Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa
File: b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa (raw, json)
Hash identifier: kqwOewNHVrTW/kfVyBv01vxgKvixRF0yFyDls6uT/Uo=
Subject key identifier: 6F:72:3D:F0:20:7E:F1:C7:B7:55:CC:24:0F:F0:A1:EA:F1:61:41:71
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 01942520CBB1253A39A014D07051E8B8175F
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa
Signing time: Thu 02 Jan 2025 03:48:13 +0000
ROA not before: Thu 02 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3549
IP address blocks: 185.64.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:cb:b1:25:3a:39:a0:14:d0:70:51:e8:b8:17:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Jan 2 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f723df0207ef1c7b755cc240ff0a1eaf1614171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:39:44:6c:b0:26:72:02:ce:2d:1c:89:ab:
fa:ae:13:b4:bc:53:77:b0:dc:b5:8e:cc:da:7c:a0:
36:df:d4:3f:6f:cb:ba:78:bb:ce:7f:9c:b9:9e:10:
ab:77:8f:2a:47:7f:01:e9:ed:14:9a:30:1e:af:c0:
8e:3b:67:29:07:48:9f:7e:f9:cb:ff:12:04:29:07:
f0:59:e3:06:fb:b8:62:65:f1:38:03:c3:6d:36:e5:
50:85:51:86:69:7e:39:fa:f7:37:b4:b9:d9:87:5a:
10:08:22:a3:73:a0:bf:2e:c0:65:be:6c:ef:84:a6:
f3:45:2a:fa:8f:4c:f0:41:f8:bf:25:cd:fd:0a:ff:
cf:5d:0c:9e:8c:69:71:70:91:ae:65:41:d5:0c:5f:
d0:44:92:f5:9b:67:79:aa:15:ab:ec:3f:e6:cb:10:
d2:c1:83:24:7b:f2:8a:62:89:e7:85:86:42:84:a9:
47:1d:48:5c:3b:de:72:b5:2d:f2:6d:da:03:df:06:
6a:ad:78:4c:08:d0:17:4d:27:61:92:92:07:50:0d:
c3:d8:11:1a:1e:d0:ee:d4:2d:78:27:d0:ba:d5:a4:
6e:21:57:d4:83:57:d8:31:ed:94:f5:a3:78:63:9c:
e0:c7:fa:ff:36:57:17:e0:f9:24:8a:ae:64:18:e3:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:72:3D:F0:20:7E:F1:C7:B7:55:CC:24:0F:F0:A1:EA:F1:61:41:71
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:e3:b6:2d:de:2e:8e:61:88:72:80:e3:fe:ad:97:40:bc:2c:
26:41:e5:12:18:c9:89:8f:58:54:48:25:80:5c:8e:fa:3c:e3:
67:3e:f1:f0:0c:42:07:42:56:0e:2a:27:8e:a9:15:b1:0a:7b:
b2:66:62:76:27:cb:2b:1c:6c:a5:d9:09:49:eb:ee:4a:bf:7d:
a2:fc:be:f1:98:2e:27:42:59:f7:c5:d4:38:58:31:4d:aa:72:
7f:14:ad:19:48:ff:cc:a6:d9:b9:a8:4a:f9:38:63:81:a7:fd:
41:14:14:02:ce:f3:d3:4f:4a:fa:0c:47:4a:dd:2f:f1:3b:62:
46:70:0e:5f:38:0c:1b:c9:03:91:74:42:53:47:a7:a9:7d:85:
8e:99:b5:cf:97:35:b7:48:e1:a1:8b:2e:5d:16:14:ad:68:f6:
ed:4c:0c:fc:f9:c2:0a:dd:bf:65:86:9d:5d:b9:c2:d7:e6:e1:
cb:38:48:6b:c0:ee:6b:d3:ce:70:8d:94:8a:6f:b6:37:25:8d:
56:ce:20:8f:da:e6:e8:bc:f3:7a:d0:e3:17:30:c8:df:e3:4f:
a6:28:59:ba:d3:44:0c:bb:a9:0f:73:65:06:01:2e:8e:2e:06:
d3:55:ef:d1:d4:10:2a:00:54:46:fd:e6:94:15:40:b7:ce:25:
dc:1c:f6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:31 2025 by rpki-client