Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/IbpEEeU88LFNxh5nL5cwRSdFORY.roa
File: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (raw, json)
Hash identifier: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=
Subject key identifier: 21:BA:44:11:E5:3C:F0:B1:4D:C6:1E:67:2F:97:30:45:27:45:39:16
Certificate issuer: /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial: 0194206842FE555BF31D92E9CE3F766C5E26
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/IbpEEeU88LFNxh5nL5cwRSdFORY.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202074
IP address blocks: 91.189.212.0/22 maxlen: 24
185.54.152.0/22 maxlen: 24
185.125.144.0/22 maxlen: 24
185.254.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:42:fe:55:5b:f3:1d:92:e9:ce:3f:76:6c:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21ba4411e53cf0b14dc61e672f97304527453916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:c6:c6:d0:2a:95:e3:39:01:e1:6d:97:7b:
b4:37:0a:29:4e:de:f0:2a:e7:76:a9:aa:1d:54:05:
30:f2:60:f9:5a:31:b7:ad:8b:56:31:9a:dc:6f:c4:
93:01:a3:92:55:47:62:ab:b2:42:38:29:09:cb:8f:
bd:eb:ad:46:33:d9:7c:6a:8f:12:75:7b:31:90:f6:
98:56:96:ab:ef:02:21:2a:24:ed:dd:d2:64:6a:1b:
0a:d7:45:bb:99:d2:1b:34:ec:53:02:09:fe:43:6d:
f1:9c:ea:a1:82:8a:ba:9e:61:6d:5d:d4:60:eb:c1:
39:04:18:48:02:01:c3:3d:55:11:46:d5:f0:0f:10:
33:88:c7:f0:7e:64:93:22:c4:bb:d3:46:64:21:f6:
15:d5:d2:da:49:4e:2e:f5:d9:cf:42:50:f3:ff:bb:
0b:1e:2c:82:47:71:90:89:77:70:fc:26:f3:f0:56:
4a:c7:88:c0:ab:75:6b:5e:ea:ac:b4:8a:3e:f1:2a:
dc:2b:41:49:b5:aa:3e:ec:32:6d:db:f7:48:ea:03:
37:d9:c3:1c:d8:22:e3:24:78:b0:aa:08:9d:1c:e0:
5a:7a:45:45:2d:6c:4e:96:82:41:17:8e:bf:85:da:
3f:8e:48:84:67:7e:d8:7b:e4:78:09:9d:79:91:18:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:44:11:E5:3C:F0:B1:4D:C6:1E:67:2F:97:30:45:27:45:39:16
X509v3 Authority Key Identifier:
keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/IbpEEeU88LFNxh5nL5cwRSdFORY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.212.0/22
185.54.152.0/22
185.125.144.0/22
185.254.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:4f:78:69:cf:a2:8c:a3:12:96:3e:f1:7a:97:f6:7d:44:73:
44:93:e5:4d:ad:47:5b:7a:ee:28:b7:65:94:24:d8:20:5a:70:
37:a5:17:98:70:56:dd:71:75:28:77:93:53:ee:8f:e6:78:25:
5e:0e:07:a2:92:bc:b3:b8:3f:42:e4:8b:45:96:08:18:18:f8:
fc:92:33:5b:fe:59:3e:f3:50:31:25:9b:d8:db:78:a8:89:9e:
53:8c:33:d5:f3:88:6c:78:62:9b:43:86:df:55:69:1e:9b:57:
75:6c:22:b7:69:d1:43:03:64:84:7e:a3:85:88:6b:4f:f8:e8:
4a:27:ae:62:14:e4:96:8a:6b:0b:48:2a:f9:1e:e1:82:eb:0e:
2b:22:d0:aa:e8:d9:7a:30:57:14:a0:f5:b9:07:b8:cc:8f:6e:
5c:52:61:c0:99:6c:30:ea:bb:80:f6:0b:e5:94:4e:0e:a7:5f:
69:34:d6:14:35:81:c3:f9:27:fc:e6:bf:f3:35:35:56:45:d2:
da:bb:c5:c0:d3:72:8b:b6:98:d2:e7:85:73:7d:26:c1:03:cf:
2e:c8:5c:e3:e1:8b:35:40:e6:bd:6a:36:4c:af:00:89:5a:63:
f0:bd:bf:e4:9d:e8:64:ee:f0:85:e9:b0:0d:9a:c9:ac:83:dc:
55:7a:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:15 2025 by rpki-client