Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/IWwsiS-aJdot4eBshq8oe0oy5GY.roa
File: IWwsiS-aJdot4eBshq8oe0oy5GY.roa (raw, json)
Hash identifier: qosKjF6lbWWzBy51nWgFpyBeu/cGBM7SjKVMCbf+nJM=
Subject key identifier: 21:6C:2C:89:2F:9A:25:DA:2D:E1:E0:6C:86:AF:28:7B:4A:32:E4:66
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747AEAC1A61722FFB182F1750E149AC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/IWwsiS-aJdot4eBshq8oe0oy5GY.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 185.230.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ae:ac:1a:61:72:2f:fb:18:2f:17:50:e1:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=216c2c892f9a25da2de1e06c86af287b4a32e466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:74:79:0d:2c:66:69:c7:c5:42:b3:b6:56:
b0:6c:05:9a:40:82:b6:1e:2d:68:77:7f:16:81:25:
22:66:2f:a1:ad:c7:d6:82:3c:07:44:bc:e1:97:34:
bf:30:29:0e:f5:09:0a:9c:15:31:46:ec:fa:bb:ed:
2a:f1:12:54:8f:00:fd:8f:66:43:14:f3:4e:03:02:
bf:6d:3b:2f:84:2a:8d:77:e6:30:1b:4d:27:67:fb:
6b:8a:6c:cc:3c:18:29:bf:17:70:60:4c:da:ad:97:
84:84:fa:99:61:9d:4f:09:2b:21:b8:33:f2:5c:f9:
ae:ed:a2:1d:9d:b7:88:44:fb:d2:40:46:3d:08:e9:
6a:20:22:25:59:da:9b:5f:e6:e5:cf:e7:26:a1:93:
16:12:6c:98:47:e1:f7:05:5c:2b:14:10:0a:b5:51:
f9:e6:fc:f5:f7:74:98:fc:e3:16:d4:8c:1a:d6:e9:
d9:13:29:af:d7:f8:9d:51:fa:d7:9b:22:fe:af:a4:
cb:3b:b3:7b:c4:03:8c:a0:be:7e:38:a5:d3:5b:c5:
2b:aa:63:e3:93:a8:2e:b7:bb:80:0e:f7:df:7f:dd:
f7:37:42:8c:ae:63:c4:4d:d0:15:17:b9:7e:51:44:
ad:5f:d1:04:62:4d:97:82:9a:c9:fd:5f:61:0d:02:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6C:2C:89:2F:9A:25:DA:2D:E1:E0:6C:86:AF:28:7B:4A:32:E4:66
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/IWwsiS-aJdot4eBshq8oe0oy5GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.13.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bb:e4:ff:37:3a:a3:b2:c8:b6:3f:c7:1a:ea:60:69:b8:83:
d0:f7:b6:13:b3:97:be:37:5e:7c:e5:3a:dc:ab:47:0b:82:2b:
a3:9b:50:ae:ce:e8:b2:14:bd:f2:79:52:65:c6:07:fa:f2:55:
c0:48:a3:84:29:55:71:fb:6f:40:ce:a7:b8:0d:a5:9f:93:a2:
12:93:5b:4e:eb:10:15:52:22:cb:da:a8:73:1a:cc:b7:d8:fd:
46:e0:07:25:58:7a:b1:bd:9f:87:ae:68:1b:6f:ba:ed:5c:f5:
f4:b0:8c:5f:cb:13:ac:29:fa:e7:51:e1:04:8e:8d:2e:43:76:
eb:2a:10:7f:bf:3c:37:d8:cb:de:15:fa:b4:4c:9d:73:9f:1f:
be:59:e0:a6:4a:fc:c0:09:b9:78:1f:d6:ad:49:80:34:94:f3:
c3:37:0f:6c:fa:bd:2c:81:6d:f6:17:d0:16:08:08:56:13:cb:
31:55:d7:67:7d:38:93:44:d9:b4:6f:d6:69:42:6b:92:4a:c7:
ff:33:57:97:8e:1b:c3:2d:0c:f9:1e:8e:3a:c6:60:1f:e3:ce:
67:18:10:30:14:74:bd:28:29:d3:a3:9f:14:bd:ae:a2:e4:b9:
5e:9a:77:f1:b1:b0:7f:45:81:50:8e:5e:32:30:8a:7e:0b:f4:
fb:f7:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:57 2025 by rpki-client