Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rkiEAQNRTL5OBXl1CaKFsOQLK-w.roa
File: rkiEAQNRTL5OBXl1CaKFsOQLK-w.roa (raw, json)
Hash identifier: 7KqqkyTH0k7W0OFp2uxLKpBxrwAKdlO5vA0PQbQ1lXs=
Subject key identifier: AE:48:84:01:03:51:4C:BE:4E:05:79:75:09:A2:85:B0:E4:0B:2B:EC
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72399EB7B973BBC70E2CAF3F8334D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rkiEAQNRTL5OBXl1CaKFsOQLK-w.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207064
IP address blocks: 185.125.48.0/23 maxlen: 23
185.125.48.0/24 maxlen: 24
185.125.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:23:99:eb:7b:97:3b:bc:70:e2:ca:f3:f8:33:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae48840103514cbe4e05797509a285b0e40b2bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:bd:ee:04:00:8b:35:bb:c2:fd:93:bc:46:
ec:06:85:52:81:39:b9:3f:9a:1d:94:5e:61:1a:75:
be:93:a1:a7:cd:70:ae:94:15:1b:1c:8c:ac:0e:10:
d9:5a:04:83:7e:a8:8c:4e:96:a8:73:c6:e7:02:8e:
6a:22:e5:4f:d2:21:3d:79:3a:50:df:7c:ce:d5:59:
a0:5e:63:e3:e4:57:ec:f9:61:48:52:26:6e:4b:38:
6a:a7:31:29:41:a8:1b:5a:74:26:87:5b:7d:2f:b5:
f8:e6:1c:aa:7f:2b:01:59:7e:bd:d2:fb:fb:86:4a:
2d:a2:c3:c3:cc:05:5e:3f:da:72:a4:bd:12:cf:8f:
f7:2a:9e:96:a0:31:46:a6:6e:93:64:3e:2a:fe:01:
c4:57:f3:d5:f2:1e:aa:38:87:f4:cb:7c:8f:be:3e:
41:e2:27:4f:d9:c8:71:ca:bd:98:6d:77:17:25:50:
03:89:77:59:0f:67:67:b4:ee:a4:2e:16:c2:f3:d5:
f5:80:13:55:20:5b:10:6f:31:a3:d5:8a:ba:78:a8:
a8:ae:e1:e2:c3:a6:00:a4:66:f1:a5:eb:39:83:db:
33:1d:7c:4a:ee:2c:6e:c8:f9:fe:60:53:a8:00:32:
57:3b:3d:ea:67:d4:16:1b:64:23:96:83:2c:e3:b2:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:84:01:03:51:4C:BE:4E:05:79:75:09:A2:85:B0:E4:0B:2B:EC
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rkiEAQNRTL5OBXl1CaKFsOQLK-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.48.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:4e:42:b9:c1:3f:2c:89:82:fe:34:0d:c8:f9:d1:1f:50:e6:
2e:37:df:c1:eb:9a:6d:4c:33:3f:fb:c0:02:2d:7a:5f:0d:24:
12:de:22:b1:7f:e9:b4:48:b3:f0:db:c0:2b:d3:de:c3:a0:e5:
07:38:4c:db:24:a5:c9:6f:7d:f1:ef:7f:11:01:c6:9b:e1:e2:
30:16:da:92:a8:bb:a4:4a:dc:b9:a7:61:d7:4b:09:81:c4:db:
49:89:96:d3:84:3e:f5:c7:bc:44:4e:f4:58:0d:4c:1b:6c:27:
5e:b9:2b:d5:0c:6d:a6:5a:39:09:7f:ae:af:b3:b1:5a:a4:72:
05:27:94:e6:07:bb:59:22:18:7f:36:a1:29:69:e9:50:ca:ee:
28:96:e4:d3:b8:21:0f:0e:55:8d:65:d3:c5:64:36:cd:03:c5:
12:4c:aa:d9:72:df:b9:2c:70:a3:46:7c:a8:09:9a:5f:e1:84:
da:08:d9:9c:26:5b:13:ee:2d:a4:43:bf:b1:33:32:d6:a1:56:
3f:14:0b:7a:07:b0:ce:45:63:38:c0:1a:12:13:99:59:dc:a3:
2c:cf:18:8c:2b:e4:5e:f7:c8:28:71:1e:c9:d1:4e:cb:1b:cf:
3f:fb:05:db:0d:79:6e:96:a1:6e:af:28:52:9e:8b:e0:19:22:
2a:a3:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:37:51 2025 by rpki-client