Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa
File: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (raw, json)
Hash identifier: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=
Subject key identifier: EB:B4:46:63:3E:E6:EF:15:8A:CD:40:7A:F8:93:BA:53:D2:B0:E0:EA
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019426D9CAC9D9BD135D8CE837EF80DB9850
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39326
IP address blocks: 185.51.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ca:c9:d9:bd:13:5d:8c:e8:37:ef:80:db:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb446633ee6ef158acd407af893ba53d2b0e0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:15:d2:f5:c3:e6:15:1c:7c:a3:e7:ac:aa:
d4:2d:3f:ab:65:e1:c4:cb:a7:d6:a2:5c:3c:db:1d:
7a:b9:8b:19:15:82:37:9e:2a:6b:de:92:9e:ad:f0:
cb:8a:d1:6d:9c:bf:e3:66:6a:ae:1f:5f:9c:78:d3:
6d:7f:19:eb:50:12:98:d1:c4:7a:90:03:7d:c9:97:
83:cb:54:3d:df:ea:96:79:f4:3f:22:82:a8:0b:56:
42:0a:49:e1:41:d3:5c:5a:e6:99:6d:8c:1e:2a:88:
c6:a3:69:52:43:f2:49:41:41:3e:8e:8c:bd:80:de:
9c:14:17:f1:52:5e:67:42:fd:a5:c2:db:1d:f5:59:
3c:fc:ff:bd:50:3b:5e:7d:7f:d6:dc:7c:8d:06:e8:
28:7f:a9:23:8d:f3:25:29:20:fe:8a:7a:a0:76:d8:
86:b2:6c:d9:a8:d7:98:3b:7a:20:34:08:93:f8:49:
57:3d:a2:1f:ec:9f:fc:74:5d:48:ab:95:3d:98:7f:
79:15:a1:d4:65:41:81:57:46:3e:77:f5:3a:57:17:
1e:be:fe:42:70:f5:dd:5d:42:42:f0:6e:1b:c0:3d:
73:1b:c4:8b:fe:70:c9:91:20:70:2b:d4:b1:1c:20:
bd:a8:89:f2:28:3f:91:45:14:17:e2:f6:46:4d:e5:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:46:63:3E:E6:EF:15:8A:CD:40:7A:F8:93:BA:53:D2:B0:E0:EA
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.172.0/22
Signature Algorithm: sha256WithRSAEncryption
56:05:26:26:77:d8:25:bf:ca:63:95:9a:e3:d0:c4:78:74:ee:
5b:79:c8:f1:7c:fb:8e:aa:01:cf:b8:36:ee:ca:21:75:65:fd:
48:5a:a5:bd:2f:71:82:d0:b2:08:55:64:eb:0b:eb:ff:76:48:
a5:ee:82:9c:3a:a6:9a:0a:69:c5:66:0f:cd:90:f0:25:91:ea:
c9:0d:06:64:42:0f:42:22:ed:f5:67:a9:af:5d:33:d5:04:e3:
76:1b:ec:94:c4:fb:c7:35:a5:60:3e:f2:b2:dd:15:e4:2b:b0:
c9:81:35:cf:e6:23:e9:26:86:31:45:c4:b9:ec:f0:59:88:71:
fe:c0:2e:78:a2:f0:56:9f:97:cb:10:fa:a5:f8:7f:fc:9a:ee:
60:81:22:3a:11:04:a1:4f:14:92:54:34:52:a8:ed:45:ac:d9:
cf:f3:66:9c:e6:43:44:a8:28:da:40:9c:d2:46:bc:90:25:7c:
eb:6d:79:ca:9d:86:d0:e8:99:9d:72:1e:5b:b9:34:c7:61:da:
1c:04:86:95:37:53:0a:f3:03:09:03:9d:d4:f9:02:6f:3a:36:
4b:4d:87:06:4d:9f:22:44:9d:23:ae:45:e2:9c:70:e5:8c:af:
67:ad:7e:c5:f9:8d:26:da:a1:97:00:23:29:37:31:17:2f:29:
ec:f9:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:21:59 2025 by rpki-client