Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/ELXrukSwlxrRWEw7wIBQTohnpM0.roa
File: ELXrukSwlxrRWEw7wIBQTohnpM0.roa (raw, json)
Hash identifier: uyEZsS2YQYtr2gp7+vxzPGx6obHnZekQ6NlPAB1ftpw=
Subject key identifier: 10:B5:EB:BA:44:B0:97:1A:D1:58:4C:3B:C0:80:50:4E:88:67:A4:CD
Certificate issuer: /CN=26851d8d0c5cc4f5eec7662b7760688d8b652c52
Certificate serial: 018B3C83670D56548F67A82C38E18E666AD5
Authority key identifier: 26:85:1D:8D:0C:5C:C4:F5:EE:C7:66:2B:77:60:68:8D:8B:65:2C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoUdjQxcxPXux2Yrd2BojYtlLFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/ELXrukSwlxrRWEw7wIBQTohnpM0.roa
Signing time: Tue 17 Oct 2023 07:22:06 +0000
ROA not before: Tue 17 Oct 2023 07:22:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202128
IP address blocks: 185.148.16.0/22 maxlen: 22
2a07:5b80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:83:67:0d:56:54:8f:67:a8:2c:38:e1:8e:66:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26851d8d0c5cc4f5eec7662b7760688d8b652c52
Validity
Not Before: Oct 17 07:22:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10b5ebba44b0971ad1584c3bc080504e8867a4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f8:79:b3:25:85:7e:a5:24:83:2a:70:44:6a:
07:f3:b1:fb:9d:eb:33:d1:03:87:10:72:b8:2d:63:
0b:f7:4f:d4:07:c7:00:fb:5a:1d:9a:ec:3a:67:b0:
61:40:d1:7b:29:1d:99:28:fd:73:34:74:96:c0:f3:
20:1e:b3:c7:56:39:ff:36:30:9c:84:19:c0:d2:7e:
91:22:ab:1b:86:89:fc:b0:e0:5e:c3:00:ff:74:6c:
8a:7a:bc:64:26:79:e8:19:98:00:12:28:35:1e:30:
f8:7a:ee:77:b4:a2:01:19:eb:db:03:49:78:d1:89:
d7:50:24:c7:f9:5e:b0:d3:a5:63:d6:51:29:35:1e:
fe:06:d2:34:81:a8:22:20:5a:3a:00:7d:22:23:dc:
1e:d6:66:6d:73:07:7c:53:24:cc:6d:d7:f1:c6:7f:
df:63:c8:4d:46:90:01:78:64:3d:2a:7d:3a:47:aa:
ab:d8:18:59:39:af:f5:0c:31:79:84:5f:89:80:8b:
e7:50:ea:0f:56:b6:bd:e1:fd:05:44:72:96:db:0c:
09:8d:81:26:fc:fa:30:f5:84:21:15:92:b4:34:37:
c7:31:30:fe:a9:70:fd:b1:6f:ae:78:2c:d4:1d:e6:
12:67:0d:5a:87:f3:ef:06:d1:4c:6c:19:80:5a:68:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B5:EB:BA:44:B0:97:1A:D1:58:4C:3B:C0:80:50:4E:88:67:A4:CD
X509v3 Authority Key Identifier:
keyid:26:85:1D:8D:0C:5C:C4:F5:EE:C7:66:2B:77:60:68:8D:8B:65:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoUdjQxcxPXux2Yrd2BojYtlLFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/ELXrukSwlxrRWEw7wIBQTohnpM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/JoUdjQxcxPXux2Yrd2BojYtlLFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.16.0/22
IPv6:
2a07:5b80::/29
Signature Algorithm: sha256WithRSAEncryption
67:fe:96:83:4f:d0:a4:5f:80:92:b0:df:3c:dc:a0:fc:a9:d3:
29:2d:87:8f:ae:c1:5f:50:3f:32:ec:44:83:1c:78:6e:d5:f9:
82:f0:5e:af:b4:d0:ca:08:1c:44:72:a9:0c:e0:58:ea:1e:d7:
c8:e9:e8:3c:f6:6a:c4:72:d6:81:79:0f:5b:15:58:ae:e9:75:
bd:5b:23:32:3a:21:cb:b3:4e:05:04:6f:a2:fa:08:7f:93:9c:
1f:9f:fb:0b:19:21:b2:7a:b0:ce:18:a8:ac:a4:1e:9b:68:d8:
71:c3:50:70:0b:82:c8:cd:ae:61:99:f3:bd:80:3e:45:35:29:
f3:fb:bf:4c:37:1b:bc:fb:43:6d:96:5f:ad:e4:3f:e5:78:6c:
17:c3:ac:72:50:3f:32:a5:9a:1a:53:74:c8:50:23:c3:db:35:
43:e2:a2:44:ec:99:df:a7:ba:e6:08:1b:6f:14:79:76:d6:85:
a9:ee:63:5f:84:f6:cc:1d:5f:5b:c2:70:0d:7f:ed:68:9c:d1:
6a:27:35:e7:a5:6d:31:b8:99:53:f6:32:3e:84:65:bf:19:60:
3c:03:8c:ab:73:c3:ff:d8:6c:95:4f:f2:28:9d:7d:0e:4e:c0:
57:d0:06:d4:b7:28:b6:c5:e8:6b:ae:38:bc:e2:56:e1:5a:07:
1d:19:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:59:17 2025 by rpki-client