Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/Pe0Y-zwhtWQ29ESnziPJqVoVbqk.roa
File: Pe0Y-zwhtWQ29ESnziPJqVoVbqk.roa (raw, json)
Hash identifier: tZFzS8vEwObNI4W0+HsnhRknOX5FbJMI/4nZPeU0L5M=
Subject key identifier: 3D:ED:18:FB:3C:21:B5:64:36:F4:44:A7:CE:23:C9:A9:5A:15:6E:A9
Certificate issuer: /CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
Certificate serial: 01856E38BA22C48442B068F08282E4865BF5
Authority key identifier: 74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/Pe0Y-zwhtWQ29ESnziPJqVoVbqk.roa
Signing time: Sun 01 Jan 2023 16:44:49 +0000
ROA not before: Sun 01 Jan 2023 16:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.249.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:ba:22:c4:84:42:b0:68:f0:82:82:e4:86:5b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
Validity
Not Before: Jan 1 16:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ded18fb3c21b56436f444a7ce23c9a95a156ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:98:7b:f3:e8:27:ab:a1:7f:ef:5f:71:ec:
c9:c1:20:6d:99:e1:4b:3a:e5:eb:7e:3a:17:3b:46:
dc:f1:a7:41:8e:a3:72:e1:37:48:fc:5f:dc:b2:eb:
d0:f7:ed:fc:21:65:6e:34:fc:80:0f:60:d0:e7:51:
11:6d:40:85:a3:1f:29:4d:f8:0d:18:ba:98:d2:03:
4f:46:82:53:fa:ef:28:85:42:43:d8:c2:4f:00:7c:
f5:92:cd:01:3e:dc:d2:3c:41:8f:10:4f:d6:ea:5e:
fa:bc:62:60:63:f9:60:43:47:f7:38:96:ad:d1:0f:
09:15:c0:a6:bc:d8:88:12:d5:58:5a:20:4c:8a:a4:
ff:00:16:bd:5f:00:a0:a7:51:bf:cc:9f:ca:44:4e:
be:55:9d:bb:ec:ce:25:4e:f1:98:65:24:0d:6e:c4:
fb:62:ac:ae:17:87:bb:06:99:7f:49:36:dc:c6:8f:
d8:e2:ee:61:4e:3a:ed:d1:05:61:5e:7f:52:0a:af:
5a:1c:90:41:23:9e:8f:3b:e4:dd:de:9a:c5:44:dd:
a6:51:47:c4:5f:32:5a:37:c9:c4:8c:2f:89:eb:4d:
9b:38:89:b4:19:4f:86:cb:47:82:7d:5c:4c:44:69:
a2:90:82:85:ed:8b:2a:ed:d5:6d:ac:3c:54:7a:e9:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:18:FB:3C:21:B5:64:36:F4:44:A7:CE:23:C9:A9:5A:15:6E:A9
X509v3 Authority Key Identifier:
keyid:74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/Pe0Y-zwhtWQ29ESnziPJqVoVbqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/dEzxFE5JWIfkin47tksXiDX7PcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:58:0a:31:e8:e4:81:04:a2:75:d6:f6:7e:3e:96:22:dd:47:
e5:bc:4d:66:fe:e2:2d:e3:db:36:b8:f8:af:21:bf:f3:c7:16:
f9:b7:3b:5b:01:a6:62:3a:38:5f:24:96:ec:23:11:84:96:ef:
4a:1d:8c:51:a0:06:81:a4:22:e8:17:40:fb:d7:54:8d:a8:58:
22:46:5c:a8:36:1d:8e:45:2d:88:bc:df:78:5c:2b:b2:c8:fd:
e8:8c:38:94:c0:a9:b4:2e:33:69:c2:87:90:ce:70:fb:3f:85:
be:0c:77:85:de:b1:0b:06:3d:68:fb:25:87:30:df:9d:76:ef:
a8:0f:fd:5d:fb:fd:2f:a5:e0:ea:61:72:3f:c8:df:94:45:43:
7d:cb:bc:ce:44:12:76:57:4f:c6:10:cd:62:c4:3e:7c:d7:fb:
7d:19:86:a7:d3:c9:d0:a7:90:b7:97:41:1d:8d:42:67:52:17:
1b:5a:69:bc:04:4b:e8:5d:5f:f0:cf:4d:59:bd:a0:74:36:9c:
ee:53:1c:00:17:03:d9:a8:e9:e4:a7:e0:77:42:8e:72:6c:1c:
ec:e4:82:5c:93:c7:75:41:0c:17:8d:40:77:d0:97:a4:94:98:
c9:73:81:38:e2:2a:9e:7e:03:69:dd:9e:a7:03:f1:d0:9e:d0:
ac:f3:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:13 2025 by rpki-client