Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/b3RYClZ_8LiEDIxEKsrADTUGRV4.roa
File: b3RYClZ_8LiEDIxEKsrADTUGRV4.roa (raw, json)
Hash identifier: Fp2LLe5C1nranv8Ipnt+aZZru93xkbIPzl8nb64lFUc=
Subject key identifier: 6F:74:58:0A:56:7F:F0:B8:84:0C:8C:44:2A:CA:C0:0D:35:06:45:5E
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0194266BD83E0238F27AD7B814E6EF739086
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/b3RYClZ_8LiEDIxEKsrADTUGRV4.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12400
IP address blocks: 185.151.196.0/23 maxlen: 23
185.151.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d8:3e:02:38:f2:7a:d7:b8:14:e6:ef:73:90:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f74580a567ff0b8840c8c442acac00d3506455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:36:81:13:55:4a:97:c5:b1:b2:22:73:14:
a3:9c:88:93:cf:a2:de:df:ed:5f:50:24:4d:20:30:
a5:78:47:07:53:12:8a:e4:33:b3:f4:13:68:78:3e:
00:1b:55:d3:79:24:a6:f0:ca:ec:b3:e2:e2:7f:92:
77:b3:75:cd:29:12:a0:1a:0d:a3:b7:df:47:4c:9c:
24:ae:42:6d:1a:db:9b:b9:43:35:09:15:25:80:67:
55:88:4e:bb:bc:81:14:bb:30:9f:61:f2:e4:1a:04:
a9:8d:82:ad:cd:8b:8e:f2:42:08:b6:e2:21:37:33:
ef:22:1c:15:ec:10:57:2e:12:21:2b:85:14:a6:9c:
86:21:09:e9:77:e4:07:de:ec:06:95:c3:96:87:79:
c4:25:02:eb:04:18:15:2e:f5:11:55:90:b5:fa:59:
e3:96:a0:57:77:eb:f3:84:b6:f4:30:82:8f:4a:ea:
43:c7:d3:64:c7:0b:3d:1c:e8:e3:0e:47:01:eb:7e:
1f:e8:bc:da:dc:e7:ef:26:a5:c4:57:65:36:7d:52:
e7:31:1c:b5:81:a5:17:41:46:0d:e2:8a:fe:11:d2:
41:77:bd:0f:8a:8f:83:6b:4b:02:90:33:77:e3:03:
f1:ca:c2:c9:6d:df:75:ac:5c:31:f6:bd:d9:95:b2:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:58:0A:56:7F:F0:B8:84:0C:8C:44:2A:CA:C0:0D:35:06:45:5E
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/b3RYClZ_8LiEDIxEKsrADTUGRV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.196.0-185.151.198.255
Signature Algorithm: sha256WithRSAEncryption
88:10:e3:27:4c:38:4e:ee:18:41:fd:f2:24:28:a5:65:75:c7:
94:07:ce:59:bc:c8:4f:81:a3:07:59:90:5f:1e:f0:ce:d7:db:
40:a1:6a:e6:cd:94:61:63:a6:03:29:c9:45:0c:7a:d5:94:ad:
6b:84:33:a6:65:d7:d4:fb:ff:77:25:8f:8e:c7:18:c2:39:c5:
99:f6:6a:1a:0d:22:2c:1c:4d:77:96:24:b8:a3:65:9a:e8:e3:
ea:78:57:9f:da:22:f9:a8:87:8b:e8:a9:c5:11:d0:7d:95:5f:
52:65:34:36:b0:8c:c1:99:49:ef:df:f6:d2:82:23:c3:3f:b6:
f7:45:4c:24:48:06:32:6c:74:07:59:44:19:0c:3d:36:ce:c4:
6a:a9:21:40:98:88:b6:7f:09:b7:7a:6d:6a:d6:7e:37:57:f4:
af:48:1b:3f:3c:d1:3c:91:c7:fa:4a:0d:8f:33:c4:43:46:cb:
dc:57:f7:2d:75:43:22:d4:b7:29:1b:90:e0:da:d6:4d:7a:8b:
0b:3a:6d:8a:da:fb:ca:23:90:92:26:3f:da:29:3e:d2:77:05:
80:fb:bf:77:2a:fa:9f:6f:8a:39:6c:0e:d7:14:50:64:a3:28:
ab:47:3a:23:7a:e9:e1:6e:f0:e7:f6:43:e3:35:c9:02:60:f9:
0e:d4:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:26:53 2025 by rpki-client