Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/b1hjlxPE7cvPH3xYSPFGvQHXhIU.roa
File: b1hjlxPE7cvPH3xYSPFGvQHXhIU.roa (raw, json)
Hash identifier: EhWdgZS0fvPH5qyf4NZfHJCYz/H55wwtCw2I8Z8aIXY=
Subject key identifier: 6F:58:63:97:13:C4:ED:CB:CF:1F:7C:58:48:F1:46:BD:01:D7:84:85
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70BC83F5C8A7E3692596297974922
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/b1hjlxPE7cvPH3xYSPFGvQHXhIU.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41904
IP address blocks: 185.229.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0b:c8:3f:5c:8a:7e:36:92:59:62:97:97:49:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f58639713c4edcbcf1f7c5848f146bd01d78485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:96:f6:82:3c:37:15:4b:1a:8c:12:df:2e:
bd:4b:ff:fb:cb:77:bf:be:b8:12:90:17:d0:b8:ef:
56:ef:e4:ef:1d:08:c2:43:4b:ab:a8:07:0d:19:2e:
a0:48:51:f5:10:4a:63:72:41:44:f8:ca:9d:9f:84:
99:74:ff:62:fd:a1:29:3c:a7:3b:c1:d1:60:b3:b9:
89:b5:39:55:f8:53:26:54:19:e9:af:ce:20:35:76:
4f:f5:28:e4:fc:69:be:44:f3:4a:82:bb:63:29:10:
d0:f9:16:80:d6:7f:26:fe:92:32:f8:45:58:15:bd:
b1:4b:8c:0a:f7:4c:68:af:43:f9:10:e5:9d:33:e8:
82:bb:de:bf:f2:7e:fc:c3:07:16:9e:08:b9:20:32:
c5:c4:24:bd:6b:82:94:a9:25:33:4d:ea:c9:1d:8b:
b2:af:d4:d4:a5:c9:1d:19:b7:e8:5c:ea:82:37:8b:
08:9d:03:35:5f:87:8c:fb:d4:9c:27:e0:2c:cc:09:
f0:eb:56:07:eb:68:d0:70:04:ee:8c:1b:c4:5f:f7:
e0:40:45:1a:d5:b7:1b:b4:bc:9b:54:82:17:28:ad:
76:41:c8:90:fd:ba:4a:f2:fe:58:2e:a4:e5:20:7c:
5d:1d:d3:c3:2c:ee:33:3d:8a:e3:2f:81:98:64:47:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:63:97:13:C4:ED:CB:CF:1F:7C:58:48:F1:46:BD:01:D7:84:85
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/b1hjlxPE7cvPH3xYSPFGvQHXhIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.67.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3b:3b:85:ed:14:83:ba:9e:99:7a:d7:fc:18:66:59:8a:a5:
82:bb:41:72:e6:c1:b7:42:93:97:77:67:ba:9a:93:c3:99:d9:
1b:0d:fc:f1:fd:1d:e5:2f:d2:49:33:5b:6b:b8:33:a2:60:6c:
19:10:08:1a:a0:22:af:1e:44:3f:86:cd:bf:f4:7e:ab:1e:61:
f6:c4:5e:e1:17:e9:07:21:89:87:f6:e5:13:fb:92:2d:e4:58:
59:d4:ae:3a:1b:cc:d5:67:cb:d9:bf:ba:1c:23:f8:85:1a:3b:
b0:00:2f:78:8f:92:a5:71:2f:1a:bd:1f:27:a2:0e:44:36:d1:
dc:3d:a1:2b:31:16:33:33:ff:58:3e:53:b1:01:94:53:4a:31:
e2:b9:fb:49:13:61:53:d9:cc:0d:bf:14:14:f1:28:66:4f:54:
9f:52:e5:a6:ee:69:c7:6e:39:d1:78:c1:07:d6:6d:c7:25:79:
35:4a:be:53:2c:99:9a:dc:9d:b1:08:91:7b:f9:a5:7b:be:76:
3d:e7:86:ac:10:67:a3:41:5e:17:85:ba:c0:73:3d:e8:a6:4e:
81:28:f7:d9:d9:6c:16:58:82:0c:86:41:5c:11:2e:46:d9:c2:
f6:76:ec:0c:7d:5f:8e:3c:de:a2:9a:4d:0b:76:fe:3f:27:39:
5d:29:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:21 2025 by rpki-client