Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa
File: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (raw, json)
Hash identifier: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=
Subject key identifier: 79:03:03:44:D2:6E:32:53:65:7C:F3:22:05:21:28:44:C2:19:AA:47
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 0194236A4CA90DE80D90D97107EB9AD0B3F6
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.49.132.0/22 maxlen: 22
185.49.132.0/23 maxlen: 23
185.49.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4c:a9:0d:e8:0d:90:d9:71:07:eb:9a:d0:b3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79030344d26e3253657cf32205212844c219aa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:1e:48:e3:d2:5e:68:81:5f:87:7c:f9:2c:
dc:aa:64:ba:bb:11:7e:eb:f9:6e:bb:92:3c:a8:58:
b2:5d:7e:7f:d3:49:95:3b:0e:fb:e1:c7:c1:2a:37:
38:2e:1d:83:17:66:61:f6:d0:b0:d8:45:31:ee:0b:
98:29:fd:c3:fb:2c:cf:2c:07:8c:3f:f1:0e:58:2a:
0d:6f:a0:b8:ca:bc:72:5a:26:0a:ba:bf:ff:72:66:
7e:64:1a:f0:3a:22:1f:3e:63:20:c4:06:01:11:e7:
ce:41:94:24:64:a5:7c:9f:b5:d5:87:80:84:81:01:
04:ee:4e:d8:4c:d8:e2:be:98:3a:ea:1e:c0:e3:0a:
5e:f4:33:36:69:93:40:3f:f1:41:8a:84:1e:d0:91:
3f:d4:df:96:60:08:51:20:7c:d9:7e:1d:97:8c:de:
ac:7f:d6:c8:5e:c4:65:c0:3d:6d:3e:78:b6:c6:8e:
84:cf:b0:98:dc:b8:5c:18:6e:8b:99:ef:e8:cd:47:
fc:35:7f:a5:22:11:ee:b8:57:8b:77:13:35:89:74:
8a:83:d6:7c:17:60:fc:d7:68:3b:4b:c6:eb:ac:31:
23:83:38:89:8d:8e:48:4e:61:7d:8c:4e:41:f5:f0:
8a:cc:77:18:f1:35:77:c9:2d:ac:e2:ec:0e:a8:5f:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:03:44:D2:6E:32:53:65:7C:F3:22:05:21:28:44:C2:19:AA:47
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.132.0/22
Signature Algorithm: sha256WithRSAEncryption
45:b0:94:0e:4d:5c:83:01:6c:74:0a:7d:25:4b:af:79:cf:9a:
d8:15:4c:94:df:80:47:f0:6f:4f:80:ba:9a:b1:bb:14:8f:6c:
b7:3b:f6:53:bd:b3:3d:ef:14:b7:02:83:97:49:cb:b7:78:6d:
68:da:9a:d1:51:de:2e:da:72:70:a4:0a:d1:c8:92:18:2b:f9:
88:b7:28:f4:32:fa:8c:77:c5:cd:ff:88:6c:d7:81:3d:ae:95:
c0:b1:cb:d9:b4:8f:c8:74:ff:e7:cd:7b:5f:ee:7b:37:12:9f:
cf:4d:82:37:70:27:49:cd:dc:04:ed:2f:1e:d4:1f:69:e2:14:
e1:3f:98:ef:f2:07:98:e7:66:9a:d0:45:a6:5a:4f:16:bf:96:
b4:43:86:8d:5e:45:01:07:ce:82:1f:f8:44:12:1e:c7:e2:08:
46:eb:b1:de:a0:d0:fd:e0:70:c3:d2:5a:67:94:a0:83:d9:ca:
1c:55:97:16:fe:da:3d:00:46:6e:b8:c5:f7:88:47:34:75:dc:
a6:12:10:5e:e2:ca:37:a0:c9:64:42:11:89:75:36:45:23:24:
78:a9:d8:06:13:c8:25:4b:8b:dc:58:be:28:64:89:2b:83:3f:
fe:d0:1e:a2:8b:68:d5:47:65:d5:7b:af:55:c5:75:9a:b7:02:
f6:96:36:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:21 2025 by rpki-client