Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/6CrjLQVOB2N3TkUqw0V-YY-IlHU.roa
File: 6CrjLQVOB2N3TkUqw0V-YY-IlHU.roa (raw, json)
Hash identifier: SCOOZ1KLuVrjbufXZqJA1FWcy1G4Yn/YYrhKt7GBkNg=
Subject key identifier: E8:2A:E3:2D:05:4E:07:63:77:4E:45:2A:C3:45:7E:61:8F:88:94:75
Certificate issuer: /CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
Certificate serial: 018570F0B9023FE25ADB2F95793AE2BD592F
Authority key identifier: 3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/6CrjLQVOB2N3TkUqw0V-YY-IlHU.roa
Signing time: Mon 02 Jan 2023 05:25:02 +0000
ROA not before: Mon 02 Jan 2023 05:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.252.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b9:02:3f:e2:5a:db:2f:95:79:3a:e2:bd:59:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
Validity
Not Before: Jan 2 05:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e82ae32d054e0763774e452ac3457e618f889475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:f8:de:7c:db:c6:52:2b:cf:b9:90:6f:55:
18:f0:06:02:89:1d:ed:63:26:bf:44:36:4b:4d:9c:
d2:16:55:18:d9:3b:96:1b:c7:cd:4a:9b:2a:6e:5b:
d7:d3:37:19:c2:a6:e1:9a:8a:eb:06:3a:40:c4:c3:
2d:08:73:d8:e1:56:dc:32:22:1b:4a:bb:c0:0f:a6:
09:c0:e8:a6:aa:db:20:e2:17:2e:1f:d5:11:89:9e:
c7:28:1b:c5:0e:09:dd:1f:78:bb:d8:f4:10:67:2d:
0b:e7:5c:36:9e:a1:c2:ab:31:33:a9:db:2f:9c:4c:
ba:eb:25:ab:98:99:5a:09:88:60:03:bd:a3:3b:cf:
65:f5:2d:d0:b5:9c:e1:4d:9c:f0:79:94:06:b9:09:
3a:a1:a9:a5:30:5e:5e:a6:9d:73:15:6c:08:ba:1f:
43:68:9f:f7:c2:69:5f:38:86:80:44:35:8e:6d:36:
d1:8d:a8:75:74:07:c1:26:04:93:9a:fb:4f:1e:38:
72:6f:3b:9a:47:e1:c4:eb:e4:1b:88:b9:9b:00:1c:
d2:74:93:0e:4c:6a:12:46:4d:7c:41:d1:42:89:22:
f4:c9:7b:3e:7c:54:65:0a:44:24:14:f9:b3:f4:b3:
d7:2d:7c:8e:ca:d1:dc:e0:c7:17:ad:2a:c1:c8:e9:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2A:E3:2D:05:4E:07:63:77:4E:45:2A:C3:45:7E:61:8F:88:94:75
X509v3 Authority Key Identifier:
keyid:3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/6CrjLQVOB2N3TkUqw0V-YY-IlHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/P-inMgXXZxDnFT_HFG9qYh7nwtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.213.0/24
Signature Algorithm: sha256WithRSAEncryption
89:45:e5:a4:4a:f7:e0:3d:d5:20:71:86:51:f6:ec:ea:69:d7:
cd:bf:45:41:e9:87:cd:28:da:d9:c5:b9:5e:a9:b4:dd:2b:d3:
8e:3f:ed:0d:0b:a3:08:9f:18:00:a8:fc:59:f4:35:7e:fc:9e:
0c:44:51:b8:78:30:28:bb:77:d3:2f:44:e4:95:36:bb:86:ff:
ae:e9:ba:bf:74:67:f6:16:02:8a:88:cb:af:15:16:fe:d5:6e:
99:c0:f4:4c:51:bc:9c:27:22:3b:9e:13:6c:a8:8d:2a:87:c6:
ef:ae:2d:9f:a8:e1:29:43:6c:a0:65:ee:e2:2d:12:1e:2a:c3:
fb:67:62:e5:e5:97:4e:54:e6:47:fe:73:00:f5:e2:83:1b:b7:
d0:2f:68:03:f5:a2:ae:5f:1f:48:98:60:05:10:5c:c5:75:0f:
93:8b:f2:72:31:68:69:9b:11:ea:ac:f3:82:94:e2:8d:c3:cc:
ac:88:e5:6c:87:69:6d:e4:f0:d8:61:73:71:65:a1:d6:1e:5d:
14:67:0b:cb:32:eb:5b:fe:87:c3:f7:b4:70:a1:7e:21:ce:a6:
a3:b8:ae:cf:49:7d:2b:44:f2:a4:db:6c:d2:08:ba:9c:e7:0e:
ed:38:ac:2c:7e:7d:78:11:86:de:e0:d7:4a:17:43:c8:e1:0d:
2b:43:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:50 2025 by rpki-client