Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e723d6-30fc-40b5-94c9-9599d3dc796d/1/Ptu_ijwkOoi7Z_1fYB6Oj0SLUQA.roa
File: Ptu_ijwkOoi7Z_1fYB6Oj0SLUQA.roa (raw, json)
Hash identifier: j1GBvAU1b5uDjANHQX3AJo7BQzW/oSBNgcU9yGY1XJw=
Subject key identifier: 3E:DB:BF:8A:3C:24:3A:88:BB:67:FD:5F:60:1E:8E:8F:44:8B:51:00
Certificate issuer: /CN=b6bb8d94f632a3ced75ec5d3f2eece9cf1605bd3
Certificate serial: 06E47950
Authority key identifier: B6:BB:8D:94:F6:32:A3:CE:D7:5E:C5:D3:F2:EE:CE:9C:F1:60:5B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/truNlPYyo87XXsXT8u7OnPFgW9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e723d6-30fc-40b5-94c9-9599d3dc796d/1/Ptu_ijwkOoi7Z_1fYB6Oj0SLUQA.roa
Signing time: Sat 01 Jan 2022 15:54:55 +0000
ROA not before: Sat 01 Jan 2022 15:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201553
IP address blocks: 185.208.64.0/24 maxlen: 24
185.208.65.0/24 maxlen: 24
185.208.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115636560 (0x6e47950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6bb8d94f632a3ced75ec5d3f2eece9cf1605bd3
Validity
Not Before: Jan 1 15:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3edbbf8a3c243a88bb67fd5f601e8e8f448b5100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:d8:2b:ab:e6:4d:9d:0f:89:d1:4c:39:3a:
e7:ba:e6:9e:bc:51:c1:53:62:9f:af:78:79:ff:fc:
c4:51:07:9f:c8:4c:49:cb:fc:41:b2:37:b3:86:a8:
d9:67:5f:0a:7f:ef:01:14:12:c8:8b:32:97:ea:65:
ed:9b:1d:6c:02:9f:6d:3f:70:55:05:55:0a:66:cd:
e8:dd:21:bc:25:2f:a2:6f:fe:db:08:ee:70:78:d2:
5d:42:78:ca:b7:d9:5e:a0:b2:1b:36:20:c5:c0:3b:
63:74:8d:b5:ba:e1:5d:2f:ff:f8:f0:38:d8:51:e2:
90:fe:f6:78:53:07:0b:0d:a5:c6:95:bd:7a:b3:6f:
74:e5:79:57:10:df:80:f6:5f:58:81:b4:77:29:73:
f1:23:67:be:fa:bf:53:7a:d6:5a:5d:a5:0c:e6:a3:
fb:8e:6b:a9:19:85:84:46:90:5f:f8:09:50:3d:b4:
df:cb:c9:2a:ef:29:ca:7e:6f:25:12:6e:b9:2b:46:
74:46:a8:fe:1d:eb:74:a6:b5:82:c2:82:d7:b3:0b:
1a:26:d0:e6:5f:1a:15:d9:06:2e:c0:3f:d6:72:db:
79:7a:99:d9:2a:a4:8d:db:fb:43:f4:25:c1:40:e8:
f6:fb:11:6e:e1:75:e6:0f:69:1d:d5:eb:2c:d6:99:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:BF:8A:3C:24:3A:88:BB:67:FD:5F:60:1E:8E:8F:44:8B:51:00
X509v3 Authority Key Identifier:
keyid:B6:BB:8D:94:F6:32:A3:CE:D7:5E:C5:D3:F2:EE:CE:9C:F1:60:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/truNlPYyo87XXsXT8u7OnPFgW9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e723d6-30fc-40b5-94c9-9599d3dc796d/1/Ptu_ijwkOoi7Z_1fYB6Oj0SLUQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e723d6-30fc-40b5-94c9-9599d3dc796d/1/truNlPYyo87XXsXT8u7OnPFgW9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.64.0/23
185.208.67.0/24
Signature Algorithm: sha256WithRSAEncryption
52:08:ef:97:17:53:79:96:ee:b4:09:ad:ea:b9:0e:b5:2c:10:
4b:be:bc:7c:45:8c:06:5d:82:f2:76:9b:af:0d:f0:d0:e6:34:
a3:c8:b9:fe:c7:d1:5a:2f:78:9d:ca:b8:a4:57:ed:17:be:b0:
df:91:01:8f:34:01:01:61:6a:9e:5e:7a:f7:e2:27:91:94:1b:
a6:37:16:e3:45:55:db:aa:cf:ab:19:82:84:2b:9a:28:7c:5a:
d5:c0:5f:5f:94:7c:d0:b1:9c:a0:bc:ac:d8:ec:05:48:f8:0b:
1f:20:ee:3e:eb:71:fa:ee:c8:7c:3d:16:1f:a2:84:81:fc:8a:
5a:66:42:17:76:8e:35:8b:9a:a7:0f:6a:95:5f:83:89:e7:ac:
d5:80:d9:b7:c7:bf:c9:d7:40:a2:a6:c2:ea:ec:1c:2e:54:cc:
46:65:5c:72:85:23:20:38:51:15:e0:3b:61:57:04:25:21:eb:
a0:60:81:1d:72:4c:69:27:f4:c0:3e:9b:73:c6:0a:08:4f:12:
70:c3:6e:ad:82:bc:c9:df:ff:f1:a7:90:9b:04:d6:33:b6:ab:
36:06:8c:15:c4:c5:02:38:e3:74:94:52:fa:b6:17:47:7c:5c:
52:da:2a:fa:21:a8:ab:19:63:84:e1:d6:96:8c:2d:9e:5d:13:
af:08:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:54 2025 by rpki-client