Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/RmCRqlQnRe9rCwX7VMuUVE41d98.roa
File: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (raw, json)
Hash identifier: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=
Subject key identifier: 46:60:91:AA:54:27:45:EF:6B:0B:05:FB:54:CB:94:54:4E:35:77:DF
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 01941F8C9631A69286D3A3E701FD748C9728
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/RmCRqlQnRe9rCwX7VMuUVE41d98.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60162
IP address blocks: 185.51.156.0/22 maxlen: 24
185.143.108.0/22 maxlen: 24
2a01:b420::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:96:31:a6:92:86:d3:a3:e7:01:fd:74:8c:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=466091aa542745ef6b0b05fb54cb94544e3577df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:0d:f5:59:ba:3a:df:a8:e4:a4:ac:56:9a:
0c:4c:97:8c:6a:5f:4e:85:4a:ec:13:aa:36:3e:42:
1f:9a:c2:90:1e:c4:bc:b9:ba:8c:db:bf:4c:18:5e:
8a:fd:8d:ad:d2:14:27:cc:2a:ab:fc:04:b6:3c:df:
a2:e9:d6:24:00:9a:b2:21:be:d2:05:cb:65:72:b4:
ef:80:18:7c:fa:d9:22:7f:4f:38:e9:70:ca:f1:93:
e1:67:0c:b7:76:e4:eb:ca:d9:79:51:87:35:00:e9:
12:7b:4f:73:c4:31:86:41:cc:43:5e:72:c7:2a:30:
18:3e:51:1e:ac:90:e7:40:83:0f:72:95:08:7b:4e:
ae:7e:c4:5e:a5:eb:33:78:4f:e8:23:a5:c7:48:b9:
5e:20:ca:17:e7:50:cc:1e:0d:ea:b1:96:2a:51:3a:
97:2a:3d:6a:1e:ac:33:2f:35:ba:f9:8c:53:08:86:
df:db:15:97:41:5e:f6:da:f7:e3:34:c6:6b:e9:28:
b0:34:6f:24:82:9e:5a:48:80:a3:7f:6f:90:cd:94:
e9:0c:1a:3c:53:fc:81:73:14:38:18:e2:5c:4f:4c:
9e:0c:4e:c4:24:82:c4:d2:fa:7e:5c:d4:11:7f:96:
a2:d8:75:70:e2:8e:45:35:7e:04:b9:65:b1:c9:8d:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:91:AA:54:27:45:EF:6B:0B:05:FB:54:CB:94:54:4E:35:77:DF
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/RmCRqlQnRe9rCwX7VMuUVE41d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.156.0/22
185.143.108.0/22
IPv6:
2a01:b420::/32
Signature Algorithm: sha256WithRSAEncryption
8d:4c:35:c3:fd:c8:9f:de:96:fe:a9:ca:41:5d:5a:cd:fc:e7:
03:17:ec:f0:e4:a4:86:62:bb:2d:1c:63:7b:07:ce:12:3f:86:
f8:d0:7f:4a:33:cf:4a:7a:a9:68:85:d5:35:1f:a4:e7:24:ae:
16:58:ad:35:d7:87:10:95:53:fe:75:d0:8d:8c:bd:8d:da:ea:
af:78:6f:10:4c:57:ff:1a:c5:48:c6:9a:ae:70:7e:32:59:64:
ec:2d:fd:9e:ca:6b:ea:7d:84:85:ad:ee:0f:34:e5:90:71:4b:
93:a5:40:1b:ac:42:21:d7:4e:01:25:bf:02:19:c1:6e:be:e7:
5b:31:a1:7c:c4:84:03:3e:0a:b2:e1:c5:a3:b4:72:38:a7:4e:
63:bf:92:0f:4b:8a:25:1e:ae:b8:5d:3e:cd:e4:68:16:3c:80:
bd:37:08:87:f9:ef:53:56:f4:b0:5f:ba:a4:68:4c:c2:cc:fc:
da:d6:b6:21:73:4b:de:4c:f0:b7:5b:07:47:37:61:df:c1:7c:
4b:11:17:f8:55:1e:bd:a2:da:13:66:bb:75:2d:ca:b9:1a:5c:
7d:9c:3a:66:8f:01:a8:7f:4a:ea:9c:4d:39:f7:63:a4:65:3e:
1f:59:36:fa:35:91:ad:4e:25:dc:2a:e8:f4:da:97:f9:ea:13:
d9:6e:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:21 2025 by rpki-client