Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/2Qr14eAD37nuU_5fo7_UeplXIWU.roa
File: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (raw, json)
Hash identifier: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=
Subject key identifier: D9:0A:F5:E1:E0:03:DF:B9:EE:53:FE:5F:A3:BF:D4:7A:99:57:21:65
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 019420D62F439343017044FBD9170BEA8FBC
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/2Qr14eAD37nuU_5fo7_UeplXIWU.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50763
IP address blocks: 185.241.44.0/22 maxlen: 22
185.241.44.0/23 maxlen: 23
185.241.46.0/24 maxlen: 24
2a0c:9880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2f:43:93:43:01:70:44:fb:d9:17:0b:ea:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d90af5e1e003dfb9ee53fe5fa3bfd47a99572165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:d0:ab:0b:6e:28:74:e5:21:ad:43:fe:ad:
a4:d1:05:98:73:8a:ef:cc:63:9c:52:0a:e4:51:d0:
b7:3c:f4:ac:32:be:4f:e9:50:67:5d:8f:04:3c:f0:
e9:0f:e9:b9:9a:2e:6f:c0:ca:51:ac:f5:ec:15:06:
68:15:29:cb:0d:4f:a7:bb:09:5e:94:16:43:64:57:
d5:41:3a:83:e6:1e:85:c1:2d:81:38:f0:83:e2:47:
27:67:bc:3f:85:ae:f4:d4:57:c6:62:c2:96:1b:d9:
95:3c:c1:2c:79:4e:f6:dd:0c:43:cc:e3:29:fc:7c:
d1:1a:7b:82:d2:6f:5c:b0:e8:9b:ab:ca:ba:b4:b3:
05:2f:1d:2c:56:3d:5e:00:f2:92:01:d9:94:58:04:
17:37:79:2d:c9:58:28:1a:cf:80:57:76:42:72:8c:
14:2d:b5:31:df:57:4a:15:02:fd:4a:2a:98:21:00:
9a:fd:95:6d:db:82:fa:15:ae:c1:ef:18:6a:c2:14:
27:b6:1f:ff:7c:8e:f0:20:b5:81:58:34:df:53:a9:
d3:87:a3:4b:19:41:95:17:4f:02:ff:df:bc:19:42:
18:37:e4:63:43:4f:e4:17:c3:6e:48:d7:10:8d:7b:
6e:57:a6:35:a9:47:69:d2:92:69:e1:57:d2:c7:10:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0A:F5:E1:E0:03:DF:B9:EE:53:FE:5F:A3:BF:D4:7A:99:57:21:65
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/2Qr14eAD37nuU_5fo7_UeplXIWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.44.0/22
IPv6:
2a0c:9880::/29
Signature Algorithm: sha256WithRSAEncryption
1f:f5:26:09:26:56:c5:90:be:a7:97:2f:f7:be:23:f8:ca:22:
79:87:6e:a2:06:cb:e1:d9:29:e4:68:c9:54:4c:73:b2:b2:54:
a9:bc:73:32:c7:21:7b:66:4e:08:14:b7:82:c4:04:1d:9b:da:
88:0a:cb:44:fa:e6:33:81:b4:dc:80:db:65:57:b8:b6:b7:22:
a0:97:9e:84:a8:00:91:f9:ed:f7:3a:3e:79:fb:14:6a:0a:53:
0f:9c:b7:fb:ab:48:37:42:f2:93:30:e0:97:00:d8:84:56:6a:
bc:da:2f:08:91:a6:9a:96:56:38:17:fb:d5:90:fc:ee:f8:45:
0c:58:86:db:68:69:cb:ab:7b:db:24:69:82:79:77:0b:ae:50:
95:3e:8a:af:8b:0c:2e:18:18:e5:38:27:31:12:18:d4:3b:4e:
31:f2:40:98:64:46:88:54:a3:f0:16:08:56:31:ea:f0:b7:bf:
1e:5b:49:c2:5d:7f:f4:ba:5b:5e:93:26:16:a7:10:77:2b:4a:
92:00:f0:02:3e:04:ed:2f:97:b0:8e:8e:27:84:ad:8d:23:c5:
60:11:b8:41:ad:99:9d:93:61:a0:ba:10:47:ac:62:2f:d5:ab:
5c:51:21:76:90:33:a6:29:95:4b:d4:9d:80:21:d1:f0:ef:4c:
4d:5d:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:25 2025 by rpki-client