Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/u-w9Flj7fkevQpf-dpXISzIby2Y.roa
File: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (raw, json)
Hash identifier: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=
Subject key identifier: BB:EC:3D:16:58:FB:7E:47:AF:42:97:FE:76:95:C8:4B:32:1B:CB:66
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019421B1FAAB11C4BFD9FB7D52E50D6CE52F
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/u-w9Flj7fkevQpf-dpXISzIby2Y.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56911
IP address blocks: 185.225.60.0/22 maxlen: 24
185.225.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fa:ab:11:c4:bf:d9:fb:7d:52:e5:0d:6c:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbec3d1658fb7e47af4297fe7695c84b321bcb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:13:99:88:97:04:8d:f4:8d:d0:18:0a:aa:
2f:57:a0:15:09:45:ac:b1:9a:58:7a:c3:08:61:a0:
de:7e:04:93:24:5a:00:ac:ce:e9:02:1c:fc:33:f6:
84:d7:3b:f5:c0:a0:3d:fe:6f:b1:ba:02:4a:06:3d:
bd:f6:4e:f4:8a:24:cd:df:f7:44:04:c7:00:d9:d5:
2a:57:51:0c:8f:4a:b9:8e:9a:6f:93:1e:e1:09:b1:
72:d8:3e:d3:5f:32:a9:de:c6:50:bf:9d:fc:fb:df:
96:72:66:73:38:76:18:04:2c:d0:11:e6:f8:a6:d8:
9a:9e:b7:23:3e:19:f1:b3:c1:04:a5:ad:5b:8c:b8:
32:0a:6f:ba:84:26:86:f3:f0:c8:1b:c9:13:5d:c8:
50:0f:ba:91:6f:20:32:62:94:8f:43:a1:f3:8b:fe:
35:9f:35:b2:f5:73:e3:c9:0a:7b:62:07:d0:f2:cc:
fe:d6:cf:ab:cc:3d:41:7b:19:4b:35:cc:07:bf:a9:
2e:2c:20:df:55:95:29:8f:4e:10:12:f7:39:4a:2f:
05:13:19:c3:92:7e:30:58:33:c4:80:3d:bd:df:95:
44:3f:50:42:21:38:26:fc:07:9a:5f:09:3a:e0:e8:
8b:4b:57:d4:27:bf:0f:18:c9:b6:d8:6f:23:6c:67:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:3D:16:58:FB:7E:47:AF:42:97:FE:76:95:C8:4B:32:1B:CB:66
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/u-w9Flj7fkevQpf-dpXISzIby2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:de:1e:6b:46:48:57:02:db:b7:94:94:6e:3f:a7:d9:a0:dd:
7e:1f:5a:4b:da:fa:e2:3f:02:27:10:7e:29:f8:a5:39:cc:69:
e7:b5:a4:10:39:67:7b:39:fc:9b:10:60:f6:26:b5:53:7c:96:
5d:aa:51:02:4e:1e:fc:de:25:e7:41:17:db:a9:dc:19:fb:24:
7b:23:14:8d:c1:11:26:e4:82:2f:3a:0d:51:00:f5:fe:ee:3b:
3a:41:20:a5:8d:69:40:c3:17:34:71:14:69:00:6f:ae:64:89:
d4:77:07:fc:c1:b0:dc:a5:72:81:e1:e0:33:db:31:e1:59:c8:
7b:23:40:38:01:0f:80:7d:71:e8:67:18:af:d1:73:76:aa:99:
ed:be:11:01:63:34:58:ee:c6:f0:4d:9d:9b:0d:f4:df:c3:ec:
4e:ed:dc:91:b8:02:35:32:6d:0a:45:62:94:0e:be:82:58:e6:
fc:ee:2e:75:7a:f8:c0:65:7a:ae:fc:f2:00:77:46:bd:97:0f:
c3:53:0f:fb:0a:9b:9a:99:f3:ba:ff:3b:6b:52:05:fd:fe:08:
ef:75:e5:ce:a3:e1:d7:ef:d7:b6:60:90:91:36:21:86:4c:fe:
a6:a0:94:61:af:e2:2a:53:78:e4:15:2a:96:39:3b:59:30:95:
7d:ae:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:15 2025 by rpki-client