Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/5-QDCscMj9Leh6LzChmbvJFc3ig.roa
File: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (raw, json)
Hash identifier: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=
Subject key identifier: E7:E4:03:0A:C7:0C:8F:D2:DE:87:A2:F3:0A:19:9B:BC:91:5C:DE:28
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0194228DCE3425BB868B5BBE92BF12770AD3
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/5-QDCscMj9Leh6LzChmbvJFc3ig.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.217.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ce:34:25:bb:86:8b:5b:be:92:bf:12:77:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7e4030ac70c8fd2de87a2f30a199bbc915cde28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:13:b3:e1:0d:52:eb:e7:83:ce:1b:b2:85:f4:
16:06:e4:62:6e:dd:40:81:a5:81:03:d6:9f:3e:ff:
e3:16:67:71:7c:9e:c0:35:bc:97:bd:7e:a7:1d:6a:
bb:33:0c:c7:fd:60:a1:fe:a4:c2:45:e9:45:a5:be:
be:a2:71:db:8c:01:8f:ad:a1:69:7e:0d:c5:e1:4c:
64:71:8e:92:f1:5f:4a:6a:f8:3c:b7:0c:2c:0f:6a:
eb:50:27:b0:cb:98:e8:c2:c1:b1:85:aa:88:da:5c:
d0:29:b2:10:69:6d:77:ce:7f:f8:5a:df:08:73:56:
47:60:06:29:2b:c1:6b:29:30:7f:ac:54:f7:37:4f:
d0:30:19:dc:94:b8:69:0a:9e:e8:b8:9d:cc:67:ab:
51:ef:f4:b8:e6:f9:f1:f4:83:7f:e3:1f:88:f0:42:
58:d3:48:bf:68:fe:6a:01:a1:a7:b3:8e:97:22:a9:
f2:f1:dd:56:81:c3:e0:f7:a6:31:a7:60:34:5e:76:
9a:5b:30:18:93:03:76:e8:6c:da:26:6e:1c:6b:19:
6f:e3:5d:32:8c:ce:d9:0c:c2:28:88:7e:7e:26:53:
a7:8c:cb:cc:8f:de:77:76:df:d9:ec:59:27:bf:9f:
bc:8b:2b:57:79:a0:4a:ca:ef:ee:3f:55:07:f9:4a:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E4:03:0A:C7:0C:8F:D2:DE:87:A2:F3:0A:19:9B:BC:91:5C:DE:28
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/5-QDCscMj9Leh6LzChmbvJFc3ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.192.0/23
Signature Algorithm: sha256WithRSAEncryption
14:c2:0a:c2:ca:97:9a:b0:43:ec:02:e3:c8:54:f2:14:b7:5b:
d4:28:e6:c1:f2:cc:96:b3:fa:ee:6c:14:4c:6e:5f:19:24:96:
0a:90:93:b9:5a:30:37:a3:1b:9a:ea:dc:d5:40:42:85:3c:2d:
a4:5d:a3:a6:ca:e9:67:64:ff:cd:a2:de:d9:2f:2a:8b:64:95:
57:2b:83:0f:8e:03:74:6e:44:6e:15:88:6a:0c:d6:bd:bc:6a:
ab:f4:2c:08:1d:ea:8c:82:38:72:e7:6b:ea:fe:f3:5b:3b:df:
2f:ac:ef:56:b5:b5:3c:59:fc:1d:41:2b:0c:a6:fe:09:58:89:
ce:f2:2b:aa:9e:5a:06:91:ef:ca:d7:9b:78:6a:ec:0b:fa:0b:
fe:3b:bc:6c:79:91:e5:ef:96:89:ab:e6:c5:9c:07:1b:38:79:
a1:6c:da:3b:f2:36:4a:d0:c7:c9:40:ef:93:fb:0a:5c:fd:a4:
dd:b9:a9:a8:e1:88:72:1a:b3:5b:9a:c0:30:50:34:2c:29:c3:
08:41:00:7c:ab:40:7a:05:19:73:45:4d:a0:d8:64:51:1e:3b:
fa:41:57:74:f7:a2:be:97:7c:57:b0:64:28:27:9c:a2:be:fa:
c3:4b:03:24:7a:75:20:c0:13:91:53:30:b2:ca:12:d1:b5:3c:
5a:6f:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:11 2025 by rpki-client