Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/ar9nZIGwi2DhhokEeZ0Cb06cevE.roa
File: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (raw, json)
Hash identifier: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=
Subject key identifier: 6A:BF:67:64:81:B0:8B:60:E1:86:89:04:79:9D:02:6F:4E:9C:7A:F1
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 0195F3491D43DD1AF22ADCF93A032669277F
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/ar9nZIGwi2DhhokEeZ0Cb06cevE.roa
Signing time: Tue 01 Apr 2025 21:36:49 +0000
ROA not before: Tue 01 Apr 2025 21:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61275
IP address blocks: 185.251.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f3:49:1d:43:dd:1a:f2:2a:dc:f9:3a:03:26:69:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Apr 1 21:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6abf676481b08b60e1868904799d026f4e9c7af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:43:59:ac:d2:5a:ed:fd:76:64:59:8f:36:5e:
4f:19:cd:e3:1d:46:f2:1d:3e:81:c3:3e:25:88:86:
4a:cd:19:45:17:21:94:ca:f8:b2:3d:68:8a:34:55:
2f:73:00:c7:45:22:a5:a2:97:f7:e8:d7:3a:29:9e:
71:6d:79:7d:45:b4:f9:f5:99:c4:c7:64:f6:ac:d0:
d3:d6:25:7b:6c:60:26:b0:9b:6c:0b:d7:6b:bb:5e:
0e:33:11:86:63:15:6f:dc:0a:ab:79:2a:05:78:ee:
2c:dc:49:2b:68:92:b3:f7:e4:78:26:6d:e3:4e:55:
93:ae:1d:25:3f:b1:f6:75:6a:4f:ca:ee:06:4d:f9:
ad:cc:d4:49:90:3f:82:da:4f:38:b6:8d:4f:22:a1:
b3:e0:9f:8a:4f:4f:c9:4b:e5:3e:ce:46:78:74:d5:
94:2c:84:0e:05:09:5b:ab:bf:3a:5c:a0:c7:b5:ac:
01:7f:73:16:0e:52:18:6d:02:d7:8c:6d:52:67:d9:
6d:92:62:20:82:9c:d0:24:79:5a:84:d8:93:72:43:
55:17:be:3b:94:b0:84:8c:dc:cc:15:aa:1c:92:54:
9d:68:a0:a6:7e:8f:5e:0e:0e:a4:26:8e:54:70:38:
bc:98:b0:b4:cc:d7:b1:4e:4c:31:5a:a8:23:5c:42:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:67:64:81:B0:8B:60:E1:86:89:04:79:9D:02:6F:4E:9C:7A:F1
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/ar9nZIGwi2DhhokEeZ0Cb06cevE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:a5:16:a1:07:bd:72:ea:76:7c:0f:48:ec:e6:d8:0f:7f:5a:
1a:08:88:a2:bb:b1:0f:61:7b:1d:c0:ae:27:37:4f:58:21:b7:
e1:81:1a:7c:6a:9a:2e:09:2c:b9:2c:80:51:60:4e:77:f8:62:
42:f8:a0:8d:7b:c0:ac:2c:c9:98:61:43:11:28:60:25:d9:1a:
75:a0:47:37:66:a1:f9:47:84:85:8a:a2:2f:2d:5a:3d:e6:c8:
8c:8f:2f:07:2a:31:c1:70:83:f7:7e:d2:41:ca:b2:4f:b7:92:
8a:31:72:4c:ac:d1:c0:d2:f5:cb:cb:b6:81:63:d4:16:31:07:
01:95:a6:7c:4f:57:c8:18:99:b7:82:fd:62:9c:db:26:61:e0:
29:50:c3:b9:23:90:19:e1:fe:46:6e:0d:00:49:8c:79:20:db:
55:1f:a9:dd:90:d2:ab:9b:68:2e:8a:3c:22:77:7e:fb:fc:f3:
5c:e9:20:72:55:c5:a1:72:99:73:97:fb:09:e0:d9:5e:85:9a:
1e:d2:7f:d4:25:18:05:e9:87:d5:d2:fa:66:45:28:9d:fd:f5:
e6:22:23:4b:16:7d:b6:c8:2d:27:15:45:c1:36:4f:2a:27:8d:
b7:fa:50:d5:99:b4:9b:e6:f4:71:34:ca:ff:60:c7:62:da:4a:
df:50:9b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net