Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B-CC9pofpA0Plxhy0W7zY1DeTxk.roa
File: B-CC9pofpA0Plxhy0W7zY1DeTxk.roa (raw, json)
Hash identifier: zaqqvpaYNsw5A/9aTOkAjdC+ZFgl0oouWDSl2Z/7DjY=
Subject key identifier: 07:E0:82:F6:9A:1F:A4:0D:0F:97:18:72:D1:6E:F3:63:50:DE:4F:19
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422203FCC46F799DE86BD62BFA2F9B611
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B-CC9pofpA0Plxhy0W7zY1DeTxk.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206264
IP address blocks: 185.251.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3f:cc:46:f7:99:de:86:bd:62:bf:a2:f9:b6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07e082f69a1fa40d0f971872d16ef36350de4f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:f7:27:e3:c1:e4:c9:14:85:3a:89:b7:e7:
67:99:c0:2f:45:f8:d2:da:c4:51:45:51:10:55:5f:
6f:91:db:65:2b:63:20:4b:70:93:10:e8:19:b6:08:
6f:73:2e:20:2a:4b:55:4e:d2:e3:a2:4b:4c:dd:41:
36:75:8d:ab:d7:d6:c5:ef:6b:99:b9:15:80:23:a8:
48:31:e0:a3:e4:8d:ad:79:4b:f6:98:ab:fb:bf:3b:
85:50:16:c8:da:13:f5:bd:40:f6:94:47:ad:c3:d5:
00:73:3e:d8:ff:a3:f7:8d:02:07:fc:74:bf:b1:54:
f9:34:11:51:74:31:76:14:5f:36:13:99:86:b0:09:
c6:92:1c:7b:33:55:dc:45:b2:e1:cf:30:8c:dc:9c:
da:72:0a:7d:df:97:5b:b0:c2:d4:93:56:30:eb:25:
46:db:f8:ca:3b:50:82:11:70:39:0c:3c:06:02:85:
41:dd:10:79:f7:38:f8:b6:1c:17:1f:ec:03:25:6c:
f3:17:e1:e4:f3:a0:d6:cb:8e:8f:a2:1c:96:4f:45:
17:77:52:5e:64:fb:22:38:b9:9e:3e:db:2b:33:e8:
19:63:cf:e4:21:fa:2d:b8:f4:c7:23:df:07:91:c7:
c2:11:34:a8:c8:63:5e:a3:7f:b2:83:e4:2e:8f:ee:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E0:82:F6:9A:1F:A4:0D:0F:97:18:72:D1:6E:F3:63:50:DE:4F:19
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B-CC9pofpA0Plxhy0W7zY1DeTxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:15:81:58:ed:74:dd:63:41:84:37:4e:3d:26:14:37:a2:55:
9e:01:ad:ff:ac:2b:d4:55:a9:af:a3:16:d6:0c:9f:47:8b:02:
99:43:95:d0:1d:5c:d9:fd:3d:e2:55:4e:30:01:f9:64:35:44:
5c:48:85:0f:16:84:6b:d9:13:50:6e:df:80:e0:a3:50:23:e8:
44:2c:f7:be:09:76:5f:e0:54:ca:dd:89:e4:eb:79:f4:95:65:
98:79:10:d2:4e:ce:b7:b0:ff:b3:30:46:34:87:28:5c:ca:c7:
a6:78:5b:00:7d:09:44:f1:dd:4e:8f:9c:14:69:83:34:39:5a:
f1:12:8e:96:7b:c0:69:57:13:fa:04:0a:a1:3a:f9:c1:1e:18:
b5:7c:43:d0:93:c1:ac:33:f6:2c:32:66:d0:e4:37:ed:c7:4c:
f4:6e:6e:c9:11:dc:ee:6d:2f:b6:2e:bd:fa:79:fd:26:94:25:
f2:3c:54:84:98:11:d1:c2:db:0d:5c:75:f7:2a:a1:2b:eb:cb:
10:01:f2:ae:ad:d6:76:a8:38:db:9e:ef:dd:a2:77:32:c0:65:
72:a0:16:cc:46:26:bf:53:43:97:f5:4f:1a:13:eb:8c:45:a7:
4b:84:77:5e:2e:7e:a7:5f:5e:66:5c:5e:fe:2c:e6:66:cb:58:
cc:b1:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:06:11 2025 by rpki-client