Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/pSGjeRBN4sSL1uoHbHUWuvJi-bg.roa
File: pSGjeRBN4sSL1uoHbHUWuvJi-bg.roa (raw, json)
Hash identifier: FIUW2Q8jHbnxVsMOld8oWfWeIQhB40R5yUEQ+bItsAo=
Subject key identifier: A5:21:A3:79:10:4D:E2:C4:8B:D6:EA:07:6C:75:16:BA:F2:62:F9:B8
Certificate issuer: /CN=2b9a46de84e148e8b2a16939a295c54c33a80178
Certificate serial: 019049C792BDEF393624E54463EEC3DC2B08
Authority key identifier: 2B:9A:46:DE:84:E1:48:E8:B2:A1:69:39:A2:95:C5:4C:33:A8:01:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5pG3oThSOiyoWk5opXFTDOoAXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/pSGjeRBN4sSL1uoHbHUWuvJi-bg.roa
Signing time: Mon 24 Jun 2024 10:25:34 +0000
ROA not before: Mon 24 Jun 2024 10:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.94.249.0/24 maxlen: 24
185.94.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:c7:92:bd:ef:39:36:24:e5:44:63:ee:c3:dc:2b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9a46de84e148e8b2a16939a295c54c33a80178
Validity
Not Before: Jun 24 10:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a521a379104de2c48bd6ea076c7516baf262f9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:b8:e7:5a:54:45:f0:be:7a:97:5c:0d:43:
0b:64:cb:4d:61:86:65:f6:f8:60:81:6d:37:17:88:
89:1d:e8:60:d2:f7:57:fd:37:aa:93:e4:ab:3c:8c:
07:8f:ef:22:e0:99:9a:2c:6a:ae:8e:5b:16:b8:73:
43:32:aa:4d:ae:2c:ce:51:80:8d:d4:55:ab:2f:8d:
e6:38:26:f9:15:fa:db:8b:10:11:4e:11:bf:62:a8:
e3:b4:02:9e:51:66:79:35:22:8d:d7:7b:fd:be:47:
1f:90:85:3c:75:fd:ed:00:1d:33:d3:e4:50:fb:dd:
55:93:03:cb:93:27:b5:72:1b:b9:34:90:0b:82:2a:
ec:de:36:d9:d4:56:07:84:c7:f7:24:3c:93:4e:cf:
8a:41:2d:88:79:c8:5a:d1:36:83:80:f4:ea:ce:d8:
cc:dd:d7:8b:16:ed:12:b2:6a:04:50:9f:e3:58:ab:
ce:3d:e1:14:fe:40:4f:9b:54:99:e9:bd:57:5b:f2:
e6:96:d7:49:4f:71:6a:fe:f0:c8:af:38:b4:1c:65:
c6:2e:f1:06:2d:cc:5a:fc:ad:01:55:51:d3:28:fd:
9e:bc:3e:08:6c:a7:ea:ad:8e:a2:63:a7:c5:2f:02:
db:26:98:03:4b:cf:e1:0d:1e:90:8f:ad:56:1c:b9:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:21:A3:79:10:4D:E2:C4:8B:D6:EA:07:6C:75:16:BA:F2:62:F9:B8
X509v3 Authority Key Identifier:
keyid:2B:9A:46:DE:84:E1:48:E8:B2:A1:69:39:A2:95:C5:4C:33:A8:01:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5pG3oThSOiyoWk5opXFTDOoAXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/pSGjeRBN4sSL1uoHbHUWuvJi-bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/K5pG3oThSOiyoWk5opXFTDOoAXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.249.0-185.94.250.255
Signature Algorithm: sha256WithRSAEncryption
15:6f:64:c1:4e:66:96:e9:28:f6:05:3a:fc:ec:b3:63:a3:d3:
33:d5:f8:15:6d:25:9a:43:2b:54:fa:e1:88:88:44:a6:4f:96:
2e:aa:45:6f:f6:c9:3c:ff:6f:81:71:5c:16:3c:25:ec:42:b4:
cc:b3:77:e2:9f:2f:af:0c:d6:33:b8:ff:c4:0e:5f:b3:16:36:
e2:ea:97:b8:49:f6:28:db:08:d6:b5:1a:a8:12:07:ba:ee:42:
ce:1e:a0:08:b2:27:31:d5:1e:aa:f1:37:6d:08:a8:d3:fa:6e:
dd:78:cc:fd:0b:1a:ed:61:00:60:ca:17:22:5b:ca:c4:98:69:
31:bf:2e:7c:99:61:cb:e2:11:12:a1:4e:39:7a:9f:61:1d:cb:
15:4f:1c:2c:eb:d2:d9:9f:4c:9e:2d:21:d4:b3:fd:fd:42:01:
97:df:be:2c:61:a3:91:0d:a4:8d:06:18:a0:0a:c7:88:ab:63:
77:1e:0b:77:58:c1:db:7c:b8:90:a3:13:ee:67:fc:01:a2:1e:
57:17:f3:ac:0c:eb:50:29:e5:f7:77:f5:5b:54:14:eb:5f:01:
52:e6:4f:08:83:ca:48:24:b2:34:6a:34:3d:38:1d:7d:be:99:
49:87:9d:c3:c3:2e:f2:66:0e:ad:2f:82:a8:03:e8:ad:c7:e3:
d7:5a:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:25:37 2025 by rpki-client