Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/0lNBru-ra2lTqtpLoPMYrS7Eu-I.roa
File: 0lNBru-ra2lTqtpLoPMYrS7Eu-I.roa (raw, json)
Hash identifier: cGEHNrLkagepG1Ft6aSuT7ALJk2hoXE9Bpc3zgmz9Cw=
Subject key identifier: D2:53:41:AE:EF:AB:6B:69:53:AA:DA:4B:A0:F3:18:AD:2E:C4:BB:E2
Certificate issuer: /CN=c1bc9eff2dbfd54425ae6d709b84e48c1f05fc3e
Certificate serial: 01857230ECB3E65FED67754D0C7566C5EA67
Authority key identifier: C1:BC:9E:FF:2D:BF:D5:44:25:AE:6D:70:9B:84:E4:8C:1F:05:FC:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbye_y2_1UQlrm1wm4TkjB8F_D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/0lNBru-ra2lTqtpLoPMYrS7Eu-I.roa
Signing time: Mon 02 Jan 2023 11:14:47 +0000
ROA not before: Mon 02 Jan 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51621
IP address blocks: 185.217.130.0/24 maxlen: 24
2a12:1580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:ec:b3:e6:5f:ed:67:75:4d:0c:75:66:c5:ea:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bc9eff2dbfd54425ae6d709b84e48c1f05fc3e
Validity
Not Before: Jan 2 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d25341aeefab6b6953aada4ba0f318ad2ec4bbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:1d:61:11:72:e1:24:d5:fe:ae:9c:aa:62:
fc:40:5d:ec:a5:23:60:0a:47:b6:b8:60:bd:ca:5c:
65:97:6e:8d:63:a0:d1:fd:35:be:3a:f7:0e:75:90:
28:d3:55:4c:c9:7e:a6:40:6d:33:91:b2:4f:79:96:
8a:f4:eb:1f:af:23:93:89:2a:fe:37:99:e8:46:77:
07:56:0e:da:8d:b7:00:ff:a8:72:19:b9:ad:b0:31:
77:df:3f:3b:5b:0e:0e:48:93:2d:30:f6:f8:b3:df:
05:e0:45:5f:3c:44:d1:db:b6:3e:18:1f:37:c0:4f:
7b:9b:3b:04:ac:1d:ff:eb:d5:fa:5a:6c:6f:26:b6:
82:43:a1:8d:b4:a7:ad:5d:70:79:32:05:e3:1e:d0:
3f:4f:ab:14:48:15:cf:ba:61:86:c6:ec:49:2a:92:
de:88:eb:22:f4:99:b9:e3:91:0a:77:54:5b:8f:13:
0d:ce:f8:80:24:06:ee:ea:73:f5:27:71:17:53:b5:
09:78:da:4f:1d:0e:f2:60:f6:64:b2:8b:cf:0d:e6:
e2:98:d9:a4:e1:25:31:50:a3:87:2f:b9:49:11:11:
3c:9c:57:f2:8e:0d:4f:8c:bb:2a:a2:40:8a:c9:1a:
06:fd:f3:b8:97:29:e8:62:eb:61:9c:46:0b:e1:3c:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:53:41:AE:EF:AB:6B:69:53:AA:DA:4B:A0:F3:18:AD:2E:C4:BB:E2
X509v3 Authority Key Identifier:
keyid:C1:BC:9E:FF:2D:BF:D5:44:25:AE:6D:70:9B:84:E4:8C:1F:05:FC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbye_y2_1UQlrm1wm4TkjB8F_D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/0lNBru-ra2lTqtpLoPMYrS7Eu-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/wbye_y2_1UQlrm1wm4TkjB8F_D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.130.0/24
IPv6:
2a12:1580::/29
Signature Algorithm: sha256WithRSAEncryption
0d:49:74:73:e3:a4:64:e0:31:68:02:a0:2a:81:fe:2d:2f:a7:
97:e5:24:a7:28:e8:94:f6:d2:79:ad:1b:34:67:8d:c3:d8:b4:
56:b4:63:83:df:e8:38:5a:b8:c7:94:b6:48:76:81:aa:83:03:
0b:d1:f2:c4:da:79:fe:3a:2c:81:ed:89:cd:e7:c3:ae:99:ab:
22:63:ec:4f:85:50:c4:a2:24:58:6f:52:f2:35:c7:a6:18:8b:
f7:df:66:ef:fc:df:de:2c:94:69:2b:80:3a:35:d6:0c:f4:00:
e8:6e:f8:ad:f3:9a:9d:67:40:12:95:9a:af:58:ce:cc:cf:7c:
a6:a1:f7:5c:1d:3c:d9:18:1c:7f:97:73:25:8b:fb:4f:05:11:
c5:bc:82:fe:a2:a7:52:40:7d:b3:7f:04:35:10:24:3d:75:07:
ed:c6:a4:09:4b:b2:0b:3f:da:77:14:47:77:ce:04:6f:49:97:
44:53:09:df:6e:2a:d8:f2:d3:5e:d5:2a:d7:41:78:6b:a5:30:
3f:6e:d5:0b:bb:eb:db:6b:c2:1f:47:96:84:3e:75:00:3e:a8:
cb:99:8b:c4:c0:bc:a5:b8:5d:e4:32:db:70:d3:bb:a3:5c:fa:
51:7c:e1:57:ba:66:b1:9f:64:48:50:de:de:fa:b7:03:b2:7b:
28:a3:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:59 2025 by rpki-client