Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/b6PxSRMMpYMDelZhlHVJswnGzlY.roa
File: b6PxSRMMpYMDelZhlHVJswnGzlY.roa (raw, json)
Hash identifier: 2hbPovorwIzKGKG+8Z0PbXVcSz91V4CX1uoPUPOxcMk=
Subject key identifier: 6F:A3:F1:49:13:0C:A5:83:03:7A:56:61:94:75:49:B3:09:C6:CE:56
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 019424B388DD42E62B17DE149DBCE2FF7192
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/b6PxSRMMpYMDelZhlHVJswnGzlY.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51580
IP address blocks: 185.29.73.0/24 maxlen: 24
185.29.74.0/23 maxlen: 24
185.29.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:88:dd:42:e6:2b:17:de:14:9d:bc:e2:ff:71:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fa3f149130ca583037a5661947549b309c6ce56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:73:12:22:79:ca:bf:54:b1:88:3d:fa:2e:
43:9a:e4:45:0f:77:ef:58:ba:2a:39:35:b0:bd:26:
d5:56:ef:bc:bf:f4:b7:78:0b:ca:ca:4b:c5:a7:8c:
46:d6:cb:b9:c0:58:78:d7:ea:8d:b3:f2:10:a0:7d:
49:0f:27:9c:7f:76:95:f1:32:14:15:a7:6f:8c:7c:
73:6b:79:f3:55:50:f7:a9:88:f3:13:0f:52:b8:a2:
4b:50:f2:91:11:26:78:31:62:95:95:b1:b2:cd:9d:
33:85:30:cf:3a:df:37:2e:7e:85:96:c4:45:0e:a7:
3b:70:8d:6b:6e:f6:bf:88:4d:d3:f3:0b:08:d8:50:
e9:66:a4:0a:6f:b9:08:37:ba:7c:48:54:98:cc:d6:
0e:89:6c:8b:c2:ff:c8:fa:b6:2e:a1:1b:e9:07:b9:
11:21:ca:f4:f0:0e:78:28:a6:74:f0:fa:8f:67:32:
c2:ef:a7:da:09:66:9c:dc:71:66:69:fc:3e:31:63:
41:05:d5:f2:59:b5:6e:10:3d:58:15:4b:c2:8b:18:
89:b2:cd:8f:8f:d2:ef:c0:4f:d6:1c:ff:e2:62:97:
87:00:8e:6a:77:74:d7:30:5b:77:20:15:f6:bf:d9:
1d:49:4a:5a:33:48:11:e0:08:0e:87:f3:29:ee:8c:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:F1:49:13:0C:A5:83:03:7A:56:61:94:75:49:B3:09:C6:CE:56
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/b6PxSRMMpYMDelZhlHVJswnGzlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.73.0-185.29.75.255
Signature Algorithm: sha256WithRSAEncryption
d9:a1:dc:38:53:16:fc:33:fe:e8:f3:d7:d3:d0:d4:42:4a:0d:
5f:15:67:88:eb:82:4d:29:ec:76:42:c3:3d:2e:ed:77:3a:ae:
5c:cd:88:51:84:5e:cd:51:c0:e0:fb:00:38:15:d3:f9:ae:8a:
42:80:3b:0c:b2:d7:6b:fe:be:95:eb:3c:e2:02:30:13:7f:fa:
32:28:02:b4:58:1a:cc:b5:ae:03:13:bf:e1:f6:88:51:02:39:
d1:55:f0:3a:59:16:23:ac:f8:56:84:49:88:2f:c3:22:de:11:
68:5d:74:88:60:f8:12:ad:a5:8c:54:e4:04:1e:86:6b:8a:3a:
d0:f1:47:87:4e:5c:c1:dd:de:46:6a:61:8f:d5:ae:c6:22:4f:
8d:9f:aa:93:f7:13:ad:86:ac:8a:d0:27:30:96:14:fa:e6:71:
64:da:e1:12:27:81:98:9d:e2:43:a3:72:54:bf:c2:c8:b2:7a:
c9:a2:ec:4b:12:eb:c1:1c:b8:c1:24:96:9c:67:8e:52:92:20:
83:a7:21:48:ac:54:a1:ab:2b:d6:84:13:a1:ae:84:1c:02:a4:
ca:92:d3:92:9c:96:46:cc:40:19:e4:77:20:95:e9:41:04:c3:
38:74:04:36:e8:17:8d:15:bd:ca:a2:79:3b:b3:47:56:b9:63:
7e:8f:3c:1d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQks4jdQuYrF94Unbzi/3GSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMDQ0OWZlN2Y0YjJjZjFmN2ZkNjcwZTU4MmViY2M5N2U0
NWY3ZmYwHhcNMjUwMTAyMDE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmEzZjE0OTEzMGNhNTgzMDM3YTU2NjE5NDc1NDliMzA5YzZjZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvztzEiJ5yr9UsYg9+i5DmuRFD3fv
WLoqOTWwvSbVVu+8v/S3eAvKykvFp4xG1su5wFh41+qNs/IQoH1JDyecf3aV8TIU
FadvjHxza3nzVVD3qYjzEw9SuKJLUPKRESZ4MWKVlbGyzZ0zhTDPOt83Ln6FlsRF
Dqc7cI1rbva/iE3T8wsI2FDpZqQKb7kIN7p8SFSYzNYOiWyLwv/I+rYuoRvpB7kR
Icr08A54KKZ08PqPZzLC76faCWac3HFmafw+MWNBBdXyWbVuED1YFUvCixiJss2P
j9LvwE/WHP/iYpeHAI5qd3TXMFt3IBX2v9kdSUpaM0gR4AgOh/Mp7oyg2QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG+j8UkTDKWDA3pWYZR1SbMJxs5WMB8GA1UdIwQY
MBaAFOIESf5/Syzx9/1nDlguvMl+Rff/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZGM4NzktMTFiOS00ZmE2LTg0MWQt
OTA2YTkxZWU5ZmU0LzEvYjZQeFNSTU1wWU1EZWxaaGxIVkpzd25HemxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZGM4NzktMTFiOS00ZmE2LTg0MWQtOTA2YTkxZWU5ZmU0
LzEvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5HUkD
BAK5HUgwDQYJKoZIhvcNAQELBQADggEBANmh3DhTFvwz/ujz19PQ1EJKDV8VZ4jr
gk0p7HZCwz0u7Xc6rlzNiFGEXs1RwOD7ADgV0/muikKAOwyy12v+vpXrPOICMBN/
+jIoArRYGsy1rgMTv+H2iFECOdFV8DpZFiOs+FaESYgvwyLeEWhddIhg+BKtpYxU
5AQehmuKOtDxR4dOXMHd3kZqYY/VrsYiT42fqpP3E62GrIrQJzCWFPrmcWTa4RIn
gZid4kOjclS/wsiyesmi7EsS68EcuMEklpxnjlKSIIOnIUisVKGrK9aEE6GuhBwC
pMqS05KclkbMQBnkdyCV6UEEwzh0BDboF40VvcqieTuzR1a5Y36PPB0=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:37 2025 by rpki-client