Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/F2wMIUjJA3quoSXko94UBe524io.roa
File: F2wMIUjJA3quoSXko94UBe524io.roa (raw, json)
Hash identifier: ohOfNDpG7k23hMoeoYfuhVGMBn9BMoNT8oiUfgHvVI4=
Subject key identifier: 17:6C:0C:21:48:C9:03:7A:AE:A1:25:E4:A3:DE:14:05:EE:76:E2:2A
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 01942369428C5659BA43774D8593B19E6B6B
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/F2wMIUjJA3quoSXko94UBe524io.roa
Signing time: Wed 01 Jan 2025 19:48:08 +0000
ROA not before: Wed 01 Jan 2025 19:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47693
IP address blocks: 185.41.228.0/22 maxlen: 22
185.43.31.0/24 maxlen: 24
2a10:48c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:42:8c:56:59:ba:43:77:4d:85:93:b1:9e:6b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Jan 1 19:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=176c0c2148c9037aaea125e4a3de1405ee76e22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:7c:60:09:1d:ae:fa:94:61:19:7c:b5:df:
0d:7b:ce:5d:1b:0e:59:60:0d:1c:6a:0c:20:d9:30:
bc:dd:b1:63:17:f5:ab:26:24:ea:4b:a7:40:0e:04:
42:18:15:a8:2e:7e:bd:d0:dc:34:5d:d5:ee:3a:88:
f0:fd:68:3a:81:36:a9:56:7b:cd:dd:a3:1d:ab:3c:
ee:73:97:02:8c:3c:a3:13:78:1e:da:68:7b:b1:d1:
28:b4:c8:9c:15:ab:24:15:47:94:d8:69:1b:08:7c:
75:35:2c:a0:50:b2:c9:f0:a5:74:48:32:7e:c7:56:
c5:8a:dd:b9:f1:13:12:7f:0a:a6:05:6f:f7:0e:98:
fa:05:06:00:93:fe:38:8b:d8:73:b5:d0:94:35:ee:
54:ae:f0:29:28:e3:35:30:17:99:b8:02:0c:30:61:
69:1a:6e:14:00:fb:e1:fe:d3:61:df:9b:be:1e:23:
29:ff:70:ae:b9:9b:f2:e7:dd:63:03:da:b3:66:3c:
fc:c9:4d:e0:33:6c:aa:e1:53:a5:37:bc:79:f4:6a:
56:f0:62:4b:54:fb:38:ad:b2:4e:e1:87:32:d9:68:
d3:18:00:63:47:60:96:d1:9d:3a:63:53:f6:ac:a3:
c6:9e:45:d6:83:6e:91:ff:fd:b0:46:d4:f7:67:37:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:0C:21:48:C9:03:7A:AE:A1:25:E4:A3:DE:14:05:EE:76:E2:2A
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/F2wMIUjJA3quoSXko94UBe524io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.228.0/22
185.43.31.0/24
IPv6:
2a10:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
92:f0:c4:8a:89:2d:e3:40:9e:6c:65:ea:cd:ec:8b:de:c9:d2:
d5:32:68:e9:6a:98:96:9d:f7:4e:1b:f0:8c:da:bd:a3:c4:b0:
e4:1f:8c:d5:4d:40:b0:bb:43:65:cd:6c:b2:6b:4a:9f:a9:c3:
0d:90:bc:8a:8a:31:79:b0:f5:a5:14:98:d1:24:f4:55:54:3c:
12:58:11:ee:ec:1e:f1:de:2d:93:c8:23:6c:4d:e0:ec:75:85:
6e:aa:55:5b:c2:c8:7a:32:00:32:fe:e8:0b:53:37:d0:00:eb:
53:c2:62:ab:a1:ec:69:62:b6:60:ba:08:4e:11:bd:70:07:3d:
b0:7e:a2:1a:2c:8d:9d:4a:c0:a1:c4:09:36:1e:44:ca:89:b6:
e8:30:04:a8:b4:83:14:9d:8b:86:fd:2e:66:a2:83:94:bf:7a:
6b:ef:5c:78:f3:88:bc:f8:08:a5:8e:63:f6:bf:df:39:5a:04:
9e:84:a0:07:e7:5f:35:ad:e5:77:8b:2a:22:09:b0:09:bc:ec:
c8:99:f3:c5:d1:a3:c7:48:be:33:72:c5:2a:60:c0:19:fb:47:
3e:81:ac:b5:1f:c3:d4:c7:8f:3f:85:86:a5:74:56:e5:df:8e:
b5:a2:a0:ce:fb:49:06:aa:50:f4:7a:c0:3c:4d:ce:97:e3:17:
c4:35:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:06 2025 by rpki-client