Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa
File: 1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa (raw, json)
Hash identifier: QQhk5ltrGxYiRgdxzHLo3yY2s4Qbc99+8Eg2CHCARqY=
Subject key identifier: FA:A8:95:A8:E8:C1:5C:E4:9C:43:23:A6:42:C5:2B:F8:DC:24:4F:36
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 0194252167BB6E272AEC57D545E79958ED26
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44706
IP address blocks: 185.135.128.0/24 maxlen: 24
195.191.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:67:bb:6e:27:2a:ec:57:d5:45:e7:99:58:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faa895a8e8c15ce49c4323a642c52bf8dc244f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:72:12:44:e5:5b:23:3b:53:c0:13:35:23:
1d:0d:56:ba:c8:ea:01:38:17:02:b2:86:da:18:88:
9a:c9:98:d7:fe:d2:6f:81:c7:8a:6e:9f:4f:2e:ed:
7a:60:4b:bc:cb:a0:31:4f:08:b9:b4:fe:90:58:09:
7b:83:5f:db:12:3b:3c:c0:bd:c2:38:8a:ca:6f:9d:
27:0c:49:f1:ed:9f:15:d3:ac:7d:e4:e2:3d:4a:08:
76:b6:5a:ec:3c:d0:70:e9:47:b5:65:60:81:94:0c:
a1:67:d7:62:12:c3:49:18:03:1d:99:49:62:f7:8d:
5e:85:41:4b:45:48:37:92:57:d5:1f:be:d4:4a:be:
d6:21:9d:bc:86:8c:a4:da:4b:fc:a9:74:c0:26:a7:
61:14:c4:f9:61:de:18:dc:be:94:5c:94:43:82:f6:
f9:6e:0a:1b:bf:b2:4a:81:b5:c9:04:25:b1:bb:0d:
82:94:18:ff:e5:80:fb:fc:f3:cc:b3:bd:60:0c:7c:
a6:af:6c:f4:40:67:bc:ba:4f:0f:e6:76:d9:cf:6c:
d6:31:05:ef:f3:67:40:14:d0:fa:de:1b:c7:54:70:
a4:fc:80:5d:61:73:e8:af:f5:03:ce:34:b1:f4:cb:
d2:db:df:44:ba:4c:bd:89:c3:48:40:87:87:21:c4:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:95:A8:E8:C1:5C:E4:9C:43:23:A6:42:C5:2B:F8:DC:24:4F:36
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.128.0/24
195.191.165.0/24
Signature Algorithm: sha256WithRSAEncryption
66:4b:7f:39:2a:97:84:c7:11:e0:dd:73:65:0f:05:4e:a8:ef:
b4:63:ae:eb:62:90:e8:6e:90:c3:3f:79:17:95:35:c4:1c:b5:
b5:76:92:db:36:26:e4:01:bd:25:c0:09:d5:84:b1:d5:ed:1c:
02:91:fe:61:0b:ad:61:25:f5:72:af:ea:04:27:da:f0:26:c3:
5d:bc:89:5b:08:4a:07:a5:f5:30:5f:a9:67:17:30:38:3c:a0:
53:26:70:8c:07:3f:7b:0c:b5:84:4f:dc:cd:d7:9e:50:07:e3:
ec:92:c7:11:c3:95:90:31:7b:95:46:bf:0f:9c:64:29:30:62:
6e:78:96:62:69:fe:29:33:b4:c1:4e:6e:48:da:16:52:31:1e:
13:64:a3:03:ca:24:7c:13:96:04:a6:b8:e4:73:07:81:8d:27:
c4:63:e5:a7:08:cd:b6:8d:ef:2b:bb:67:d5:ab:15:bd:ee:c4:
0e:37:07:a7:0e:95:6a:35:92:e5:2f:4f:5d:4c:9b:9f:ef:e8:
e3:ab:87:b9:61:a1:18:83:b7:58:ee:6d:d8:31:a8:39:a9:bc:
12:5f:40:b8:d1:d5:77:0b:40:a6:74:a5:c1:6a:bf:29:e7:c2:
5e:db:95:fc:a5:9b:45:cb:a4:f0:14:12:5a:9b:8e:ef:6d:1b:
d9:0c:58:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:26 2025 by rpki-client