Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/bTDx6BY2_bieAYAIiAFgdyKIF9k.roa
File: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (raw, json)
Hash identifier: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=
Subject key identifier: 6D:30:F1:E8:16:36:FD:B8:9E:01:80:08:88:01:60:77:22:88:17:D9
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 01941FFA3719254E3119745CA60E0E371351
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/bTDx6BY2_bieAYAIiAFgdyKIF9k.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 185.226.160.0/24 maxlen: 24
185.226.161.0/24 maxlen: 24
185.226.162.0/24 maxlen: 24
185.226.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:19:25:4e:31:19:74:5c:a6:0e:0e:37:13:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d30f1e81636fdb89e01800888016077228817d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:ff:e0:03:5e:35:74:36:a1:0e:76:80:c9:
86:9e:19:52:ba:fe:fe:a0:fd:55:e6:42:0a:a1:9d:
fa:1b:8c:4f:6a:b1:9d:6d:5e:e2:6e:0b:91:41:a2:
6c:2d:6e:f7:f8:03:58:a2:55:66:c7:c4:7f:9d:42:
fe:43:76:5b:ba:a2:34:41:f8:fa:bb:22:52:46:7f:
34:16:8e:d6:da:2e:fe:73:e3:27:60:09:5b:26:b4:
1c:e1:4f:34:7f:81:87:ed:b0:66:38:a1:eb:6d:49:
5f:56:fc:f2:aa:61:ec:e3:34:28:00:b5:ef:d6:13:
a9:c9:6a:f9:06:6a:8c:81:9b:5b:86:56:74:ae:d7:
74:21:4e:58:ab:95:f7:06:4f:02:01:98:11:02:a5:
e8:2f:8f:da:48:4e:36:62:8b:d2:69:80:a6:23:41:
84:21:ab:f3:f7:c7:55:68:a1:b8:12:08:1d:ad:be:
fc:2e:01:91:1c:78:7f:af:0b:be:e5:23:48:50:aa:
32:80:58:b6:29:81:4f:e3:77:77:97:96:37:44:37:
fa:99:0b:90:38:ad:d6:d9:dc:f1:f3:6c:ef:3f:68:
93:58:33:5c:76:74:c2:b4:a2:57:c8:41:be:05:ab:
c1:2b:0c:6b:75:c1:ff:64:bf:2b:33:67:fa:4a:f8:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:30:F1:E8:16:36:FD:B8:9E:01:80:08:88:01:60:77:22:88:17:D9
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/bTDx6BY2_bieAYAIiAFgdyKIF9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/22
Signature Algorithm: sha256WithRSAEncryption
14:f7:97:0f:84:48:5a:3c:3b:c4:c5:63:3d:ef:18:39:2a:b0:
98:ea:81:01:ee:8a:ad:f2:cd:90:26:89:46:e0:42:b0:14:6b:
23:57:71:fc:b7:97:21:43:2c:81:f3:15:c2:8d:f8:17:a1:94:
d3:a7:c5:89:08:e7:6e:aa:51:8a:ea:d9:6a:79:95:c7:b3:f9:
1e:f1:93:73:33:f1:f6:2b:e8:70:dd:27:66:f6:5f:75:9d:13:
10:02:42:72:bc:27:2e:83:4a:7c:fc:30:8a:d5:8b:19:e9:13:
97:d0:0f:7a:64:e3:32:21:2f:4d:67:28:ed:df:dc:11:62:c5:
54:c0:76:4e:2d:6b:a1:24:73:1a:9d:6a:c4:37:3b:15:36:80:
70:1c:b3:f2:ab:d5:c8:ac:58:37:86:3e:23:9d:da:7a:95:cf:
96:62:7e:ff:d2:be:06:9b:34:6a:fa:9c:10:cb:b8:ca:e9:95:
b0:35:9c:a8:e3:27:77:61:dd:f5:45:20:65:87:4d:23:79:06:
43:55:dd:3c:2c:16:b5:4a:84:99:dc:10:66:ca:41:b5:d8:9f:
18:15:94:9d:72:39:04:1c:71:cc:54:ef:0f:d6:ab:ae:e4:ed:
d4:71:f3:eb:7b:31:93:32:6a:b5:6f:d4:1d:19:0c:98:3a:98:
4e:cb:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:12:57 2025 by rpki-client