Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa
File: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (raw, json)
Hash identifier: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=
Subject key identifier: 11:5E:66:E5:79:15:97:02:62:08:05:6E:13:E0:29:F9:FE:E2:CB:31
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 019420D59EA9E9D3190CE85CE3C8983A233E
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43998
IP address blocks: 185.111.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9e:a9:e9:d3:19:0c:e8:5c:e3:c8:98:3a:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=115e66e5791597026208056e13e029f9fee2cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:94:3a:c5:c0:d2:84:99:aa:42:f3:5f:7b:
d3:c0:ce:58:0e:75:97:e0:6a:34:e0:0c:9f:6f:73:
64:c2:69:63:e7:57:60:6d:c5:f2:ac:82:fb:a3:00:
e9:2d:ba:71:8c:ac:b2:bc:d8:1f:10:6d:83:8a:9d:
93:57:c3:b4:d0:e8:a3:76:60:64:0c:9f:d0:ee:79:
cc:4d:be:b3:18:b6:c8:97:8c:39:a0:2b:45:4e:f2:
bc:7b:41:d7:54:17:e9:92:4a:7a:b9:a9:d6:1d:8d:
4a:a8:63:57:ef:3a:a4:5e:28:8b:35:da:77:58:55:
78:a1:78:c5:46:d2:f7:97:36:3f:a8:82:16:79:0f:
df:2c:c7:41:b1:38:7f:92:a7:da:f9:37:6d:4f:61:
4f:85:b0:c2:9a:6e:29:19:9e:cb:46:2c:eb:ff:b0:
2e:87:47:82:f4:a0:a9:c1:5a:ba:b7:50:49:18:50:
21:f0:89:0f:af:d1:ab:aa:ce:0f:dd:53:cb:db:b9:
c5:8e:25:9a:9a:83:6e:03:64:ed:f5:0e:67:73:b8:
46:77:63:42:ec:45:b1:5d:eb:76:93:41:cc:3c:8e:
13:45:f7:0d:2f:bd:16:73:4c:3a:8e:d5:67:05:0c:
c9:5e:9f:81:a9:60:20:4f:f4:d2:8d:9f:4d:09:60:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:66:E5:79:15:97:02:62:08:05:6E:13:E0:29:F9:FE:E2:CB:31
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.116.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:f6:1a:f5:bb:31:39:1e:07:4c:3d:6a:dd:02:04:db:1e:33:
23:03:1a:94:25:26:09:ad:26:ca:79:bd:71:ed:dc:eb:8e:d1:
9e:c7:8a:db:4c:b3:2a:15:b2:04:0c:b6:5d:17:49:9f:71:58:
8c:7a:6c:22:7e:70:4d:c6:13:89:f7:0b:e7:ff:2d:7c:30:b9:
30:6e:dd:65:16:b2:b1:2e:67:09:21:15:44:58:3c:5c:ad:d0:
86:4e:a9:ec:e9:7c:a4:7c:f6:cf:32:cf:21:a2:41:db:a2:07:
c0:6e:d3:d6:33:6d:03:ee:76:4d:99:0a:7d:80:cf:51:20:23:
3b:dc:d4:a2:29:8b:6d:22:89:e0:ff:bc:33:99:46:6a:18:cf:
d5:b6:16:cf:f3:4b:39:82:5d:5f:2d:2f:2b:78:cf:c4:eb:40:
14:94:b2:28:7b:24:ef:37:e3:d9:a9:81:1c:8f:aa:b5:4a:e1:
fd:f6:40:1b:95:53:ed:6c:ba:de:5f:67:fe:d3:a0:d0:e2:fd:
1b:03:7c:fe:38:dc:66:91:f5:98:c8:5f:54:87:55:98:9e:6e:
37:4a:a6:90:0c:17:eb:2e:04:2a:63:04:93:04:0f:fd:b9:d9:
b7:3f:0c:c4:ec:f5:d0:43:af:fa:e9:c9:8a:e8:52:f5:37:ba:
95:5c:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:07:03 2025 by rpki-client