Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa
File: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (raw, json)
Hash identifier: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=
Subject key identifier: B0:5C:D9:4D:3E:A5:1A:10:92:F8:18:C0:2B:38:2D:98:98:E4:6F:28
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01942445A3E25B9A55ACFA2F666B9CF05BA9
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 185.220.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a3:e2:5b:9a:55:ac:fa:2f:66:6b:9c:f0:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b05cd94d3ea51a1092f818c02b382d9898e46f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:92:d1:0c:27:11:6b:09:13:9a:df:73:9d:37:
20:07:6a:ea:c4:35:1b:95:19:f3:f3:38:7b:31:66:
2b:eb:3c:0d:a3:b3:b3:ba:cc:6c:ad:11:73:b8:04:
a7:34:60:c4:f2:84:02:c2:15:36:89:0a:6d:e2:a4:
fd:06:46:0c:32:83:0b:0b:f7:23:cb:a9:d0:9b:43:
08:f5:3d:61:5c:b1:55:0d:17:db:80:e2:42:1c:4d:
31:35:06:66:af:a4:71:1f:e8:b2:db:d8:9d:0d:ef:
1c:df:e2:fd:b2:aa:7a:46:e5:9a:e7:b6:22:dd:26:
cb:94:38:fc:36:19:c2:fa:f2:8c:9b:1f:61:a6:18:
82:12:a4:c1:f0:8d:2f:fb:47:2b:80:85:a4:69:c9:
84:71:32:57:81:cb:9c:7d:6d:95:14:63:32:cf:dd:
5c:04:28:49:7c:bf:82:db:95:71:20:70:9d:85:17:
fc:b7:6b:c8:af:47:7f:63:68:bc:da:2b:91:9e:bd:
50:68:3d:50:bd:af:d0:f5:03:a4:76:81:b5:a1:d4:
5d:bd:27:58:4e:2b:0f:33:ac:50:b7:31:07:a1:46:
3b:2d:cb:c8:e9:0c:74:c8:7d:79:af:c9:98:6c:d4:
1a:a9:26:c3:d7:42:69:1d:5a:bb:9f:1d:9c:37:68:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5C:D9:4D:3E:A5:1A:10:92:F8:18:C0:2B:38:2D:98:98:E4:6F:28
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.147.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5f:ad:76:ce:af:e5:8c:45:01:b6:6e:47:20:73:49:38:fd:
a9:38:3c:17:7a:5b:45:5a:7f:9a:c7:4b:40:da:5a:8c:3d:71:
bb:b6:de:89:08:ba:f6:c9:91:96:e2:e6:f6:e4:5d:30:87:45:
f0:f8:40:a3:4f:b6:24:b5:98:90:7c:63:40:74:84:35:25:a5:
86:00:17:3e:e5:e4:4e:f6:fe:90:d0:4e:76:49:c2:b0:36:e9:
b6:0f:24:98:f7:6c:5f:06:22:fe:d6:ec:79:48:97:f4:d7:af:
41:57:e8:c3:a0:ef:c4:b6:96:e8:71:62:b8:25:0c:08:83:54:
36:f1:66:9c:78:8d:c0:32:33:04:67:53:18:10:ae:f2:ae:f3:
8e:65:e5:8e:25:00:ce:db:5c:44:d0:24:a4:bb:d6:07:2d:1f:
8c:c5:57:91:06:da:75:1b:e3:ed:a3:3b:19:42:5b:29:3f:0a:
c2:95:6b:5d:3c:f5:6f:70:a3:14:1e:b7:51:5e:ea:e2:04:26:
c9:86:74:d2:1f:a9:0e:be:0d:42:f8:c2:24:e9:0a:a2:58:09:
7e:ef:db:90:ff:bb:43:72:1a:09:66:34:b6:68:21:9b:9a:88:
54:b2:7f:25:0a:1d:d4:5f:0e:3b:8c:be:cb:08:e4:31:68:24:
cc:4d:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:37:01 2025 by rpki-client