Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9oF_YBPk2N7TBl4840GxsFnZQ7I.roa
File: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (raw, json)
Hash identifier: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=
Subject key identifier: F6:81:7F:60:13:E4:D8:DE:D3:06:5E:3C:E3:41:B1:B0:59:D9:43:B2
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221FA28314FFF13288B33CE933B83432
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9oF_YBPk2N7TBl4840GxsFnZQ7I.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62380
IP address blocks: 185.232.64.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:83:14:ff:f1:32:88:b3:3c:e9:33:b8:34:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6817f6013e4d8ded3065e3ce341b1b059d943b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:74:3a:71:76:2e:96:75:b7:43:66:77:fd:
fb:8a:48:e9:f3:25:8f:0f:cc:37:77:c5:38:99:c6:
4d:a2:f5:05:96:6f:73:6d:d3:ba:d0:a3:27:ce:d3:
c9:56:fe:d2:e0:a1:76:54:2d:0c:02:9b:86:8e:ab:
13:78:58:69:d4:e1:b2:1f:6e:a4:89:09:05:03:d2:
05:c4:4d:0b:14:c5:5e:07:3c:d3:ad:6c:de:ce:56:
ab:76:ec:17:32:b6:0f:4e:be:ef:95:b2:1e:f2:7e:
02:4e:78:95:d8:6f:fe:28:be:71:75:a1:1d:72:55:
23:23:f9:88:03:ce:4d:5f:8a:bb:b9:7d:05:87:db:
d2:52:17:81:41:6c:d2:0c:74:3d:b4:c3:b1:c2:25:
46:d6:c3:4a:f8:75:d5:b1:ec:2e:e4:85:9f:fe:f6:
01:4e:3b:47:9e:38:37:d5:9a:2c:f9:1f:47:92:e4:
c2:53:ce:6d:b7:d9:e3:db:3a:21:90:42:5b:67:a7:
b8:78:e9:58:fb:34:4b:c9:5f:b9:cd:ad:12:0b:90:
cb:2b:01:77:b3:79:75:66:69:5e:0f:6c:ae:f5:6d:
91:04:c8:a6:bf:04:b1:80:9f:e5:3a:85:7c:36:c8:
81:f4:fa:a2:c6:3d:63:79:02:97:99:92:1e:ef:15:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:7F:60:13:E4:D8:DE:D3:06:5E:3C:E3:41:B1:B0:59:D9:43:B2
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9oF_YBPk2N7TBl4840GxsFnZQ7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.64.0/24
185.232.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a3:e6:ed:83:2d:51:93:d5:9b:fc:01:3b:61:e3:e9:00:f4:
04:bf:d2:e9:ca:c8:be:e2:6f:7b:98:27:54:17:12:de:67:fb:
2d:d1:a0:c0:ac:b6:bb:e2:3c:d4:31:38:5c:1d:9e:33:36:1e:
1a:55:32:50:26:99:33:6a:38:35:e5:b8:1f:09:7a:9f:c7:5a:
d6:98:6b:59:de:a6:0c:ab:80:8e:b0:d5:9d:8a:81:83:6d:a8:
57:74:b5:1d:ce:65:28:ca:24:5d:1f:44:e9:ce:e0:b0:dc:f4:
99:ba:5f:4a:62:5d:c4:00:33:11:6a:f0:42:cc:ad:54:34:09:
d2:b1:0d:90:f5:16:a2:48:b7:5a:20:1e:d7:49:ae:77:d5:74:
a6:76:29:f1:ff:a8:f0:45:62:1f:9f:b9:db:0a:5d:94:f8:87:
8a:b4:bf:a0:3b:24:91:58:c3:51:63:6e:92:23:40:60:ac:c8:
4f:33:15:fb:44:de:ed:0c:b9:5f:77:d1:88:33:c6:6a:26:46:
b4:f0:09:cf:e4:e3:ca:99:7b:f6:8e:58:66:ff:38:8d:08:3c:
a8:32:ff:fa:c3:8f:83:32:49:f9:a1:0c:14:8e:f9:59:97:73:
50:5c:76:cb:4c:e2:6a:2b:6a:e4:45:ad:19:7c:f8:db:70:f4:
88:45:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:22 2025 by rpki-client