Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/US2iZbOrWCL2cayiZwxakKtP05c.roa
File: US2iZbOrWCL2cayiZwxakKtP05c.roa (raw, json)
Hash identifier: 52YhQk2tAw/4PeSZdk7kK5Ee58QSFkl7S17es1QKE9c=
Subject key identifier: 51:2D:A2:65:B3:AB:58:22:F6:71:AC:A2:67:0C:5A:90:AB:4F:D3:97
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 0194258ECAAD5BE033371B8BE78888C8C2C5
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/US2iZbOrWCL2cayiZwxakKtP05c.roa
Signing time: Thu 02 Jan 2025 05:48:22 +0000
ROA not before: Thu 02 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 185.93.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ca:ad:5b:e0:33:37:1b:8b:e7:88:88:c8:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 2 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=512da265b3ab5822f671aca2670c5a90ab4fd397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:56:5d:bf:65:d6:fa:33:de:01:d2:0f:e5:
cb:dc:db:d8:63:6b:74:46:aa:28:33:1e:c6:bc:dc:
da:cc:72:d5:ad:73:a4:e1:2f:62:33:2b:e0:52:0e:
57:87:20:82:ea:64:ae:b4:c4:2e:d8:2b:79:95:a3:
72:6f:c4:06:6b:75:ed:c3:1d:e7:ea:fd:e0:05:7a:
4f:a1:47:d9:ce:30:18:03:15:3b:13:62:5a:c6:8b:
d6:77:69:aa:f4:bc:9a:27:79:36:60:9d:b0:04:02:
d0:82:a6:d5:e2:2f:66:b9:6b:62:21:c4:c9:6d:c0:
9a:e1:f6:8d:f7:a5:9a:dd:a8:92:14:8f:51:22:c1:
eb:d5:47:7e:05:fd:75:fc:9d:28:ff:d9:e3:e9:d1:
c0:f1:f6:65:98:82:11:69:41:b9:09:6c:71:c9:4d:
c1:b4:5a:c7:33:69:2f:3d:f7:4a:32:f8:9f:ed:63:
36:f2:4d:b9:81:3f:1c:eb:bf:10:58:4b:da:f6:7c:
93:1d:b9:d8:bc:d6:98:4e:b6:cf:c0:4d:98:72:58:
cc:0b:61:d1:21:1a:71:74:84:5c:45:5f:43:18:83:
49:8b:5b:87:5b:13:e4:d2:e5:96:3e:06:50:e5:8d:
13:cb:66:fa:19:ad:5e:e0:db:48:e9:3a:61:59:96:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2D:A2:65:B3:AB:58:22:F6:71:AC:A2:67:0C:5A:90:AB:4F:D3:97
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/US2iZbOrWCL2cayiZwxakKtP05c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:72:33:c7:48:15:73:88:93:ac:99:e0:7f:19:e7:c5:85:48:
0d:03:23:4f:c9:c6:13:45:8b:a8:cb:d7:1d:b6:37:49:83:0a:
a9:8c:63:10:b8:ad:f1:e1:b0:e1:a0:4e:25:92:28:0d:db:ec:
d0:ed:82:59:b5:70:9e:85:92:3b:60:29:cf:bc:d5:70:ba:44:
2d:c1:14:b7:4e:87:3f:0b:99:c8:b7:0d:88:7f:ac:4b:2b:74:
31:10:75:0c:96:d8:1d:71:3c:09:97:33:99:a4:da:ee:ee:8a:
3e:8e:6b:7d:1b:f4:5a:01:fb:ed:1c:e8:2a:3e:5a:59:3b:e1:
5b:24:bd:01:0c:eb:68:e4:2e:ed:39:6d:a7:c4:96:18:f1:bd:
dc:35:94:99:56:2d:92:d6:d9:dd:65:0f:32:75:01:57:2f:58:
dc:6a:e8:4f:cf:f5:39:6f:df:21:1c:98:62:91:3f:4f:99:0c:
eb:a4:d0:57:f4:db:a5:ad:08:53:a5:fd:b0:5e:b4:6b:b5:f7:
31:6d:f5:34:9c:00:f4:0a:c2:99:55:73:4a:2a:d7:fe:be:59:
81:70:e3:53:c7:2c:da:83:16:df:33:57:52:15:df:a4:84:71:
26:18:2c:ed:9f:bd:43:25:b8:c7:bc:2f:1c:5b:ad:9d:f1:a7:
06:63:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:30 2025 by rpki-client