Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/t9JlxW-1GEU_rOjA-ROD5WEgfCQ.roa
File: t9JlxW-1GEU_rOjA-ROD5WEgfCQ.roa (raw, json)
Hash identifier: BkgM8NMsdaEHAAOQkB0srZ/LsfSRqQ2ARXMkrqT4zq4=
Subject key identifier: B7:D2:65:C5:6F:B5:18:45:3F:AC:E8:C0:F9:13:83:E5:61:20:7C:24
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0193B6E94AAE871142F12DFC50298194A4A3
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/t9JlxW-1GEU_rOjA-ROD5WEgfCQ.roa
Signing time: Wed 11 Dec 2024 18:09:22 +0000
ROA not before: Wed 11 Dec 2024 18:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 185.153.236.0/24 maxlen: 24
185.153.239.0/24 maxlen: 24
188.31.248.0/23 maxlen: 23
188.31.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:e9:4a:ae:87:11:42:f1:2d:fc:50:29:81:94:a4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Dec 11 18:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7d265c56fb518453face8c0f91383e561207c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:8a:b8:99:b8:9b:0a:18:90:a0:b5:f4:23:
e3:98:a2:51:ff:48:73:1e:8f:33:b8:dd:f1:f2:36:
d1:7f:0b:55:88:1b:5f:96:4a:92:81:a8:41:52:64:
fa:9d:ab:40:02:5a:cf:b9:88:33:e6:a3:a6:3f:57:
c7:c7:c0:1b:b8:f5:0c:cf:9c:28:35:8c:8d:c0:73:
54:52:a1:50:48:57:f6:ef:37:95:32:b5:18:75:1c:
ba:01:fe:99:2b:96:1c:90:bd:29:74:a9:a6:25:be:
6b:b4:4b:5d:ed:7e:d4:03:a9:17:82:2a:a1:c1:d0:
1c:9a:d1:6c:5e:94:d1:aa:84:f5:81:25:52:49:2a:
0a:8e:7e:17:5b:88:6a:8c:97:2f:83:81:ad:28:da:
ea:0c:0c:82:ce:cb:c1:4f:54:ce:59:4e:b2:1e:2b:
46:dd:33:34:da:12:2b:f6:ab:95:21:ea:70:a3:64:
bb:fe:e1:a7:4f:67:63:4b:d7:46:ea:51:e8:f3:9b:
b4:6e:87:e9:cd:45:fc:9a:67:98:af:da:13:7d:a2:
62:ef:0c:05:3d:4d:76:0c:bd:a2:75:bc:2a:17:16:
5b:f2:da:22:51:28:5f:c0:9b:f3:dc:77:93:c2:2a:
8a:59:30:4f:23:60:e0:6a:da:25:25:0e:2c:8d:81:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D2:65:C5:6F:B5:18:45:3F:AC:E8:C0:F9:13:83:E5:61:20:7C:24
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/t9JlxW-1GEU_rOjA-ROD5WEgfCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.236.0/24
185.153.239.0/24
188.31.248.0/23
188.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
98:82:78:c9:eb:f0:68:40:a4:96:3e:d2:d1:09:f7:22:e5:2b:
77:cc:c2:56:de:c7:22:c6:8a:35:d9:3f:97:1c:34:fc:66:28:
cb:cb:3a:ae:4a:52:7d:ac:fd:a2:d3:a6:41:b6:df:63:e7:0d:
ec:43:53:a4:9a:fa:78:9a:18:8c:d9:19:d0:74:86:fd:6f:4d:
1d:96:12:cf:0f:8e:69:a4:03:d3:23:26:b2:a0:05:97:95:af:
2c:47:b3:a0:8a:63:b9:aa:2c:d4:b9:61:4a:74:fa:43:bb:1e:
cf:bf:dd:13:56:70:1b:32:97:8d:da:30:33:7a:d9:20:59:56:
d3:84:2b:ea:a5:6c:c7:8b:31:7c:47:b0:7e:1d:dc:a3:f8:f7:
83:66:c9:06:12:63:81:7d:ba:e5:82:3c:5b:e9:26:27:f1:ea:
bf:a3:8f:ba:5a:02:32:35:12:48:a3:17:8c:ee:dd:7b:95:4d:
5e:9d:9b:d2:fa:35:2c:50:e8:74:dc:19:48:7b:8f:b4:d0:56:
10:80:c7:6e:b9:6e:50:aa:c5:f5:2a:34:ba:b9:d5:f3:ab:f1:
d7:6e:d2:04:85:89:30:ef:e7:b3:47:fe:c1:70:76:8d:1f:4b:
49:53:ad:f0:12:68:69:9e:06:4f:7a:b1:ec:bb:ff:44:90:c6:
16:0d:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:30 2025 by rpki-client