Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/NRfFsUR7AGxa8PB6QGVHatHGp1o.roa
File: NRfFsUR7AGxa8PB6QGVHatHGp1o.roa (raw, json)
Hash identifier: rmTNmbYj44wVhe02yXW4SHwTBM7U77sGXsE2DRCvILs=
Subject key identifier: 35:17:C5:B1:44:7B:00:6C:5A:F0:F0:7A:40:65:47:6A:D1:C6:A7:5A
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 0194221FE6775A6B8993E2196C04B075E28F
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/NRfFsUR7AGxa8PB6QGVHatHGp1o.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.22.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e6:77:5a:6b:89:93:e2:19:6c:04:b0:75:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3517c5b1447b006c5af0f07a4065476ad1c6a75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:05:57:91:19:c7:2e:ed:64:89:0f:e3:61:
fd:b0:5a:64:f1:a2:20:fb:c5:e9:9e:e3:31:d6:2f:
f7:4e:16:af:d3:8b:b3:e2:8a:c5:d5:ff:39:29:ca:
70:4d:bd:31:c0:ac:a0:7d:9f:22:19:6b:5d:fc:bb:
e7:39:4c:44:98:98:69:18:3c:86:b1:65:3d:0e:c3:
e4:94:02:a9:26:43:c2:1c:16:69:4a:0c:e7:0c:16:
e7:d7:8e:76:f1:06:a3:02:8f:e8:e4:91:92:dc:79:
99:23:ad:00:0b:95:5d:48:97:06:a1:79:90:37:51:
08:43:2f:97:6e:ee:b7:4c:c3:6d:c3:8f:57:d6:4a:
35:45:3d:3b:70:5a:07:1a:a6:03:5d:22:7f:77:5e:
4d:d9:c9:ff:37:61:30:a8:a7:77:74:11:47:d6:3b:
c2:a6:27:7c:0d:be:c9:c6:6b:5a:7b:d8:bc:46:a7:
d5:80:3c:47:6d:03:45:6b:37:7d:c2:43:e4:6a:95:
a5:c5:19:93:2d:9a:2f:51:e0:51:96:da:62:d4:fa:
b0:5f:4d:77:18:45:8f:6d:af:16:ff:82:30:d0:d9:
e8:54:57:9c:18:02:bd:4c:05:c5:62:fa:1b:9e:36:
0c:54:c9:0f:c4:a4:f9:8a:53:59:24:aa:40:4d:52:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:C5:B1:44:7B:00:6C:5A:F0:F0:7A:40:65:47:6A:D1:C6:A7:5A
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/NRfFsUR7AGxa8PB6QGVHatHGp1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:4b:80:c2:50:0d:a5:c3:29:82:ea:1c:0f:6a:4d:b7:24:06:
7a:6f:d2:f6:b4:18:7f:bb:1f:b3:ba:a7:2b:67:2a:00:f8:05:
74:d6:4e:77:fa:f4:97:29:52:2e:34:73:2b:23:0e:5c:d1:a7:
6c:2f:33:2e:ec:2a:ce:77:25:14:c8:5e:1d:a2:cd:67:71:95:
75:5b:c5:fc:0d:38:6b:8a:1c:ec:75:a4:c0:6c:5a:c3:8a:9f:
bf:7f:84:6d:76:ad:55:0f:8e:15:7a:26:7f:2f:56:c5:2f:d0:
6f:e6:54:3e:8d:bb:21:8d:6d:06:a8:80:ea:28:ae:75:7a:2f:
02:10:2d:b3:55:a0:d9:65:25:fd:e6:8d:d6:e1:8e:5e:11:d1:
09:57:3d:44:b8:3f:fb:1c:43:50:e2:b8:a1:d5:82:49:17:be:
44:a8:1a:48:95:80:36:83:ba:ee:b6:45:a3:4e:5f:f5:40:48:
f0:dd:49:2f:5b:ed:67:ee:bb:f2:c1:dc:97:06:af:f0:6c:77:
23:5d:84:2f:c8:cf:96:a6:5e:64:a9:5e:41:b9:b0:72:2a:92:
a3:15:9f:7d:59:5b:9b:35:97:20:3e:2f:e4:84:1c:14:13:53:
61:6b:9d:2a:c8:02:96:eb:86:e5:a4:e5:70:7d:f8:98:95:bf:
e5:27:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:49 2025 by rpki-client