Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/B_LnlrHFLDYdboiRTTX-o67316g.roa
File: B_LnlrHFLDYdboiRTTX-o67316g.roa (raw, json)
Hash identifier: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=
Subject key identifier: 07:F2:E7:96:B1:C5:2C:36:1D:6E:88:91:4D:35:FE:A3:AE:F7:D7:A8
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 0194221F9BA42226930A6F7CFF5D83BDB975
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/B_LnlrHFLDYdboiRTTX-o67316g.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201821
IP address blocks: 185.63.73.0/24 maxlen: 24
185.63.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9b:a4:22:26:93:0a:6f:7c:ff:5d:83:bd:b9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07f2e796b1c52c361d6e88914d35fea3aef7d7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:d9:18:0a:35:6d:97:28:59:b7:86:18:88:
1a:f2:ff:63:bf:07:c8:ae:30:1d:3f:fc:e5:dd:a0:
e4:85:fd:7f:89:6c:39:0f:ed:1d:1d:1d:52:64:49:
60:90:4a:48:06:e4:6c:aa:ac:51:81:7f:57:33:c3:
35:c5:c4:3f:b8:4a:11:8f:b8:20:6e:3d:b9:30:6d:
38:cb:21:4b:04:e1:c6:20:e9:7b:c0:e9:f5:09:b6:
8f:83:e9:b6:b3:22:cf:38:fb:4a:80:7d:de:03:55:
38:93:67:80:93:4e:e0:1d:50:65:5c:4b:a0:31:ba:
6f:0d:83:39:e4:27:cc:65:53:90:f0:b4:8e:21:56:
a5:97:dd:0e:17:08:b5:a3:10:d9:3d:11:d8:74:65:
2d:44:b3:5a:1d:1a:1d:82:12:ce:7b:36:fc:57:05:
7a:b4:cf:8b:9a:b6:f1:6a:06:73:6e:a4:92:67:aa:
04:dc:e2:cb:c2:67:78:ff:c8:72:11:e3:75:a5:e7:
9e:3b:52:70:a9:9f:e2:a3:4e:3b:b3:31:6e:ac:ac:
ad:a9:b0:c5:ea:fb:ea:e8:dc:12:7c:7f:4d:fc:07:
9d:2c:99:2c:ec:e9:e5:1c:bd:13:ad:83:c8:0f:d1:
73:70:8f:8a:37:23:31:37:09:76:56:1e:59:15:e8:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F2:E7:96:B1:C5:2C:36:1D:6E:88:91:4D:35:FE:A3:AE:F7:D7:A8
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/B_LnlrHFLDYdboiRTTX-o67316g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.73.0/24
185.63.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fa:f3:ec:a8:d6:ac:f2:24:6b:c1:94:d7:2b:d9:58:ac:e6:
e6:b4:c4:52:e3:1a:26:47:46:d6:24:81:4b:cd:3e:70:5c:98:
27:98:d8:e1:12:27:81:67:7f:e2:84:bf:23:fd:1d:3f:4d:e3:
2f:47:fd:6d:af:72:db:fc:8b:9e:c4:14:f3:e9:a2:f4:46:68:
f2:8c:c5:2c:00:9c:e0:33:2b:bd:1a:8c:8e:96:06:00:4e:1f:
31:4b:9e:b3:22:15:d8:9b:dc:ad:72:50:64:e7:16:f1:1d:7e:
e3:f5:bf:8a:53:e8:9e:5c:b0:4a:71:be:72:51:d0:78:4a:79:
5f:0f:25:31:27:b5:c3:42:48:81:9d:fd:28:13:78:b7:d1:77:
d3:19:f4:82:f2:18:a4:e3:ee:7e:1b:af:84:5a:64:81:61:94:
95:73:47:22:c9:c7:17:ac:c4:8c:18:ef:99:d6:f3:7b:7f:6b:
e4:42:50:56:c4:ba:53:d6:1b:6c:66:06:4d:4a:77:86:cc:e2:
80:f6:4f:0d:f4:6f:00:a4:4b:bc:7f:57:81:33:48:04:3a:a3:
16:23:09:f8:11:b5:86:db:37:41:f4:f6:28:fd:48:fb:d3:a0:
9a:49:15:4b:7a:0a:15:52:37:96:91:05:3c:8b:b4:80:96:fb:
14:d0:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:14 2025 by rpki-client