Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/bTX62tRbx1Gf91_afHejNDmclKo.roa
File: bTX62tRbx1Gf91_afHejNDmclKo.roa (raw, json)
Hash identifier: Va+985nWQRGZqHpBs1nlUPddfPJ3MCFDNSeVnonBTrc=
Subject key identifier: 6D:35:FA:DA:D4:5B:C7:51:9F:F7:5F:DA:7C:77:A3:34:39:9C:94:AA
Certificate issuer: /CN=3d0665b6676875acf60e01522b9343c040a5ffe1
Certificate serial: 018CC56E2A05394A1D633E54C9D359D0E22B
Authority key identifier: 3D:06:65:B6:67:68:75:AC:F6:0E:01:52:2B:93:43:C0:40:A5:FF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/bTX62tRbx1Gf91_afHejNDmclKo.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43309
IP address blocks: 185.234.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2a:05:39:4a:1d:63:3e:54:c9:d3:59:d0:e2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0665b6676875acf60e01522b9343c040a5ffe1
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d35fadad45bc7519ff75fda7c77a334399c94aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:86:61:6a:93:10:a7:03:b2:08:06:66:ef:
e6:96:40:a8:e3:ec:a6:e9:09:f9:9e:53:eb:c4:03:
f0:be:a9:dd:bd:f0:91:b2:35:3d:ff:38:a5:77:37:
ed:1a:78:10:56:01:55:18:d9:c0:e2:34:d0:64:bd:
47:ad:d5:cc:6d:56:60:3f:17:f8:f9:a4:69:50:8e:
d6:22:1c:96:1d:e3:df:6e:78:f0:6f:24:ae:76:fb:
ba:7b:1f:de:4a:40:d7:34:21:25:23:98:a0:d0:32:
02:ec:bd:e8:96:6b:65:e4:b2:8a:04:19:46:dc:3e:
29:c1:c5:33:50:cd:3a:cc:24:12:67:f9:99:3f:28:
97:a6:ea:36:9d:ae:b7:df:14:17:16:01:80:8b:dc:
c7:18:cc:29:cf:0a:81:ff:66:13:79:90:15:10:03:
35:41:db:15:f6:23:96:56:57:57:6e:26:9a:f1:1f:
97:b6:13:67:2d:26:3b:be:21:ca:48:29:21:fd:53:
a3:aa:94:0a:cb:cc:0a:b2:0e:47:c4:1f:1f:f4:34:
a7:a7:b4:58:f3:da:1b:99:b6:18:22:82:4e:17:45:
77:6d:d4:16:2e:27:1c:2e:96:84:20:10:98:f3:9d:
a9:5b:23:54:f3:55:12:e1:ea:07:51:32:f3:7c:ae:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:35:FA:DA:D4:5B:C7:51:9F:F7:5F:DA:7C:77:A3:34:39:9C:94:AA
X509v3 Authority Key Identifier:
keyid:3D:06:65:B6:67:68:75:AC:F6:0E:01:52:2B:93:43:C0:40:A5:FF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/bTX62tRbx1Gf91_afHejNDmclKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.252.0/24
Signature Algorithm: sha256WithRSAEncryption
01:78:15:30:49:c7:8e:34:4a:f7:97:64:72:a8:88:8f:26:e6:
00:06:69:18:6e:e0:40:3b:e8:cd:29:8d:04:fe:1e:4c:8d:73:
41:51:34:c8:f4:9a:cf:f3:9f:8f:a9:2a:5f:5c:78:0d:76:2e:
6a:e5:06:bd:1f:cf:08:e2:87:1f:f5:4d:28:69:83:8b:e8:c7:
d9:75:b1:a3:ec:4c:32:31:7e:01:1f:9c:0a:1a:a4:60:df:d3:
7d:1d:2e:1c:3f:a6:2f:aa:ac:bc:b7:e6:5e:5d:7c:c5:11:e0:
4c:96:0a:02:ad:ae:ff:9d:70:61:09:6d:e3:a7:f8:d9:45:91:
f1:11:dd:05:3c:14:e7:28:0b:05:e9:ab:d0:3f:22:02:94:e9:
78:c5:fa:61:69:8c:46:6c:15:7f:51:cd:fe:8d:c9:28:6c:58:
ad:11:75:a2:06:a8:77:c7:4f:d5:7f:f1:5f:3c:41:4f:e7:d8:
c4:f5:16:12:94:f2:92:92:c7:78:3a:84:0e:5b:7b:2a:11:b5:
22:be:1a:10:8f:ae:b7:b8:12:ba:8a:10:e4:55:29:52:11:1c:
70:a0:cf:2f:a0:5b:bf:c0:e3:40:0b:cc:7f:4f:22:23:97:ff:
39:c8:17:f9:79:ee:bc:d0:a9:b0:fd:6f:7e:ab:bf:68:ca:7b:
8f:64:1d:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbioFOUodYz5UydNZ0OIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDY2NWI2Njc2ODc1YWNmNjBlMDE1MjJiOTM0M2MwNDBh
NWZmZTEwHhcNMjQwMTAxMTQyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDM1ZmFkYWQ0NWJjNzUxOWZmNzVmZGE3Yzc3YTMzNDM5OWM5NGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2SGYWqTEKcDsggGZu/mlkCo4+ym
6Qn5nlPrxAPwvqndvfCRsjU9/zildzftGngQVgFVGNnA4jTQZL1HrdXMbVZgPxf4
+aRpUI7WIhyWHePfbnjwbySudvu6ex/eSkDXNCElI5ig0DIC7L3olmtl5LKKBBlG
3D4pwcUzUM06zCQSZ/mZPyiXpuo2na633xQXFgGAi9zHGMwpzwqB/2YTeZAVEAM1
QdsV9iOWVldXbiaa8R+XthNnLSY7viHKSCkh/VOjqpQKy8wKsg5HxB8f9DSnp7RY
89obmbYYIoJOF0V3bdQWLiccLpaEIBCY852pWyNU81US4eoHUTLzfK7hRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG01+trUW8dRn/df2nx3ozQ5nJSqMB8GA1UdIwQY
MBaAFD0GZbZnaHWs9g4BUiuTQ8BApf/hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFabHRtZG9kYXoyRGdGU0s1TkR3RUNsXy1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lMzE3MGUtNzE1Yy00YzQwLWFjM2Qt
OWFlMGZlYWY5OTM5LzEvYlRYNjJ0UmJ4MUdmOTFfYWZIZWpORG1jbEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lMzE3MGUtNzE1Yy00YzQwLWFjM2QtOWFlMGZlYWY5OTM5
LzEvUFFabHRtZG9kYXoyRGdGU0s1TkR3RUNsXy1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuer8MA0G
CSqGSIb3DQEBCwUAA4IBAQABeBUwSceONEr3l2RyqIiPJuYABmkYbuBAO+jNKY0E
/h5MjXNBUTTI9JrP85+PqSpfXHgNdi5q5Qa9H88I4ocf9U0oaYOL6MfZdbGj7Ewy
MX4BH5wKGqRg39N9HS4cP6Yvqqy8t+ZeXXzFEeBMlgoCra7/nXBhCW3jp/jZRZHx
Ed0FPBTnKAsF6avQPyIClOl4xfphaYxGbBV/Uc3+jckobFitEXWiBqh3x0/Vf/Ff
PEFP59jE9RYSlPKSksd4OoQOW3sqEbUivhoQj663uBK6ihDkVSlSERxwoM8voFu/
wONAC8x/TyIjl/85yBf5ee680Kmw/W9+q79oynuPZB1c
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:13 2025 by rpki-client