Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa
File: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (raw, json)
Hash identifier: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=
Subject key identifier: 3E:1D:95:CD:F3:E6:3D:9B:44:3F:34:8B:90:EE:E9:CF:38:28:FA:9A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA8FB4C9AED4C307AAE328F0852657
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 185.65.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8f:b4:c9:ae:d4:c3:07:aa:e3:28:f0:85:26:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e1d95cdf3e63d9b443f348b90eee9cf3828fa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:8f:3b:4d:59:a4:f1:cb:1d:a0:39:77:b4:
1e:87:7e:e9:22:0b:00:5f:43:e3:c7:88:22:a3:c2:
79:70:76:01:db:0c:28:2c:d3:ee:2e:c2:38:1d:4a:
e6:bd:6b:ca:62:9f:1d:9c:65:90:f7:c1:d8:d8:7d:
b4:05:60:b9:8e:0c:18:74:8a:5e:7f:a3:17:c5:63:
49:6c:24:59:66:a2:4d:37:ce:c0:96:9e:b1:0a:f7:
6d:ae:75:c0:6b:dd:0b:5d:8a:a5:63:63:e0:e8:24:
ba:f8:b5:49:71:70:9a:25:0c:55:e8:01:cb:fe:50:
ac:f8:5d:4e:ee:f5:e2:40:fd:63:03:ac:3e:e2:e7:
c0:7f:25:ce:57:71:6f:70:01:92:b1:ac:f8:bf:e3:
17:78:02:f4:d5:61:17:ee:2f:3a:f9:d2:ee:2c:16:
e9:29:34:f7:4d:19:ec:74:29:cc:cf:69:d7:44:0c:
66:e5:36:92:75:31:7a:ae:e0:4c:ae:2e:60:a0:9b:
8b:e2:7a:42:c1:e6:4c:4e:0c:f4:50:5d:e2:00:92:
4f:81:86:08:86:fa:f9:4f:bf:18:2a:53:7f:8a:a4:
c3:44:6b:c1:7b:ed:30:94:f4:69:b7:47:8a:2e:5f:
5c:b0:81:8f:ea:c7:88:66:a1:52:dd:02:57:3b:fa:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:95:CD:F3:E6:3D:9B:44:3F:34:8B:90:EE:E9:CF:38:28:FA:9A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.63.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7b:5b:96:c8:5e:df:3e:a7:c1:55:26:06:a8:67:15:00:a5:
df:f4:d1:d9:d5:a7:01:f5:6e:d2:59:15:c6:55:5d:3a:9e:65:
46:32:52:b6:77:2e:46:d4:8b:cb:a3:3c:a7:65:3d:06:27:ca:
ce:e9:cf:05:42:09:d9:11:0f:19:1c:30:32:d8:70:ca:58:0a:
b0:27:ae:24:f9:3c:98:c3:d6:2b:39:ba:c4:f0:09:a2:9a:f0:
ea:8e:e6:88:ec:27:f8:0a:32:0c:2a:b9:47:89:d9:41:3f:86:
35:b2:a4:a3:54:15:73:e7:d7:44:f3:1f:ae:a9:4b:c7:bf:a1:
c1:80:de:f1:38:9d:8f:40:93:01:a0:fa:a3:18:91:b3:7a:24:
bf:a4:6a:a4:48:b6:d2:63:68:a8:b5:cf:e3:21:3d:4c:d1:2b:
8e:c1:90:1c:ad:fe:54:d0:fb:4a:0c:27:ea:4a:0b:4d:ab:79:
c9:87:fe:eb:04:e7:b4:42:6c:16:17:9e:3c:d6:3e:ed:b1:9c:
d2:43:25:b6:59:02:7a:47:bb:c7:df:50:d5:84:62:bd:b9:9f:
cb:18:5b:96:c9:be:06:81:00:6a:56:ba:2a:ee:95:2c:0f:93:
44:23:19:d1:56:a3:6f:16:b4:6a:73:09:41:8e:98:68:a9:6c:
1f:e1:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:05 2025 by rpki-client