Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa
File: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (raw, json)
Hash identifier: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=
Subject key identifier: 6C:85:AF:B2:05:78:4E:B0:4F:EE:9C:39:3B:5B:B0:8F:87:C6:B1:94
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0194B11D2BB9E1FDA2D40448D211800EB530
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa
Signing time: Wed 29 Jan 2025 08:11:06 +0000
ROA not before: Wed 29 Jan 2025 08:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 185.51.134.0/24 maxlen: 32
2001:1548:206::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:1d:2b:b9:e1:fd:a2:d4:04:48:d2:11:80:0e:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jan 29 08:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c85afb205784eb04fee9c393b5bb08f87c6b194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:79:7f:05:5b:80:e1:97:0d:a9:b2:78:2c:
cb:61:f1:e3:a3:06:b3:bb:ee:f5:db:81:1e:00:2e:
b5:f2:e1:63:b4:7d:2c:a5:ba:7b:96:de:4a:ed:43:
dc:ed:30:f8:80:09:74:b5:a6:e9:a0:90:c6:d3:7c:
f6:67:d9:eb:c1:49:0a:26:da:39:f4:88:5b:9f:c2:
29:85:15:06:32:ff:b4:83:e4:ab:b2:aa:6a:af:b6:
e2:c7:6b:f4:b4:c7:b4:91:48:60:b6:e5:17:e5:51:
35:cb:9d:ac:3a:17:33:7e:56:93:af:ba:e4:8b:b0:
26:24:66:ce:c1:c1:72:00:88:9e:5c:72:60:bc:ae:
0e:01:b9:de:7f:3c:ff:fd:ec:30:30:4d:40:b4:f8:
c4:bf:5e:6b:aa:96:e9:84:12:8f:07:6e:83:7e:ff:
89:84:14:e3:6a:6f:d3:74:ad:5c:68:c3:d2:76:55:
0a:f8:f3:7d:d6:aa:04:50:38:5f:23:ed:ff:40:6c:
68:cc:06:50:00:e6:1b:64:00:69:2e:c4:ba:54:87:
d2:93:26:28:a8:3e:f9:53:18:6c:06:28:17:e8:ad:
61:96:bd:04:86:61:1e:9c:8b:8e:e7:00:10:ee:bc:
bd:35:90:78:91:fc:ed:12:b2:eb:90:3a:a2:69:fa:
63:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:85:AF:B2:05:78:4E:B0:4F:EE:9C:39:3B:5B:B0:8F:87:C6:B1:94
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.134.0/24
IPv6:
2001:1548:206::/48
Signature Algorithm: sha256WithRSAEncryption
38:4e:1c:6d:9d:cf:c4:42:29:5f:aa:d9:87:a4:24:db:47:60:
06:3f:4a:12:b9:1c:cc:1a:e8:5d:ed:7c:24:22:0f:fc:bb:50:
a3:2c:9f:3f:32:71:34:a5:ad:b5:50:59:93:c8:08:dd:34:c1:
d1:e3:59:25:db:4d:e6:f1:4c:c6:51:d1:b2:54:1d:7d:2c:bd:
06:ee:3f:3b:13:54:df:b9:62:9c:ff:87:c3:21:74:b9:61:de:
bd:ab:1a:d7:fe:0c:86:ce:50:d3:d2:a4:63:93:71:e5:31:4d:
8e:1f:99:86:bc:4e:2d:d7:bf:e0:a6:57:fa:71:1e:25:e1:9b:
ea:97:97:38:ff:19:ae:a8:fb:57:11:ea:a3:15:16:77:1b:4c:
05:86:aa:86:f3:40:96:a8:ca:b6:ae:ea:eb:06:7e:7d:6b:32:
09:23:37:c6:94:89:a8:ad:a2:ea:74:39:7b:5f:f6:15:ae:c7:
6a:43:e0:0e:18:e3:47:d4:01:9f:66:fd:f0:3c:5c:ff:44:4a:
15:08:ca:7f:45:37:28:4f:8c:3c:49:ea:66:27:e7:d6:12:4b:
bf:46:c5:3b:c7:a7:fe:3e:46:d0:41:bd:f9:30:e3:ee:c3:66:
2b:e8:84:e9:3d:62:2a:a9:3b:bd:ba:0f:84:d6:35:2d:fb:47:
1b:c0:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:52 2025 by rpki-client