Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa
File: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (raw, json)
Hash identifier: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=
Subject key identifier: 35:BE:93:36:1C:7E:B8:2F:08:D4:57:E7:E7:5E:4E:22:F0:4E:41:78
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01956A3BD09E8852CFC5DF727D617A171A44
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa
Signing time: Thu 06 Mar 2025 06:54:19 +0000
ROA not before: Thu 06 Mar 2025 06:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.223.217.0/24 maxlen: 24
185.223.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:3b:d0:9e:88:52:cf:c5:df:72:7d:61:7a:17:1a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Mar 6 06:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35be93361c7eb82f08d457e7e75e4e22f04e4178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:70:8d:3b:be:ae:a0:f3:ba:c7:d7:a5:72:
50:3f:e5:61:90:88:02:e1:e1:8d:99:11:13:f1:69:
48:95:5d:ca:3a:5d:c2:32:da:ca:72:16:38:ba:62:
9b:9d:4f:b4:e1:35:43:95:e9:49:89:61:f8:56:da:
a0:af:cb:0f:fd:41:27:63:17:6b:66:9d:83:ef:2b:
6d:67:1c:47:60:84:ab:83:04:84:ba:db:8a:46:c2:
96:51:92:88:3f:4c:0f:3f:bd:0a:84:71:bd:e4:a0:
76:f3:62:89:12:35:0a:4e:46:08:f3:7b:39:69:36:
f1:82:3e:bb:99:5e:e6:11:ba:95:8c:a6:e9:73:23:
8b:bc:03:b4:c4:7c:aa:b4:cf:8a:ab:0c:2b:49:cf:
2d:9a:51:d7:5e:4d:53:53:b1:34:a4:11:5b:34:f7:
cb:1f:85:f0:73:22:8b:1c:f3:da:9d:c8:3d:75:79:
ab:2d:8d:5d:9a:06:c4:b2:95:3b:43:9f:d3:1e:67:
dc:87:5a:ff:62:a8:13:50:f5:48:57:f7:06:1a:34:
c0:ae:87:d6:ed:bb:ab:8e:2f:7e:7f:d6:6d:54:d9:
92:ea:09:a2:03:9e:a7:97:a1:bd:55:90:2c:aa:1c:
2f:f6:21:6b:a8:f5:d1:60:35:de:f6:96:1d:1c:7b:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BE:93:36:1C:7E:B8:2F:08:D4:57:E7:E7:5E:4E:22:F0:4E:41:78
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.217.0-185.223.218.255
Signature Algorithm: sha256WithRSAEncryption
86:64:3f:b7:51:01:8b:9d:48:86:04:5b:f0:95:31:a6:bb:24:
f9:73:b4:df:d5:47:eb:dc:62:4e:ee:f1:1f:65:63:2f:cb:c4:
6e:13:cf:b1:fd:66:6e:07:bd:aa:1b:2c:30:ff:08:a3:87:9d:
ce:0c:55:39:06:a9:73:81:9f:63:ec:2c:13:4e:73:71:86:6c:
85:48:9e:73:2d:8d:0f:57:59:09:aa:84:30:57:ad:ac:97:63:
d7:8e:d6:6c:ef:86:9b:2c:43:65:a9:3a:7f:fb:b0:92:79:06:
6f:c4:57:16:33:dd:f7:c9:68:6b:0e:c0:5b:29:95:3e:48:2c:
2b:b3:05:e8:56:b9:d8:1d:28:27:d8:f7:13:90:14:43:ae:f1:
22:16:c4:2e:01:a0:40:19:11:b2:ad:6c:a3:a7:90:86:dc:0a:
b3:7d:93:88:12:1f:80:31:65:67:87:09:ac:95:89:05:2a:42:
fd:9f:c5:83:88:ee:e8:88:78:5b:25:84:82:de:6a:ed:57:34:
ff:8c:91:84:29:91:3d:a5:39:bf:e0:12:aa:1d:ba:0f:27:32:
5a:44:0a:b6:a5:67:fe:94:b6:64:4e:c1:12:af:a0:d6:b5:46:
d2:42:ae:5a:16:cc:04:e4:04:a0:2e:c5:66:74:55:7c:e5:fa:
76:fb:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:59 2025 by rpki-client