Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O_LXBkNiqtw8mIAKsB_WHVMDSBg.roa
File: O_LXBkNiqtw8mIAKsB_WHVMDSBg.roa (raw, json)
Hash identifier: nFijmEIejIVv6S2QCSznR1YnL2Kx2Ts2bbKS2lud0b8=
Subject key identifier: 3B:F2:D7:06:43:62:AA:DC:3C:98:80:0A:B0:1F:D6:1D:53:03:48:18
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3EE211F27D7F213E781B1E6DFD6C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O_LXBkNiqtw8mIAKsB_WHVMDSBg.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209456
IP address blocks: 185.22.25.0/24 maxlen: 24
2a02:330:8::/48 maxlen: 48
2a02:330:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3e:e2:11:f2:7d:7f:21:3e:78:1b:1e:6d:fd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bf2d7064362aadc3c98800ab01fd61d53034818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:65:2a:15:71:b1:73:e0:a3:04:2e:d0:5b:
14:e0:1f:80:8f:94:bf:e6:ac:79:b2:16:4c:32:e7:
e1:10:a4:e8:c4:47:2b:d9:4b:06:a2:74:82:9f:c4:
95:27:10:a8:a9:0b:b6:05:7b:2d:eb:82:f1:eb:0f:
62:07:7a:d5:ca:b0:96:37:8b:b2:79:ea:97:c8:d7:
91:af:21:01:c6:ce:d6:33:c2:ca:e2:0e:0a:2e:75:
57:1e:69:51:df:52:57:6b:7d:07:1e:c4:d3:a6:34:
5e:2a:ae:4c:23:ce:a4:e4:53:50:86:00:ae:69:17:
c0:9a:f9:d1:20:88:ce:34:09:58:fb:9f:a6:83:85:
c0:64:f2:0f:dd:7b:86:eb:06:fc:a2:97:0a:03:0c:
0f:49:0a:6b:eb:67:79:0b:68:0a:97:8c:98:f7:38:
a0:cf:05:c8:40:a9:d6:81:21:27:0c:4e:86:d8:19:
c5:14:74:f4:20:38:bf:a5:83:c9:f2:8e:c5:f3:29:
6b:a5:44:f6:58:ef:7f:2f:c8:70:d2:86:b6:94:9a:
60:80:1b:79:da:2a:94:ed:f6:54:4e:74:d1:26:89:
51:94:cd:52:f5:07:e8:aa:38:68:5c:c7:70:32:68:
c0:82:16:9c:d5:65:0e:d6:45:f6:92:e6:46:65:e2:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:D7:06:43:62:AA:DC:3C:98:80:0A:B0:1F:D6:1D:53:03:48:18
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O_LXBkNiqtw8mIAKsB_WHVMDSBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.25.0/24
IPv6:
2a02:330:8::/47
Signature Algorithm: sha256WithRSAEncryption
7b:d8:db:ca:c5:80:9a:e1:07:7e:d3:28:80:e2:b7:b9:3e:41:
95:45:10:e5:2c:ff:dc:88:7f:10:06:de:a0:4b:82:4a:a6:57:
1d:ce:c5:00:f9:c2:91:38:2a:97:00:77:d7:08:bb:84:f5:5c:
68:87:14:c3:d4:de:62:6b:a9:3a:8e:60:12:a2:a0:18:68:91:
e1:c7:6a:a2:7d:97:ae:0a:42:56:54:fa:23:09:d7:46:ee:2b:
fb:db:9f:69:5e:44:54:07:7d:aa:08:ad:44:85:98:77:4d:2c:
78:b4:6b:b1:47:91:f9:d8:59:2b:9c:f6:8b:3a:8a:c3:03:17:
b8:b6:04:76:78:ac:f6:54:23:5f:61:84:87:cf:ad:ac:e5:4c:
9f:d5:f4:ea:c3:bf:ea:c6:f5:fa:8e:d2:31:e4:3d:84:d0:5b:
b8:03:da:a6:6d:cc:9c:9a:86:46:07:d3:e5:72:aa:ed:e0:d8:
97:66:d6:24:66:44:0d:f0:fe:84:33:71:c6:9b:89:15:3b:ad:
77:2f:63:b5:b4:c8:27:fe:d1:22:77:d2:91:17:38:20:02:de:
08:ab:ae:62:64:68:6e:d9:4e:21:e2:84:89:b2:ce:e6:eb:f6:
21:cb:72:6a:a3:15:4d:3e:82:7a:8b:03:fc:53:17:f0:05:91:
8d:45:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:29 2025 by rpki-client