Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-BWZ8s44E_tW71dqL2_OK4wEulU.roa
File: 1-BWZ8s44E_tW71dqL2_OK4wEulU.roa (raw, json)
Hash identifier: +77MB3wq++u29Cx9EyxXjFh+H5ZvNqbg2yJvk1UsUYs=
Subject key identifier: F8:15:99:F2:CE:38:13:FB:56:EF:57:6A:2F:6F:CE:2B:8C:04:BA:55
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222052BC5AB07C7850370889F40DAA46
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-BWZ8s44E_tW71dqL2_OK4wEulU.roa
Signing time: Wed 01 Jan 2025 13:48:51 +0000
ROA not before: Wed 01 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213920
IP address blocks: 185.225.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:52:bc:5a:b0:7c:78:50:37:08:89:f4:0d:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f81599f2ce3813fb56ef576a2f6fce2b8c04ba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:4d:c0:03:fd:f2:8a:8c:94:58:75:7c:f1:
84:84:73:39:6f:dc:c4:bb:3a:30:70:2d:51:3b:69:
73:ae:01:10:5a:17:8e:4f:e0:31:ed:08:c8:e3:23:
9b:15:d4:27:22:5b:67:27:25:d2:98:32:6e:81:f6:
b5:e1:56:ab:a4:65:7f:00:43:c7:c9:46:69:72:50:
40:10:89:40:62:43:4b:16:79:50:bc:d3:c7:9e:30:
d3:33:1f:4a:b7:e6:28:9c:71:94:a2:af:34:94:e6:
8d:7d:18:18:37:b5:91:ce:f5:a7:1f:af:a1:c2:6f:
15:9d:de:80:86:26:a4:ed:69:1b:2d:e0:0d:4e:c8:
87:8f:2f:89:69:db:cf:5b:58:30:c8:f1:21:53:83:
da:59:b5:d0:d2:8f:bc:d2:38:30:36:9b:2d:f2:f7:
cb:5c:3d:a4:8b:19:38:a4:6d:f3:2f:b0:0f:0d:38:
53:20:1e:6a:85:94:a5:57:d9:a4:49:b6:ee:d8:1d:
0f:e0:54:51:4a:b1:db:2b:32:98:55:66:7c:fd:40:
50:df:87:3d:0f:8a:38:c5:cf:b9:93:88:31:f8:fc:
56:98:b2:0d:d8:51:00:b5:77:ce:13:fd:f0:9b:d5:
fe:fa:ba:28:38:53:7c:f2:0c:33:ca:8f:29:aa:b3:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:15:99:F2:CE:38:13:FB:56:EF:57:6A:2F:6F:CE:2B:8C:04:BA:55
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-BWZ8s44E_tW71dqL2_OK4wEulU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.22.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2d:28:fd:ff:ec:fc:bf:a9:c4:4d:26:e8:3b:55:8b:d8:b5:
cc:43:12:b6:31:57:7a:6f:0c:fd:56:aa:4e:4e:65:db:b4:bf:
03:64:97:d0:dd:a9:b0:9e:f9:9e:84:4b:4b:b9:25:95:08:18:
9a:0c:17:bd:fe:bd:45:1d:1b:96:33:03:09:09:cf:7c:b8:74:
09:3b:e7:5a:c9:9f:81:7f:0d:79:d0:51:d2:a4:b8:08:18:2d:
5b:c0:8b:4f:e5:fc:ef:9c:05:23:9d:54:1b:b4:1c:65:70:69:
35:24:f9:4b:e2:a4:34:39:98:7d:b8:60:86:5a:01:70:26:36:
92:1c:6b:86:94:a5:f7:41:e7:50:d5:42:de:96:5b:50:39:49:
fc:cc:6e:40:e9:6a:a7:99:92:10:79:f7:94:c9:00:90:17:eb:
f5:7b:f8:bf:00:6d:11:ab:89:b7:ba:e7:92:6c:15:b7:64:5d:
4c:de:44:5c:30:cc:c2:8a:ef:fb:68:71:02:93:4d:63:82:b8:
51:12:94:22:d7:e8:6a:a2:8f:8b:bd:cd:96:7b:14:fd:98:a7:
53:21:89:67:63:d1:53:bf:99:91:21:a2:f1:75:5a:0b:fa:04:
12:73:84:1e:05:be:4f:39:d3:84:2c:a6:b2:22:a2:e7:ca:d2:
b8:66:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:07:22 2025 by rpki-client