Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/BDyymbsjeaXh6sAAW96PaMDpU8k.roa
File: BDyymbsjeaXh6sAAW96PaMDpU8k.roa (raw, json)
Hash identifier: JpjxDI986t3xeytsaVZpmbPTCoP9CxAC01IU6aXnGxw=
Subject key identifier: 04:3C:B2:99:BB:23:79:A5:E1:EA:C0:00:5B:DE:8F:68:C0:E9:53:C9
Certificate issuer: /CN=33c676946369f548ce6218fe473f3da4d1a5d1a8
Certificate serial: 018CC424A4903009F37FB3D6F0BEEF1B66FA
Authority key identifier: 33:C6:76:94:63:69:F5:48:CE:62:18:FE:47:3F:3D:A4:D1:A5:D1:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/BDyymbsjeaXh6sAAW96PaMDpU8k.roa
Signing time: Mon 01 Jan 2024 08:29:44 +0000
ROA not before: Mon 01 Jan 2024 08:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211803
IP address blocks: 185.238.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a4:90:30:09:f3:7f:b3:d6:f0:be:ef:1b:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c676946369f548ce6218fe473f3da4d1a5d1a8
Validity
Not Before: Jan 1 08:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=043cb299bb2379a5e1eac0005bde8f68c0e953c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:cc:e7:02:7f:37:dd:ba:71:79:c9:5e:4a:
ac:ce:c8:82:bc:52:56:47:34:9c:83:1e:92:b2:c6:
ee:de:c8:31:73:08:6c:93:5e:48:bc:94:74:bf:67:
30:d8:22:0e:65:ab:ad:d3:c6:08:31:da:25:d3:53:
73:8a:9d:b3:50:11:f6:ee:1c:19:f1:78:fc:d8:16:
81:f3:72:c9:4c:8e:c4:28:04:df:f2:6a:8c:12:a8:
93:d3:4d:7b:e2:dd:7e:af:9d:c0:ec:9e:50:e7:d4:
02:01:91:09:d4:b5:30:ec:e2:73:a0:bd:cd:ce:3c:
fa:f4:28:ec:ac:94:79:7f:ee:21:31:9f:eb:66:d3:
8a:5c:20:29:d9:cd:56:99:af:29:8d:6b:51:ef:6d:
49:72:99:91:f2:2a:ea:f4:44:c5:1a:cc:f3:f5:48:
9c:50:d8:3c:13:10:ce:65:43:19:24:77:b5:f0:bd:
e2:04:06:32:5a:37:58:b0:bb:d2:32:46:d2:3d:97:
b6:04:55:76:2a:9b:3f:84:a9:f1:32:b7:33:e8:b6:
a2:36:ca:b1:9a:4b:36:3e:5b:57:04:84:be:fe:d1:
2f:be:0a:2f:a7:16:5e:ca:45:8b:3c:dd:1c:88:36:
c9:60:c6:8b:c9:cc:e4:79:7a:bf:5e:8c:1d:32:55:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3C:B2:99:BB:23:79:A5:E1:EA:C0:00:5B:DE:8F:68:C0:E9:53:C9
X509v3 Authority Key Identifier:
keyid:33:C6:76:94:63:69:F5:48:CE:62:18:FE:47:3F:3D:A4:D1:A5:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/BDyymbsjeaXh6sAAW96PaMDpU8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:87:49:01:87:99:c4:74:7d:c4:2e:87:06:c3:b9:75:38:a8:
e6:44:c9:d1:49:fb:a2:e4:0f:0a:1b:2c:7a:29:60:20:7c:54:
bb:e4:f5:6a:89:0a:21:34:47:47:1a:cb:2f:cd:46:e5:eb:e8:
13:fb:d2:66:78:b5:c1:53:c8:ba:fc:51:b6:10:bb:3a:38:3f:
85:5a:1d:09:93:1e:e0:2f:92:68:07:ee:23:3d:5b:5c:7e:fd:
b2:6e:67:11:71:5a:6d:42:b2:08:7c:dc:4f:7c:5e:f8:cb:29:
d9:e4:c1:55:cc:e5:c6:fa:39:3d:c8:38:b5:38:82:7d:a1:81:
83:73:9e:9f:32:fa:33:9e:09:0f:62:03:c9:0f:1a:9e:94:0a:
92:d4:e3:f1:02:e0:03:40:47:56:7d:ea:35:0f:e8:70:f8:09:
31:94:9e:04:cb:7f:bc:2c:cf:93:29:bb:80:b1:71:03:d5:a4:
05:32:68:16:64:7c:bb:ab:72:4d:32:88:71:79:5d:5d:45:55:
6b:ca:21:5c:46:50:fd:d9:17:ca:71:1c:32:18:61:29:d9:b8:
34:44:db:5c:6f:c5:15:32:23:da:5e:b3:8d:5d:c2:bb:1d:64:
fd:96:97:71:8c:42:92:0f:48:25:a7:ba:aa:92:ae:a7:4f:f6:
74:e7:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:25:25 2025 by rpki-client