Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa
File: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (raw, json)
Hash identifier: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=
Subject key identifier: E6:13:41:8B:8A:4E:87:CB:6E:43:6F:A1:6D:49:99:00:07:28:8F:48
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019422FBAB88986F2B7D0ED325F35646C112
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.148.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ab:88:98:6f:2b:7d:0e:d3:25:f3:56:46:c1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e613418b8a4e87cb6e436fa16d49990007288f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:e0:4b:7a:79:f6:ee:a5:1a:2e:3b:41:f4:
05:07:48:92:13:7f:aa:b6:d9:4d:88:eb:40:0e:85:
48:17:c7:80:98:c1:a6:fb:bd:c3:f7:3d:62:43:17:
52:e9:c3:0b:c4:71:fa:0c:81:76:9f:fa:30:ef:ce:
54:c0:8f:bc:fe:14:96:66:84:e6:72:5f:6f:2c:ce:
c8:ef:77:38:73:87:30:5f:1a:37:09:25:57:5e:84:
17:e0:42:c0:1e:6e:a0:b8:21:b7:f6:98:16:1a:75:
34:2f:eb:20:fb:67:b4:1c:32:42:71:94:9d:e8:dc:
f2:38:0d:9f:de:1a:79:c0:49:55:fa:b7:60:4c:15:
ec:66:a0:ce:3e:00:17:5f:54:cc:8e:52:a2:54:9d:
c6:bf:93:c4:c3:16:19:46:b6:66:aa:23:10:6e:6c:
9f:92:39:bd:ba:c3:80:9f:87:bf:77:39:3c:32:49:
d2:df:3f:76:f0:8f:77:7f:37:b4:18:87:b0:43:91:
8a:08:c2:be:b5:2e:3f:a5:d0:f7:bd:eb:27:66:ed:
05:07:78:fb:8f:1b:47:37:2d:2d:77:db:d5:a8:85:
4f:1b:e2:19:1f:d5:06:4b:08:53:56:4f:5d:6c:3a:
f3:8a:43:c7:76:fd:bb:e5:5a:42:aa:a7:f4:2d:a7:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:13:41:8B:8A:4E:87:CB:6E:43:6F:A1:6D:49:99:00:07:28:8F:48
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.191.0/24
Signature Algorithm: sha256WithRSAEncryption
46:dc:c7:ea:ae:99:2d:50:0f:84:42:bc:6f:2d:6b:e7:2e:7a:
01:76:25:e9:b6:dd:f4:5d:f7:d3:51:98:71:42:30:f1:0a:12:
91:60:36:a1:c4:1b:44:b2:a1:0c:da:f8:cd:4c:65:f1:41:ae:
66:c3:5b:0c:60:01:fc:71:e8:bd:f1:87:db:ee:d3:47:e6:7a:
16:0d:79:3c:c3:67:1c:23:46:9e:af:6e:67:c5:37:61:c9:2a:
7b:ab:84:55:d1:a1:b4:2f:c5:76:24:36:e3:2b:ed:25:12:7e:
cc:ad:e8:1d:bb:f9:1f:df:0a:57:ae:f1:1d:da:c0:7b:a0:f3:
32:0c:34:0c:43:97:af:8e:a3:7b:b1:4a:7b:7c:ec:5d:a5:f0:
63:c0:3c:2f:a4:b0:c8:02:0d:38:9b:0c:dc:31:69:5b:3c:2f:
ea:81:f9:6b:82:75:ed:bb:39:02:f9:d1:7a:5c:a7:f2:4b:75:
00:de:52:e8:63:50:91:8b:99:a5:3b:1a:13:1c:4e:52:48:a9:
5b:5a:49:a9:d2:59:83:49:1a:7a:eb:50:86:a0:29:71:af:c5:
a2:9b:74:be:f5:ce:0f:51:c6:47:bc:b6:49:ed:03:d1:c1:8a:
b0:95:ae:9f:f8:7e:f3:e2:a6:d8:3b:b2:37:ee:99:f8:e6:4d:
88:d8:ad:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:16 2025 by rpki-client