Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vf9YZfXgjr7YQLTwhBZlgohHy9Y.roa
File: vf9YZfXgjr7YQLTwhBZlgohHy9Y.roa (raw, json)
Hash identifier: q5QGUCUrfQLksKBmmXwZEXtSO2q5lu8OJPkiyTs79Ks=
Subject key identifier: BD:FF:58:65:F5:E0:8E:BE:D8:40:B4:F0:84:16:65:82:88:47:CB:D6
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0191E1A985D4300AC31AAE11B1EE4E393341
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vf9YZfXgjr7YQLTwhBZlgohHy9Y.roa
Signing time: Wed 11 Sep 2024 15:17:49 +0000
ROA not before: Wed 11 Sep 2024 15:17:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 185.210.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:a9:85:d4:30:0a:c3:1a:ae:11:b1:ee:4e:39:33:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 11 15:17:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdff5865f5e08ebed840b4f0841665828847cbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:a7:6d:84:7e:6d:ee:f0:12:b4:56:8a:b8:
e3:38:e4:10:04:0d:0c:5d:f9:ed:cf:c8:b0:bf:bd:
cc:10:43:10:bd:1b:46:c4:2c:89:9b:c2:13:bb:f4:
e9:cf:b9:75:24:d7:31:2f:cf:b9:f2:0a:00:ca:71:
83:d0:da:83:58:7a:9b:88:4a:f3:7f:e3:28:b6:b6:
54:ab:a2:c1:1a:1a:3a:12:3b:04:ce:f1:72:d1:69:
e3:f4:29:d1:8f:5a:6f:a3:a5:56:7d:a3:7b:c6:08:
ef:75:1e:0e:0d:cb:1e:87:e9:5d:a1:b4:0b:48:cf:
81:55:d4:79:a9:9c:88:ee:6d:1b:03:cc:b3:d2:1a:
42:f0:15:ae:4f:8c:87:76:71:30:cc:a5:a3:b2:39:
10:45:e9:24:8b:1b:46:56:64:6a:5d:1e:dc:0d:bb:
94:76:f7:0d:83:42:a0:be:f7:1c:12:f9:0b:70:13:
5a:64:c4:59:6b:6c:d7:8c:4c:32:8b:ac:b8:9f:75:
ed:b7:6a:79:e9:13:ea:3d:51:6f:62:dc:ea:14:db:
ea:31:ab:d3:94:e9:73:7a:a2:1c:34:ae:b5:5c:e8:
a2:c2:59:90:b5:28:cc:06:c1:20:8c:dc:a8:a4:35:
8f:49:4b:33:ce:59:d4:87:15:cb:8b:3c:e5:99:10:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:58:65:F5:E0:8E:BE:D8:40:B4:F0:84:16:65:82:88:47:CB:D6
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vf9YZfXgjr7YQLTwhBZlgohHy9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.138.0/24
Signature Algorithm: sha256WithRSAEncryption
56:15:f4:f1:11:a7:48:98:ae:fd:2d:93:08:ac:24:bf:3a:72:
8b:2a:4b:c4:77:3d:fe:dc:78:5d:44:01:8d:08:86:c9:4a:6c:
39:ce:26:23:55:04:04:2d:d6:e8:8a:a9:bb:5b:b6:2b:9a:8e:
62:d5:d3:c9:1c:4b:62:b5:a7:c2:9d:be:4b:a2:08:65:2f:d6:
91:ce:db:d4:f8:20:02:1a:14:43:57:d6:53:08:c6:5f:59:51:
8c:13:6b:c7:9a:8d:a0:13:4a:cc:ca:9e:1f:d1:0f:a0:73:12:
2c:63:5c:6a:e1:7a:f9:44:14:3b:b4:5f:98:8e:1c:51:19:4a:
7b:53:42:f1:f1:c4:20:c8:f2:a4:b3:18:59:6f:1d:a3:2d:28:
ae:73:62:a9:51:b2:56:9d:0a:0f:67:a1:0b:97:dc:7e:bb:d2:
17:d1:9b:18:a4:85:4e:41:3e:b1:26:be:c4:eb:73:4e:5d:f4:
00:04:87:33:70:fb:fd:39:48:db:39:7f:b1:ac:3f:63:09:1b:
f4:7a:7e:de:00:45:f8:b8:19:1e:00:85:83:ed:cb:79:85:fe:
18:b7:01:17:08:86:a0:83:9f:64:eb:ee:c0:f9:33:0e:04:16:
04:ce:da:76:92:6d:4a:0e:0b:3a:2d:98:a2:1f:57:45:8e:2b:
55:d3:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:57 2025 by rpki-client