Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/9bCbPlyDVeO-zKuh45J3Jtpjjmo.roa
File: 9bCbPlyDVeO-zKuh45J3Jtpjjmo.roa (raw, json)
Hash identifier: X0z0iY2Z4IACcw+OrkEBIKo3HmRGRLXnJDpf9W9G++E=
Subject key identifier: F5:B0:9B:3E:5C:83:55:E3:BE:CC:AB:A1:E3:92:77:26:DA:63:8E:6A
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01856F0B584D56342DB43D265DA4AA8A8F5D
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/9bCbPlyDVeO-zKuh45J3Jtpjjmo.roa
Signing time: Sun 01 Jan 2023 20:34:52 +0000
ROA not before: Sun 01 Jan 2023 20:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61102
IP address blocks: 185.104.195.0/24 maxlen: 24
2a01:8640:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:58:4d:56:34:2d:b4:3d:26:5d:a4:aa:8a:8f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 20:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5b09b3e5c8355e3beccaba1e3927726da638e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:62:bc:df:e9:b5:ae:b1:c0:2a:72:fd:7b:
f5:75:b4:06:13:07:21:4d:8e:c5:e0:ff:51:aa:49:
1e:40:87:35:4e:4a:ae:8c:c4:57:3c:0a:31:ba:f2:
28:41:1b:dc:d5:b9:01:9b:01:d5:4f:db:f5:7b:8f:
0e:63:e8:2e:b1:4d:6a:bc:9e:4f:a1:b9:99:e8:bf:
1d:11:ed:13:95:1b:18:c6:0e:d2:5f:aa:25:3c:eb:
89:8b:2b:92:61:22:1d:77:02:5a:6b:1c:ba:ad:af:
94:af:92:6b:4d:2a:98:55:9e:d2:6f:7a:62:fb:4c:
6f:cf:6d:49:65:d3:74:45:a0:94:d0:af:0d:d6:07:
c1:ed:21:8d:93:ea:91:8f:37:c6:8a:93:9b:e7:6e:
a7:3a:d6:c2:51:25:d9:92:9f:60:10:b2:08:0e:4a:
3a:d2:4d:a1:41:1b:a9:c1:c1:89:84:86:06:57:64:
61:2b:76:70:c4:a4:b3:ff:8d:85:22:36:b0:bb:e1:
30:c7:c5:8c:5e:02:85:2a:68:b4:f8:3e:89:40:3f:
31:38:96:e6:59:58:27:91:a1:8a:00:3d:8e:13:d5:
ae:60:49:75:2e:dc:e5:c3:64:39:1b:c2:ff:a8:f9:
81:3d:4b:2b:ea:8b:91:11:2c:6f:ed:ec:7c:fe:d0:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B0:9B:3E:5C:83:55:E3:BE:CC:AB:A1:E3:92:77:26:DA:63:8E:6A
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/9bCbPlyDVeO-zKuh45J3Jtpjjmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.195.0/24
IPv6:
2a01:8640:c::/48
Signature Algorithm: sha256WithRSAEncryption
8d:05:6e:65:c8:84:11:c4:bc:ac:bc:5e:7f:b4:cd:56:75:eb:
ac:33:34:3d:53:9c:6c:84:ec:b2:5f:e2:1d:91:98:a8:4b:41:
ea:07:7f:25:3e:2d:98:1a:66:e9:6c:89:7f:2f:eb:b1:d1:9d:
b8:a2:d9:16:5c:11:70:d9:53:66:07:33:84:9e:16:99:77:2e:
40:b9:e5:1d:cc:1f:2a:db:44:84:0d:2c:b3:dd:89:ea:99:9c:
3c:bb:05:46:32:d5:a7:3a:18:dc:fa:bf:5f:65:24:9d:c4:80:
b2:d4:ba:b7:ae:88:f6:77:90:85:a6:a9:64:2e:d1:df:a8:9d:
a2:9b:89:ff:80:8f:bf:4c:ad:0e:4b:ca:8a:00:8d:76:93:84:
83:e9:c1:46:e2:db:4c:a3:3b:b0:f5:a0:7a:30:ec:46:1e:3b:
39:94:28:f0:be:2f:42:1b:81:71:95:d2:8a:0d:ce:29:7d:7b:
e4:ac:a6:88:7d:02:5a:ef:22:1b:2d:e3:48:de:23:40:ca:4a:
64:d8:10:07:23:16:41:63:07:00:08:a7:14:c2:30:80:4f:5f:
3f:17:fb:b7:86:89:b6:d2:b3:97:58:16:a6:7a:0c:58:3f:a1:
73:17:12:5e:95:11:70:5f:7e:b4:96:d4:47:fc:99:6e:a9:07:
6b:e8:5f:c8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVvC1hNVjQttD0mXaSqio9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjMwMTAxMjAzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWIwOWIzZTVjODM1NWUzYmVjY2FiYTFlMzkyNzcyNmRhNjM4ZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrNivN/pta6xwCpy/Xv1dbQGEwch
TY7F4P9RqkkeQIc1TkqujMRXPAoxuvIoQRvc1bkBmwHVT9v1e48OY+gusU1qvJ5P
obmZ6L8dEe0TlRsYxg7SX6olPOuJiyuSYSIddwJaaxy6ra+Ur5JrTSqYVZ7Sb3pi
+0xvz21JZdN0RaCU0K8N1gfB7SGNk+qRjzfGipOb526nOtbCUSXZkp9gELIIDko6
0k2hQRupwcGJhIYGV2RhK3ZwxKSz/42FIjawu+Ewx8WMXgKFKmi0+D6JQD8xOJbm
WVgnkaGKAD2OE9WuYEl1Ltzlw2Q5G8L/qPmBPUsr6ouRESxv7ex8/tCVLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPWwmz5cg1XjvsyroeOSdybaY45qMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvOWJDYlBseURWZU8tekt1aDQ1SjNKdHBqam1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWjDMA8E
AgACMAkDBwAqAYZAAAwwDQYJKoZIhvcNAQELBQADggEBAI0FbmXIhBHEvKy8Xn+0
zVZ166wzND1TnGyE7LJf4h2RmKhLQeoHfyU+LZgaZulsiX8v67HRnbii2RZcEXDZ
U2YHM4SeFpl3LkC55R3MHyrbRIQNLLPdieqZnDy7BUYy1ac6GNz6v19lJJ3EgLLU
ureuiPZ3kIWmqWQu0d+onaKbif+Aj79MrQ5LyooAjXaThIPpwUbi20yjO7D1oHow
7EYeOzmUKPC+L0IbgXGV0ooNzil9e+Sspoh9AlrvIhst40jeI0DKSmTYEAcjFkFj
BwAIpxTCMIBPXz8X+7eGibbSs5dYFqZ6DFg/oXMXEl6VEXBffrSW1Ef8mW6pB2vo
X8g=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:06 2025 by rpki-client