Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bp9itvd4xpX6vi30qXgEwi5j_Uo.roa
File: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (raw, json)
Hash identifier: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=
Subject key identifier: 6E:9F:62:B6:F7:78:C6:95:FA:BE:2D:F4:A9:78:04:C2:2E:63:FD:4A
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427473901FFE4E7AF6EEDDBCCF80B8BC5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bp9itvd4xpX6vi30qXgEwi5j_Uo.roa
Signing time: Thu 02 Jan 2025 13:49:26 +0000
ROA not before: Thu 02 Jan 2025 13:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213722
IP address blocks: 185.254.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:39:01:ff:e4:e7:af:6e:ed:db:cc:f8:0b:8b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e9f62b6f778c695fabe2df4a97804c22e63fd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:59:12:7b:eb:fd:ca:a9:58:ba:74:b2:b0:
4f:10:1e:d3:ba:ec:40:62:70:7a:77:71:4d:51:c3:
9a:aa:da:94:67:e2:a2:6d:5c:fe:8a:1b:9a:d3:31:
fc:44:a9:d4:c8:11:59:60:0c:83:9b:31:41:72:9a:
6a:8d:98:c4:fe:62:d8:4a:3f:e7:72:d7:61:cd:41:
75:bc:54:6e:f3:77:56:7e:f4:b2:a7:6f:38:1b:39:
ec:25:e1:f8:d9:4b:e3:95:ca:ae:cd:77:3d:08:6c:
64:70:0f:10:05:e6:ac:d9:17:43:f9:85:91:2c:26:
65:14:54:7d:d9:15:44:fd:67:80:69:92:de:a6:d2:
70:c5:5e:a4:74:e2:f3:db:27:6d:c9:01:8c:8e:e1:
05:b3:18:81:3f:62:92:7c:3e:d2:79:40:2d:2d:9e:
3a:2a:74:cf:6e:a5:d8:ea:6a:e2:d7:53:6c:30:a0:
30:ac:4f:dc:57:8e:9d:40:54:71:e4:28:92:e8:a4:
cf:14:dc:c8:cd:83:04:ac:e5:1a:b6:01:89:2d:b4:
20:b0:3e:68:76:e3:05:34:c4:25:15:c0:f2:c4:81:
bb:6a:72:66:64:3d:10:d8:bf:da:43:1e:92:e9:87:
0e:07:70:b3:cf:2d:e5:96:80:48:f6:7c:ef:77:68:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9F:62:B6:F7:78:C6:95:FA:BE:2D:F4:A9:78:04:C2:2E:63:FD:4A
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bp9itvd4xpX6vi30qXgEwi5j_Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ff:6d:15:31:e0:3b:47:cc:6a:0f:29:88:82:3f:44:df:f1:
c8:cd:e5:9c:73:74:38:f7:eb:b6:ba:1e:1f:01:24:6b:0b:00:
3b:5d:2d:b8:74:94:3c:44:18:f1:2d:0a:8b:02:0a:b6:ef:16:
92:92:b1:65:be:ad:e2:a1:0e:cc:95:c4:01:91:83:fc:27:34:
e2:77:5f:7c:53:0b:52:d6:97:77:5f:8e:45:00:5d:87:8c:c5:
f5:f9:02:cb:67:d3:96:80:1a:39:df:b4:d6:57:d6:17:f3:7d:
42:3f:0d:0f:d3:27:a4:b8:09:0d:6f:4a:1f:77:33:1f:52:53:
f3:5f:55:a4:94:8c:3d:95:23:75:eb:89:78:0c:74:e5:b3:17:
6e:26:11:4d:ef:a4:92:38:0c:a9:7b:68:0b:4e:c5:df:7c:79:
21:ca:c4:58:91:5f:73:8c:f3:60:22:5e:bc:6c:cd:64:6d:2a:
2f:30:eb:4a:65:e7:4e:0e:35:19:23:7a:e6:57:2a:51:a5:81:
ee:51:24:4a:18:77:77:bb:fc:cf:cb:52:9d:ed:52:4c:e6:82:
3d:e1:42:d8:8f:88:41:e0:a6:d6:6d:52:4d:c3:8a:76:05:c9:
dd:0d:39:3f:ff:83:ca:50:f5:dc:8f:d4:bd:69:a1:77:c2:4f:
36:ec:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:02:18 2025 by rpki-client