Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/iBynxkBNgbzstPi8YjTQg23GPp8.roa
File: iBynxkBNgbzstPi8YjTQg23GPp8.roa (raw, json)
Hash identifier: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=
Subject key identifier: 88:1C:A7:C6:40:4D:81:BC:EC:B4:F8:BC:62:34:D0:83:6D:C6:3E:9F
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 01942143B8E99E5A3D59D2C633CFDDF53B59
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/iBynxkBNgbzstPi8YjTQg23GPp8.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.209.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b8:e9:9e:5a:3d:59:d2:c6:33:cf:dd:f5:3b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881ca7c6404d81bcecb4f8bc6234d0836dc63e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:8e:8a:be:22:ef:db:27:cf:d2:3e:1d:33:
43:8a:90:7a:7d:52:83:2e:42:e6:59:44:ac:cd:d6:
b0:78:06:77:1d:8a:a9:eb:d3:10:cb:1c:f1:55:4e:
ad:16:d3:a9:1b:98:60:aa:77:51:a4:bb:21:2c:8d:
20:be:c0:30:a6:aa:fe:b9:33:cf:b8:96:a1:f2:a0:
2a:3c:c1:48:5a:6a:7d:8c:71:0f:d7:d1:12:c3:b9:
95:86:24:1e:11:65:c2:b2:18:cf:56:93:b3:0d:8f:
60:c6:d7:24:37:ab:27:09:89:3e:e5:83:fc:26:f8:
7d:51:69:06:9a:06:1d:55:ac:04:6f:db:c8:6f:92:
39:02:d7:bc:dd:cc:6d:bd:69:6d:a6:91:6e:60:66:
81:71:fc:4b:56:a2:17:51:9a:b1:62:aa:95:e9:bd:
e1:30:34:79:60:57:e4:3a:f9:7f:7b:7d:22:1a:f3:
04:27:1a:5d:9a:a1:a5:42:49:ab:fa:20:e1:c6:92:
3b:53:85:18:5a:11:34:85:72:5e:f4:63:d1:df:3b:
0e:4b:51:73:81:3d:95:0d:65:9d:99:5e:7e:a6:31:
e7:d6:7e:e9:8f:21:3f:cf:dc:a6:99:aa:cb:7b:2e:
7e:fb:d3:f0:67:7d:9f:3c:80:66:ba:cb:62:59:57:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1C:A7:C6:40:4D:81:BC:EC:B4:F8:BC:62:34:D0:83:6D:C6:3E:9F
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/iBynxkBNgbzstPi8YjTQg23GPp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3f:55:12:d8:07:9b:48:6e:88:21:ea:f6:c8:63:44:29:f4:
3d:7e:8a:a9:d9:8f:0e:06:ec:7b:87:47:84:25:2b:c0:50:2d:
9d:1a:59:cb:ce:14:7d:63:5e:7f:e3:52:97:4d:8c:ab:1c:2f:
2e:63:25:37:64:56:f5:12:21:b2:b4:6b:84:ee:71:09:01:ec:
6c:08:d8:a9:28:cd:36:84:e1:96:92:a0:3a:18:2e:54:78:59:
03:18:b7:dc:77:70:1c:de:4e:59:f2:17:8a:10:ee:ec:4d:c0:
00:df:b7:bc:3b:5b:27:f3:b0:23:18:9c:ea:aa:6e:1e:85:37:
1a:2a:cb:7a:3b:c0:fa:f7:dd:25:57:83:3a:8d:f2:50:cb:d8:
f4:fe:e3:0b:2d:b2:15:70:d6:e5:05:2d:9e:7e:6e:9e:c3:36:
89:a4:07:1d:b5:67:2b:21:64:82:a9:8d:79:52:13:02:8b:3b:
cb:fb:0f:87:85:3d:5b:03:5b:b6:70:5f:86:08:83:ba:16:d7:
a3:51:72:96:93:d9:29:4c:7e:e4:06:ee:b8:29:a4:d2:15:07:
75:c1:ce:78:4d:07:3e:b2:46:5c:1e:8a:ea:ab:cf:cf:41:20:
b2:01:df:5a:d9:96:2f:70:d2:e4:8f:b6:ca:21:be:4f:57:33:
3a:47:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:48 2025 by rpki-client