Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/2bwYWh6uZYKfwlmW05s_NYB6ZW8.roa
File: 2bwYWh6uZYKfwlmW05s_NYB6ZW8.roa (raw, json)
Hash identifier: vRTdAWFXAAcbHIzaHyPxO34Cz51dJbQ6x6k6WB3gxx8=
Subject key identifier: D9:BC:18:5A:1E:AE:65:82:9F:C2:59:96:D3:9B:3F:35:80:7A:65:6F
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 01856C53F7CA5E141AFE21B9095DF8B1E7F9
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/2bwYWh6uZYKfwlmW05s_NYB6ZW8.roa
Signing time: Sun 01 Jan 2023 07:55:20 +0000
ROA not before: Sun 01 Jan 2023 07:55:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30893
IP address blocks: 185.84.241.0/24 maxlen: 24
185.9.166.0/23 maxlen: 23
2a03:4bc0:2000::/48 maxlen: 48
2a03:4bc0:2100::/48 maxlen: 48
2a03:4bc0:2200::/48 maxlen: 48
2a03:4bc0:2900::/48 maxlen: 48
2a03:4bc0:2300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f7:ca:5e:14:1a:fe:21:b9:09:5d:f8:b1:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 1 07:55:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9bc185a1eae65829fc25996d39b3f35807a656f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:7f:71:a9:d9:47:df:f3:13:d5:9d:ff:46:
73:6c:ca:75:e4:ce:37:ed:59:0a:f5:04:11:2e:b3:
7d:47:0f:1a:2c:ef:8d:20:c0:c7:66:8b:a4:69:31:
ae:e6:f6:e4:2d:6c:05:06:d0:78:42:9e:47:9e:8e:
22:0e:f0:69:bd:b4:b3:51:ad:35:a8:67:50:df:44:
f3:b7:c0:cf:8f:61:ae:f1:d9:ee:df:3e:58:a7:ad:
d2:86:8d:bc:6e:a6:54:cd:01:e7:00:e0:2b:88:df:
a3:53:85:07:a7:26:a8:61:c5:6e:85:b6:5c:1b:6e:
1a:a4:e2:72:df:2f:9b:cb:f2:33:52:54:12:1f:6b:
2a:28:86:fd:b6:13:f2:90:ec:79:5f:6b:18:c7:d4:
ac:12:0c:2f:d2:aa:ad:82:4f:37:a9:71:47:44:bc:
02:6d:d8:ab:a7:8b:19:5e:8e:1f:be:40:40:68:32:
9d:bb:00:0e:29:a3:6e:cf:14:a3:b9:af:a2:a5:d8:
5b:53:13:91:ed:e2:86:5e:00:aa:7f:a0:59:d9:26:
d1:c7:f3:03:4d:3c:76:23:24:a8:4c:ad:50:11:a2:
32:e9:3c:79:80:1d:6d:df:79:7d:2c:30:f5:23:6d:
95:70:8a:14:cc:e0:ae:55:c7:fc:c4:75:d1:db:0d:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BC:18:5A:1E:AE:65:82:9F:C2:59:96:D3:9B:3F:35:80:7A:65:6F
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/2bwYWh6uZYKfwlmW05s_NYB6ZW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.166.0/23
185.84.241.0/24
IPv6:
2a03:4bc0:2000::/48
2a03:4bc0:2100::/48
2a03:4bc0:2200::/48
2a03:4bc0:2300::/48
2a03:4bc0:2900::/48
Signature Algorithm: sha256WithRSAEncryption
17:3e:5f:40:bf:f9:c3:99:59:10:01:16:61:14:7c:75:80:3f:
25:0c:f3:8e:85:99:7c:f6:3f:8d:c0:84:f6:a1:63:17:c0:f7:
34:60:a2:d8:0a:c8:a4:99:17:68:2f:ed:c7:8e:46:14:26:dd:
0c:c5:1b:46:f9:07:2e:4a:d5:f0:2d:b5:82:fe:3c:2e:f6:f5:
37:c3:a2:f9:5d:0d:0d:29:d8:77:79:63:81:2e:b4:d6:e1:d1:
07:87:ab:64:f2:8b:d2:3e:3a:34:6d:60:76:4a:d2:9a:0b:96:
3e:20:87:1d:e0:99:24:dc:34:f8:ab:72:fd:4c:79:55:cc:42:
65:6f:72:1d:e7:c7:a9:d3:ed:0d:c7:3a:e9:7f:40:46:cc:9b:
e6:93:77:dd:82:90:ea:3c:20:0d:9a:39:8a:90:70:53:6e:60:
19:5f:b2:50:cc:d8:fa:0c:87:7c:c1:bc:66:35:8e:62:44:32:
2b:3b:dc:e3:9e:ad:ff:10:9c:70:9c:b1:3f:2a:4b:43:d4:3b:
6c:7e:55:a5:98:3a:d5:9f:67:90:b4:15:5f:c5:88:f5:3b:7f:
48:6a:af:7d:c0:f4:2a:18:0e:c6:58:8e:7f:55:2b:5a:a4:20:
6a:1d:19:3e:88:24:a5:3f:f0:eb:0f:7f:96:2c:5d:39:38:4d:
1f:84:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:34:56 2025 by rpki-client