Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/s9L9BNwHKJhVemHf55wRw3Mdhbk.roa
File: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (raw, json)
Hash identifier: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=
Subject key identifier: B3:D2:FD:04:DC:07:28:98:55:7A:61:DF:E7:9C:11:C3:73:1D:85:B9
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 019421B1F59361C573BAF8E6DCC4944937D7
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/s9L9BNwHKJhVemHf55wRw3Mdhbk.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57588
IP address blocks: 185.65.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f5:93:61:c5:73:ba:f8:e6:dc:c4:94:49:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3d2fd04dc072898557a61dfe79c11c3731d85b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:9e:88:c4:09:3c:33:d7:db:d8:78:7b:b0:
0f:89:36:56:de:9a:8d:b0:6b:8c:aa:64:1c:cb:81:
12:01:62:a6:34:ea:90:d1:53:55:63:a6:dc:ae:84:
62:8d:b7:80:dc:4d:d5:42:6b:87:2c:71:dd:5d:35:
05:ae:fd:b8:d8:e9:a5:61:a0:7a:1e:7b:0d:9e:da:
94:62:59:05:b6:ad:f0:8d:bf:47:db:0a:0e:d5:a2:
50:8e:de:3d:ca:b3:7e:91:da:18:a3:53:ea:f0:68:
60:22:a7:ce:66:a8:da:45:85:c5:ba:3c:1c:11:d6:
f2:6a:33:eb:0f:de:bc:f1:bb:53:cd:32:61:34:4a:
df:eb:e9:f3:38:cb:37:9c:e0:be:4a:67:27:73:47:
1c:9d:e9:d9:50:56:47:b8:06:84:f0:b8:58:b0:22:
b2:9b:be:21:78:30:0d:8b:25:ec:57:e7:cb:51:be:
ef:ac:57:1d:47:80:e1:e0:ba:52:95:9b:e1:08:27:
c8:ca:bc:bc:ac:57:13:2d:98:41:57:fe:e8:86:d7:
6f:20:aa:dd:8b:ab:93:00:a0:23:e6:7e:e4:02:6e:
2a:82:aa:f4:fd:6c:7b:4b:a2:12:5f:6c:fb:4c:1c:
5f:9c:2c:3d:2d:75:e0:39:61:1f:48:9b:b3:02:41:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:FD:04:DC:07:28:98:55:7A:61:DF:E7:9C:11:C3:73:1D:85:B9
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/s9L9BNwHKJhVemHf55wRw3Mdhbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0e:dd:27:3e:ae:e0:d8:85:06:cf:e8:c3:96:87:ca:f3:26:
29:a3:da:d6:86:9a:89:b7:f9:11:1d:11:71:07:6d:3b:ef:61:
ba:3c:d5:9e:ec:b5:fe:f7:3c:92:a5:0a:ee:24:3f:22:5e:e6:
80:79:94:1a:c7:19:96:5e:21:81:77:13:12:44:50:ce:c7:ec:
ad:eb:e1:34:26:84:0f:40:7c:67:60:5f:3a:37:11:d6:25:58:
ec:10:18:4a:c3:6a:0c:76:7d:8d:18:83:24:2a:c0:e0:e8:63:
ab:e4:ff:fa:52:42:69:ea:c4:bb:6b:d6:f9:41:68:a5:6f:5a:
5f:13:80:f2:ff:e7:42:7d:2c:60:3f:fb:39:a0:bf:81:ee:f5:
16:be:d3:d8:8d:51:93:3f:8d:45:87:fd:91:02:02:39:a5:32:
2c:29:4f:a3:89:8f:74:df:31:d2:76:c8:43:58:44:2b:d3:08:
34:db:4c:f2:80:a7:44:e3:7d:13:89:ce:ff:e5:d1:be:6e:dd:
b5:4e:61:d3:91:63:89:ad:25:d4:1c:e1:e6:e5:86:65:ef:52:
1e:5e:70:bf:eb:c1:56:5d:91:74:d8:a3:e0:93:87:0e:80:15:
d6:df:6e:9f:3c:bd:d9:7c:4e:1c:a1:e1:5d:9b:b7:fb:fd:a3:
e9:f3:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:12 2025 by rpki-client