Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/v525Sv1tFND5v2x1n4f6uRe4GHA.roa
File: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (raw, json)
Hash identifier: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=
Subject key identifier: BF:9D:B9:4A:FD:6D:14:D0:F9:BF:6C:75:9F:87:FA:B9:17:B8:18:70
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019420D5D7403742171159013C07C1B44AFA
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/v525Sv1tFND5v2x1n4f6uRe4GHA.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205225
IP address blocks: 185.188.93.0/24 maxlen: 24
185.188.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d7:40:37:42:17:11:59:01:3c:07:c1:b4:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf9db94afd6d14d0f9bf6c759f87fab917b81870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:54:60:c7:8b:22:f4:05:4a:7c:70:4d:c7:
0d:23:8a:42:42:e8:5a:b3:3c:81:05:bd:54:2a:f9:
16:0c:cb:c8:cf:f9:5c:cd:d4:48:b7:30:9a:20:c5:
5a:38:78:06:c3:0a:e3:f8:be:4e:8a:62:4a:05:e8:
2f:2a:2e:c3:33:44:1d:e6:88:96:8b:16:70:df:6b:
9c:1d:60:2f:86:37:61:c9:d0:7e:3b:bf:5e:ea:7e:
d6:79:24:6b:bf:1b:65:6c:1a:61:5d:f2:2e:a1:f7:
20:12:d9:97:8e:1b:dd:54:23:a2:e3:d8:56:c3:41:
62:d6:06:6c:77:8c:41:54:3e:33:91:8c:1f:11:a7:
1a:28:c8:81:2a:80:90:7b:04:53:e5:ba:2a:20:5b:
bd:98:2b:d3:85:c4:96:2c:67:9a:51:f7:9f:bd:1b:
c8:76:19:d9:c5:bc:1a:5a:69:36:e8:ac:e5:6d:0d:
ca:90:c2:a8:98:f5:e8:f9:cd:f6:cf:8d:f8:40:c3:
9a:97:50:dd:4e:b3:09:fb:dd:47:40:65:86:eb:f0:
06:6c:af:53:54:76:94:a4:98:58:5e:04:51:53:d6:
58:3b:4c:cd:c4:21:ee:ba:0b:2a:54:54:98:fd:66:
d4:97:dd:4b:83:d1:4c:ac:a5:51:53:0c:90:a6:67:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:B9:4A:FD:6D:14:D0:F9:BF:6C:75:9F:87:FA:B9:17:B8:18:70
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/v525Sv1tFND5v2x1n4f6uRe4GHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.93.0/24
185.188.95.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fe:71:b1:e4:18:5d:99:29:f8:6f:0a:06:99:67:f1:c6:7b:
3d:4c:a1:e5:a2:86:8f:41:2d:12:69:84:ae:15:04:84:df:98:
b4:ba:1c:35:59:df:00:71:ae:e5:18:0b:2a:02:15:20:52:9a:
a1:ee:15:b9:60:cf:89:9c:f2:09:e0:d5:5c:d3:68:75:92:b9:
56:e7:4e:6b:41:d6:7b:fd:ad:79:d3:bd:05:f8:d1:e7:1c:aa:
4e:a7:16:13:8d:22:a1:2d:ce:bc:7d:f5:b0:83:85:ad:a1:68:
2e:50:7c:d6:a3:ce:40:5a:21:5a:d9:9b:91:18:68:fd:07:46:
9e:a2:1e:4f:62:f4:a3:27:61:39:b4:c1:33:bb:53:92:a2:18:
05:cf:2b:13:99:00:c7:22:62:c9:18:18:c4:8c:09:86:d6:d9:
a0:5d:08:e9:3e:0f:76:62:f2:0b:f3:9f:4a:84:a4:91:49:2d:
44:0f:67:bb:bb:7e:bc:84:63:27:08:30:e7:0d:d3:44:eb:5e:
40:b1:24:1c:f2:f9:b2:38:0b:be:d4:7a:de:f3:7b:d5:e9:15:
06:a0:2c:cc:31:b7:8a:a8:b7:e0:f1:dc:51:a2:21:e5:da:d7:
bb:25:a7:1f:f1:5b:23:4d:c3:f2:03:85:cd:ed:ad:b4:39:14:
9d:29:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:15 2025 by rpki-client