Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/scPSH27rh1CQph1Ry7UIC2St0uk.roa
File: scPSH27rh1CQph1Ry7UIC2St0uk.roa (raw, json)
Hash identifier: rk9JoshlmRWgcOR7oIgEh/qa4cObe9075yb5tpP1SvU=
Subject key identifier: B1:C3:D2:1F:6E:EB:87:50:90:A6:1D:51:CB:B5:08:0B:64:AD:D2:E9
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71F6F02809561A6D25F90D2ADE8FF
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/scPSH27rh1CQph1Ry7UIC2St0uk.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202578
IP address blocks: 185.233.201.0/24 maxlen: 24
193.34.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1f:6f:02:80:95:61:a6:d2:5f:90:d2:ad:e8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1c3d21f6eeb875090a61d51cbb5080b64add2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:81:8a:9c:e1:3c:3f:21:94:9e:7e:90:8d:
48:3e:8e:1b:3c:ff:e0:ab:64:af:88:38:04:d5:62:
c3:a4:77:c8:f2:8f:be:1d:3f:dd:ca:ee:32:d8:c3:
ad:bd:f5:97:39:86:f9:97:95:04:59:0a:f7:50:09:
c4:fa:e5:8b:33:cd:e9:20:13:07:23:5b:42:08:a4:
0c:4d:54:a9:14:eb:c6:05:3f:0a:67:58:3c:be:c8:
7a:05:e4:2b:dc:41:18:9f:5d:67:d2:97:bd:2a:d1:
e8:ea:a0:86:da:80:a8:fb:9f:44:ad:10:8d:37:8d:
77:71:d3:fb:9f:8c:cf:9a:05:33:e8:d5:d1:eb:f5:
0d:09:54:e4:f6:0a:dc:1d:58:72:6b:d7:36:74:12:
3d:8a:8c:93:18:83:27:3c:e0:ec:77:03:e3:16:41:
d7:ce:a3:53:d2:f8:36:2b:89:38:4c:9c:9d:70:11:
b5:48:46:6a:9e:a6:7a:83:06:60:ee:82:d5:15:70:
9a:f6:ce:f4:1c:ec:a4:11:d6:c7:94:4a:9a:33:0f:
c5:d9:cc:89:6d:68:0f:ac:98:a8:b4:42:b7:e5:d9:
6f:ea:06:51:6f:c5:b5:e4:59:16:a8:c9:33:bd:c6:
b2:db:3d:e7:7e:9a:d1:fb:36:1d:ef:75:5d:83:62:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C3:D2:1F:6E:EB:87:50:90:A6:1D:51:CB:B5:08:0B:64:AD:D2:E9
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/scPSH27rh1CQph1Ry7UIC2St0uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.201.0/24
193.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:09:4f:6e:d2:ad:40:d1:b6:e7:7e:8b:24:17:2d:6c:ce:e4:
02:aa:8d:dd:8f:cb:a9:78:f7:52:d9:77:d7:f6:e0:32:a2:ce:
27:04:da:c0:c7:48:c8:70:93:72:2f:c5:2a:64:c3:3d:e4:89:
b1:01:2c:bc:b3:b2:13:78:63:15:27:f6:e5:1d:54:7d:79:91:
9e:cb:70:4c:f0:e7:74:19:a1:ac:a8:de:e9:39:b8:c3:5c:79:
53:08:56:64:ef:00:73:ff:46:d2:c1:f4:a4:13:31:ab:db:dd:
19:7f:0d:fe:9e:13:96:c6:45:38:8c:0c:bb:d4:2e:6a:d6:4d:
e0:8b:59:b7:ff:4a:07:c6:f6:81:f7:47:b1:13:34:ea:95:06:
cb:49:1c:88:b9:1b:81:08:4a:db:36:0d:3c:67:1a:21:8c:80:
2a:1f:70:5d:3e:c4:3b:5c:2c:18:20:cf:99:02:b9:1a:c8:f2:
3f:9b:a1:e5:8f:22:d3:69:0d:3f:f0:17:a4:2c:64:65:a4:e5:
5e:95:4d:7c:af:c1:7a:f9:7a:86:71:b5:fe:91:8e:c2:9f:dc:
71:c2:ad:29:24:4c:a6:f8:2d:a9:1c:56:a7:50:e6:f3:35:ae:
49:c0:79:97:51:10:fb:be:1b:2d:d1:86:55:b4:de:a3:32:ea:
79:28:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:06 2025 by rpki-client