Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/Q5iFmaLsdZ56__8l9nM7tEbDyfM.roa
File: Q5iFmaLsdZ56__8l9nM7tEbDyfM.roa (raw, json)
Hash identifier: 5kc1y1TadZ9fQTscqgq2EW+6EO2m9pt/3h4LP5qu5xA=
Subject key identifier: 43:98:85:99:A2:EC:75:9E:7A:FF:FF:25:F6:73:3B:B4:46:C3:C9:F3
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019078017112E163C25DB37E7CCF588467AC
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/Q5iFmaLsdZ56__8l9nM7tEbDyfM.roa
Signing time: Wed 03 Jul 2024 09:51:18 +0000
ROA not before: Wed 03 Jul 2024 09:51:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.113.66.0/23 maxlen: 23
185.194.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:01:71:12:e1:63:c2:5d:b3:7e:7c:cf:58:84:67:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jul 3 09:51:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43988599a2ec759e7affff25f6733bb446c3c9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:fa:94:48:2e:1f:5d:9f:8c:c3:ab:14:15:
a1:d4:f3:f5:83:fe:26:a1:c9:5d:fe:5c:06:35:4e:
f5:00:20:5f:e5:a5:4a:e7:01:70:b2:6b:4c:d3:75:
a7:47:0b:59:de:a0:82:52:16:fc:f5:19:d1:de:bc:
e3:6f:ef:ca:c3:9d:3e:11:71:9f:35:46:2e:59:cc:
49:aa:b9:90:5c:33:2b:2f:6f:e4:c7:7f:13:38:da:
2f:54:19:1d:b2:57:f0:7c:31:ad:94:51:d7:64:36:
50:92:b1:f6:42:03:3e:6a:3b:e4:8f:e3:d9:b6:a2:
32:7a:c8:21:c8:49:80:08:45:57:08:07:b0:4d:0a:
e4:63:c7:e4:4e:60:87:b2:37:e4:ca:d2:49:55:33:
bd:93:d7:8a:12:c6:70:35:2d:ac:2b:54:7e:b7:6a:
db:88:cc:06:32:c5:83:a3:65:0f:ed:99:f7:c0:7e:
6a:7c:48:18:3f:c5:e6:b0:38:3d:0f:65:28:bc:04:
fd:bc:f3:00:88:14:34:61:90:9b:36:40:ce:8b:94:
d0:3a:f2:cb:5f:73:bc:5d:ca:5d:c1:69:c5:97:34:
ef:1b:f4:b1:6c:f6:f2:ba:d0:06:33:01:c3:2c:08:
fe:da:3b:73:90:b7:1b:3b:95:ee:81:a1:51:2c:5c:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:85:99:A2:EC:75:9E:7A:FF:FF:25:F6:73:3B:B4:46:C3:C9:F3
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/Q5iFmaLsdZ56__8l9nM7tEbDyfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
41:0c:a1:c0:d6:57:ee:48:45:a6:8d:d2:83:cf:ec:1a:c1:c9:
f6:a5:15:79:61:31:db:40:46:c1:f4:5d:ea:2d:1e:ba:02:59:
c5:52:cc:aa:dd:32:1c:5f:b0:b5:ad:b8:eb:62:be:8c:20:b8:
1a:79:68:46:de:e4:e5:99:c2:d0:8a:2e:5f:53:e5:d0:13:a3:
60:46:75:87:4f:cd:33:da:a1:87:7c:9d:c9:aa:3d:f1:e2:88:
22:a4:57:a4:f7:d9:93:0a:38:95:35:b1:2f:97:c1:bc:94:96:
f1:31:88:21:76:24:e1:ed:70:90:58:26:27:a6:be:48:7e:d1:
8f:d4:de:14:75:45:ad:99:e2:d6:54:4d:b8:df:15:96:1b:13:
98:0a:db:27:45:ca:f4:03:db:82:d5:3b:89:0b:34:d1:f7:44:
eb:e9:74:3b:06:71:cb:37:b7:0e:23:01:0d:43:b1:04:18:8d:
69:2e:77:5b:a5:23:ae:4d:97:b1:1d:8c:18:e8:8f:cc:a6:46:
16:45:96:17:17:c0:5d:17:20:5a:4f:e2:af:d3:e0:7b:a9:ec:
f2:1e:bb:27:5d:6b:9a:84:e5:f3:b1:fe:3e:5a:9d:a5:7c:da:
49:3c:81:77:eb:81:59:86:74:1d:45:6c:40:01:22:b3:9e:57:
05:f5:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:48 2025 by rpki-client