Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/6O3mGfQdkxk3pNZnhn2v_SudIJk.roa
File: 6O3mGfQdkxk3pNZnhn2v_SudIJk.roa (raw, json)
Hash identifier: wnpJuyItibM09bhYmpcnxUtBt0pZ5yqi3ijea2io2f4=
Subject key identifier: E8:ED:E6:19:F4:1D:93:19:37:A4:D6:67:86:7D:AF:FD:2B:9D:20:99
Certificate issuer: /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial: 019427481425DDFFA904AD37DD270CA38AF8
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/6O3mGfQdkxk3pNZnhn2v_SudIJk.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 185.228.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:14:25:dd:ff:a9:04:ad:37:dd:27:0c:a3:8a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ede619f41d931937a4d667867daffd2b9d2099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:05:72:4f:7c:06:ad:32:1e:24:01:61:c9:
d8:fe:02:f7:08:23:00:0b:72:3c:78:a5:70:6e:63:
8c:61:e6:06:60:7e:a7:2b:42:63:b6:8c:13:59:53:
03:7d:51:82:ab:0a:3c:d8:47:7d:57:a5:df:89:98:
74:1a:b0:09:09:2a:b2:54:da:a6:d4:d0:f8:97:a0:
38:db:38:41:33:12:a4:9b:ab:a4:1f:51:b7:cc:93:
1e:d9:88:42:bd:35:e1:cf:11:1f:e2:af:1c:b6:39:
12:3b:9f:f4:c0:72:9d:4b:3d:87:07:c7:b9:52:90:
71:14:20:fa:52:e0:9a:d8:f5:d5:69:88:4c:fd:68:
d2:fa:61:96:47:05:10:58:4b:96:15:b7:07:7a:ca:
00:2c:e5:e1:41:5b:31:ac:35:cf:7c:31:f2:4e:d7:
6b:80:b2:60:6b:b7:9e:a3:02:eb:e9:d7:2b:81:e9:
dd:ce:1c:51:42:31:57:a2:04:b4:fe:c8:b8:b2:ea:
3d:dc:ab:79:6e:38:54:31:22:34:f6:c0:b7:b5:e9:
bd:3c:c2:fe:79:27:a8:d0:d4:51:09:13:58:22:bf:
0a:53:b9:2b:32:7b:f9:77:18:6d:33:29:4e:74:5f:
09:11:0d:a0:46:07:79:68:ae:89:f7:9d:7d:86:66:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:E6:19:F4:1D:93:19:37:A4:D6:67:86:7D:AF:FD:2B:9D:20:99
X509v3 Authority Key Identifier:
keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/6O3mGfQdkxk3pNZnhn2v_SudIJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.249.0/24
Signature Algorithm: sha256WithRSAEncryption
64:47:49:67:d2:2c:1f:09:78:cc:3f:24:7f:86:1f:e2:f9:c9:
0e:9c:fe:dd:ee:8d:ea:ca:68:de:77:cd:2b:00:af:fe:44:c7:
6a:2d:55:50:ec:7b:be:97:0b:b9:86:e3:d4:eb:2f:e1:89:13:
c8:81:76:de:75:a8:c1:70:3d:01:0a:e1:6d:43:de:bf:b1:5a:
1d:43:7f:d8:f9:f7:c9:34:26:9e:66:04:a7:fe:ce:0b:ef:72:
e4:b3:ab:af:c6:20:9d:57:2e:5d:81:8b:26:20:f2:56:ab:11:
bb:a5:8a:45:39:6a:a4:92:6c:24:c2:e2:1c:22:e2:fd:60:64:
c1:80:e4:38:42:25:fb:94:07:05:b2:37:ea:3c:8a:3a:66:36:
2f:9d:75:cd:74:43:cc:a9:c8:be:4c:1e:2e:d4:e6:02:be:f8:
cc:8a:8a:4a:58:69:5f:9b:24:2a:4e:29:6d:aa:8b:fa:8b:96:
ff:34:10:59:01:cd:c0:23:44:fe:6b:b3:39:14:1d:a0:ce:56:
66:28:ed:fe:48:df:db:75:ee:22:c4:4c:5e:c3:d9:cb:d5:16:
2f:a0:39:bb:a4:a1:6d:f4:13:49:09:f3:f7:6e:fa:58:64:02:
60:29:15:98:3a:d4:b7:19:5c:c4:9d:33:92:7a:ad:bf:86:d4:
e0:7f:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:22:50 2025 by rpki-client