Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FsxKxqqbsaVOKOSz6cMIdmtThB0.roa
File: FsxKxqqbsaVOKOSz6cMIdmtThB0.roa (raw, json)
Hash identifier: AgPYilWvA8i/WgeTYR7wxIiwh8DB6YZtAZ2qusm60d4=
Subject key identifier: 16:CC:4A:C6:AA:9B:B1:A5:4E:28:E4:B3:E9:C3:08:76:6B:53:84:1D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422203ADF05D2F18CC39A2CAE745E8AA9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FsxKxqqbsaVOKOSz6cMIdmtThB0.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 185.251.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3a:df:05:d2:f1:8c:c3:9a:2c:ae:74:5e:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16cc4ac6aa9bb1a54e28e4b3e9c308766b53841d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:2c:e6:21:b9:6b:69:ff:ef:87:88:0a:a8:
34:32:bd:b8:c4:85:f4:18:13:b0:02:dd:50:cf:ab:
a2:fc:e4:2d:d5:9e:22:ef:f2:1f:07:1e:ba:b3:e6:
d0:45:4e:af:20:30:35:5f:28:e0:f2:2c:82:a1:93:
4d:56:79:e3:12:9c:0e:36:b9:e7:5d:cb:f1:5b:a9:
a5:fa:da:48:50:6f:77:2f:20:d4:05:90:da:fe:65:
36:fa:4c:43:90:06:f6:de:2f:49:47:22:76:cc:5e:
21:0e:73:51:6d:16:bd:20:5d:4d:8a:c5:8b:cc:c9:
03:b6:ae:04:d9:c1:31:33:3f:0e:91:0b:a1:af:40:
99:60:57:42:7e:96:4a:6f:68:8e:91:04:a8:84:fc:
3d:98:2f:4b:f2:36:6a:96:ee:9e:eb:88:be:07:97:
1e:0f:e0:b6:10:0d:1c:34:59:aa:26:d3:dd:e5:49:
20:48:1f:e2:52:2e:cc:f4:e0:a1:48:c2:a0:7b:53:
30:94:37:18:39:1a:42:7f:68:65:1a:a2:a8:f2:9e:
d4:08:0f:dd:61:2c:5e:89:47:0c:9a:63:93:61:f1:
7f:0f:3f:bd:71:d5:cd:cb:e7:1f:4c:44:8c:fa:68:
85:df:11:21:84:b7:1c:06:d0:98:61:b3:72:a0:20:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:4A:C6:AA:9B:B1:A5:4E:28:E4:B3:E9:C3:08:76:6B:53:84:1D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FsxKxqqbsaVOKOSz6cMIdmtThB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e4:c6:3a:f7:0c:1d:a5:74:f3:f9:54:48:ac:1d:56:59:b4:
3b:c1:20:2e:7c:dd:b2:7d:ae:b6:df:9c:a8:a6:4b:88:6f:e7:
4a:6f:58:e6:79:c9:b1:bb:16:04:25:da:e5:f5:29:b3:11:ff:
ba:0e:da:e1:02:54:c3:8f:f1:96:d0:dd:45:f7:78:2a:4e:57:
db:11:85:80:85:35:0d:81:a9:21:ce:19:be:c8:d1:c3:13:0d:
a8:5e:19:f6:ab:55:6a:a2:09:88:f0:1c:4f:bd:d0:55:7f:10:
4b:f6:ee:d7:7f:95:f8:ec:0c:ab:33:29:aa:86:4d:9c:f8:e0:
2d:12:7e:f1:e2:a3:22:b1:e4:f5:99:4a:5b:3f:3b:14:a3:49:
e3:95:26:51:63:a2:e7:6d:48:4c:d2:9d:11:27:59:70:7f:a4:
63:9a:d1:28:13:88:ca:07:57:67:f0:c0:3b:d9:a0:b5:1f:7b:
10:21:e4:c1:15:1a:04:95:8d:35:a0:27:26:dc:34:44:63:f6:
32:29:aa:02:8d:87:f7:5f:2d:f3:d2:46:03:28:81:0f:04:ff:
9c:a2:71:6e:a8:05:03:9f:70:58:9b:53:00:d3:c0:80:3d:16:
91:74:72:5b:5c:1f:c5:b1:c6:92:09:2c:18:92:0a:cd:24:3e:
ac:07:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:52:57 2025 by rpki-client