Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/cB2GV3lhDMXOaIXUex8JR9eH0nE.roa
File: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (raw, json)
Hash identifier: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=
Subject key identifier: 70:1D:86:57:79:61:0C:C5:CE:68:85:D4:7B:1F:09:47:D7:87:D2:71
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 01951363CD8FE32840C754E42CCE902E3E2C
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/cB2GV3lhDMXOaIXUex8JR9eH0nE.roa
Signing time: Mon 17 Feb 2025 10:11:02 +0000
ROA not before: Mon 17 Feb 2025 10:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51857
IP address blocks: 185.232.212.0/24 maxlen: 24
185.232.213.0/24 maxlen: 24
2001:67c:390::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:63:cd:8f:e3:28:40:c7:54:e4:2c:ce:90:2e:3e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Feb 17 10:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=701d865779610cc5ce6885d47b1f0947d787d271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:51:8f:dc:30:22:63:68:75:ae:a4:0a:06:
79:aa:59:33:3f:6c:3e:39:c2:3a:fc:c1:08:62:70:
7e:14:b6:44:bd:7c:fc:9b:20:f3:0b:7b:7d:60:50:
9e:ff:5d:96:61:83:34:d1:a6:29:b2:16:7a:59:0e:
7f:60:45:0d:59:ee:68:73:4b:04:81:36:39:33:dc:
c2:1f:e9:ac:31:72:2b:48:31:2d:51:41:1f:fe:33:
a9:f1:be:55:32:6d:98:43:7c:d0:06:a3:d6:00:cd:
81:e4:ea:69:76:7b:51:4a:b0:9a:47:ce:82:29:b1:
a5:51:39:86:b0:dd:64:89:98:47:26:a6:c7:76:f8:
c7:2b:ac:21:29:35:ff:72:bf:ff:1b:3e:a0:7b:59:
db:8d:ca:eb:c6:ee:28:08:27:df:33:7d:37:f0:c5:
c5:62:2f:9e:02:a2:65:38:5c:72:68:00:e5:94:ef:
ae:1c:04:9d:bd:51:93:89:0d:20:22:e8:ba:ca:1a:
52:7c:65:1b:0b:79:94:3c:f6:f5:7f:6a:1c:62:13:
15:7e:c6:ab:b1:ec:2c:bf:71:72:58:05:a6:15:d8:
98:01:f5:02:0b:05:e9:83:27:96:84:57:61:80:92:
01:62:93:d1:d9:e6:23:1c:77:21:8a:c9:d8:09:f8:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:86:57:79:61:0C:C5:CE:68:85:D4:7B:1F:09:47:D7:87:D2:71
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/cB2GV3lhDMXOaIXUex8JR9eH0nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.212.0/23
IPv6:
2001:67c:390::/48
Signature Algorithm: sha256WithRSAEncryption
84:6c:60:d2:26:42:3c:11:08:7d:23:93:23:b1:c3:a9:bd:84:
dd:d9:c1:96:1f:ab:14:ec:e4:e4:a8:65:b4:a3:1d:c7:68:ea:
52:02:97:fc:48:60:91:1e:87:e4:92:27:40:47:0e:f7:76:1d:
25:32:4b:cd:cb:1e:c0:ef:8e:f7:f4:db:2d:60:bc:d3:61:94:
4c:21:ce:bf:5b:9b:89:2f:08:0b:b9:81:40:72:c0:f5:09:08:
45:2f:f5:f2:47:72:c4:47:ba:ab:22:61:27:d9:72:6a:37:00:
5e:fb:5a:4c:a2:86:ed:e9:d7:76:ff:b1:46:22:d8:fa:ec:24:
28:43:ba:ff:87:3e:99:0a:58:ec:be:c0:f2:bf:ea:0a:49:c8:
61:c3:7c:12:08:ca:bf:94:b2:14:94:a3:43:93:c1:39:1a:fc:
e1:72:49:fd:5c:4f:c6:b7:ef:1b:d8:4d:e5:39:c7:8b:85:ec:
78:48:29:15:d7:30:29:89:50:93:e2:83:c8:32:b7:20:94:d3:
33:23:ec:d1:8d:c2:a3:de:16:f5:8b:9a:f5:a1:37:6c:ff:2a:
f0:c4:0c:48:46:8a:6c:e1:ea:5c:75:c4:4c:7c:0c:3c:1b:27:
0f:b3:6f:51:70:9e:ee:5a:c5:77:70:4c:49:d3:06:12:ea:01:
03:3f:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net