09:61:72:
59:8b:40:5f:3c:aa:7b:0a:34:c7:01:3f:ca:cf:d4:a0:25:45:
87:70:03:e7:ed:98:f0:c7:b8:b4:6b:81:b9:d7:11:4a:52:8a:
da:4f:1a:bb:82:b3:80:ce:11:db:ae:14:ff:c8:d7:46:9f:0b:
ca:d5:c9:e0:cb:c7:eb:a8:eb:57:1c:c8:5d:8d:0b:46:a0:2f:
7a:ac:44:b1:44:8b:0f:1d:23:80:81:4a:73:33:9f:75:7b:57:
6d:97:ee:c4:dd:0c:ef:49:36:f6:5a:25:27:d6:92:56:e2:ea:
5c:ff:d2:34:5b:07:20:32:8e:ec:88:0f:6e:fb:bf:7b:c3:4d:
6a:96:38:3d:66:e7:b7:04:de:20:67:49:36:f0:f0:96:0a:aa:
0f:6c:b2:83:41:0a:c9:a7:70:ba:f4:33:8e:f4:c6:1a:c9:ff:
7a:fa:47:36:ab:db:b7:d7:22:6a:4a:37:81:e5:43:fb:4d:12:
8a:97:08:bd:41:a7:8c:e9:7b:d6:b3:88:4b:48:88:24:a7:25:
eb:bc:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:33 2025 by rpki-client