Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/X5RlewC5bmJsU2AA_nG7P3SPzxI.roa
File: X5RlewC5bmJsU2AA_nG7P3SPzxI.roa (raw, json)
Hash identifier: 18DAWZzyQ6VtlL5sHWgvKbknV3HFWhJr4tURlsmGnvY=
Subject key identifier: 5F:94:65:7B:00:B9:6E:62:6C:53:60:00:FE:71:BB:3F:74:8F:CF:12
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 0194266BD51D4C320B6416FD1BFDFA8ACE59
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/X5RlewC5bmJsU2AA_nG7P3SPzxI.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59723
IP address blocks: 185.233.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d5:1d:4c:32:0b:64:16:fd:1b:fd:fa:8a:ce:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f94657b00b96e626c536000fe71bb3f748fcf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:f3:c4:a2:58:b5:99:dc:16:ea:f6:0a:ce:
01:f4:c6:3b:e0:a9:37:ca:ed:d7:6d:be:fe:40:f5:
b9:12:60:a2:fc:36:d7:dc:75:1d:37:76:36:7d:22:
bf:50:85:28:df:5a:6a:61:69:e3:1d:aa:8e:4d:7f:
bd:2b:11:c4:f0:75:af:df:27:53:cd:7f:b6:1f:fb:
62:ac:4a:f1:78:63:b2:4b:f1:40:3d:aa:bf:fb:ee:
56:8e:be:c4:22:85:15:a6:0a:2f:a1:0b:09:13:79:
e5:9e:84:f4:22:ee:21:66:40:38:02:5d:ee:d6:1f:
c7:c3:78:e7:b2:16:03:e4:d0:e9:27:42:0a:a5:db:
10:b6:40:90:b4:32:82:3b:33:1e:19:b7:ab:18:6c:
46:ab:fa:f1:5b:2f:4a:61:20:32:38:3a:66:3b:27:
76:00:b8:2b:00:50:ce:5f:47:72:b7:b1:a2:20:02:
ae:66:6c:36:9c:6e:df:a7:bb:f1:b4:60:96:55:86:
25:41:31:13:03:94:60:7f:4b:4d:1b:73:4b:36:f4:
6c:4e:cb:ea:52:18:08:28:9e:2d:32:35:5d:5b:64:
6d:5b:b0:ac:14:be:e4:3a:83:94:de:2c:c0:97:ef:
78:74:c0:fe:5e:a4:1e:f3:50:14:6d:4c:01:ae:1c:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:65:7B:00:B9:6E:62:6C:53:60:00:FE:71:BB:3F:74:8F:CF:12
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/X5RlewC5bmJsU2AA_nG7P3SPzxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
16:2d:ec:d4:d2:41:ed:ce:20:55:6c:45:20:66:d3:98:83:da:
16:f6:e0:8d:aa:a3:10:79:8f:81:42:f7:04:00:f2:f9:b8:a6:
0d:c3:2c:43:f9:d1:6d:1f:3a:8c:29:ff:a3:e2:d8:67:78:7b:
42:b8:15:ae:47:72:2c:b4:66:02:30:2b:93:b8:af:1c:fa:27:
58:8f:12:f0:38:89:41:c5:37:5d:c3:09:bd:45:30:c9:43:aa:
01:38:2c:0e:f1:b9:85:9a:0b:71:2a:0d:a8:b4:3d:c6:ae:ec:
d5:00:7d:60:67:ec:fe:5d:af:95:e3:b1:10:c8:5c:5b:16:b9:
fc:b1:09:52:9d:52:fb:5c:dc:15:f6:dc:b6:cb:ea:50:79:7c:
7b:81:05:7d:6f:68:d8:63:20:4e:fd:e9:86:a9:3d:9e:88:1b:
7d:31:2d:01:58:01:52:91:5b:86:70:af:0d:0a:f0:43:77:c0:
a6:fd:25:f3:5c:2c:ed:a1:3a:22:e6:15:6c:a9:f5:76:3f:eb:
7b:b2:7b:96:2c:63:a7:f7:9c:44:41:d0:4d:be:98:60:e0:cd:
39:b9:7f:2f:fb:f8:c5:a7:90:ca:74:63:9d:a4:50:b9:06:36:
ef:9c:9a:04:2c:5b:de:3b:c9:f3:55:9f:63:77:9e:95:36:c8:
64:cf:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:47 2025 by rpki-client