Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/7xDyuzwf2JBogicNs1WCGieFUKo.roa
File: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (raw, json)
Hash identifier: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=
Subject key identifier: EF:10:F2:BB:3C:1F:D8:90:68:82:27:0D:B3:55:82:1A:27:85:50:AA
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 019426D99D83384FF7FC40958EA950E8EEEF
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/7xDyuzwf2JBogicNs1WCGieFUKo.roa
Signing time: Thu 02 Jan 2025 11:49:43 +0000
ROA not before: Thu 02 Jan 2025 11:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211991
IP address blocks: 185.233.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9d:83:38:4f:f7:fc:40:95:8e:a9:50:e8:ee:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef10f2bb3c1fd8906882270db355821a278550aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:61:0b:b7:3f:4c:c7:5a:98:70:6c:71:64:
f1:64:6a:76:12:8c:4e:ae:3b:59:73:ad:6e:21:0a:
42:58:60:b7:21:d4:3a:76:8c:74:54:fd:0e:6a:d6:
15:f2:00:58:79:e1:e1:16:81:f7:4e:84:4a:93:c0:
0a:05:f9:5d:8e:2d:46:64:6c:0d:56:d9:0c:d9:72:
f2:d9:b3:87:48:c7:67:0b:14:ac:19:7e:49:52:c2:
a3:ec:6a:cc:b1:b1:61:f0:c4:c5:49:b7:2b:76:7e:
44:39:03:51:d2:ac:c3:aa:42:14:db:a9:a2:87:94:
7d:9c:84:c1:cb:e6:61:1a:65:ec:3c:bd:96:31:7a:
fb:1a:01:f2:cd:6f:5e:7c:2a:82:8d:db:84:c3:fb:
ce:6f:ca:cd:a8:66:18:0a:4b:45:69:2b:6c:df:51:
24:59:c3:d7:a1:ab:5a:3b:c3:ff:6e:6a:66:7b:68:
eb:b8:88:07:c7:2f:a7:13:fc:3f:2c:90:0b:10:be:
5f:e5:e0:6e:8a:0c:81:db:a7:6d:8f:91:fb:87:3c:
65:4d:8a:cd:d8:b8:1c:9b:67:f0:e4:45:ef:74:ca:
7a:ce:24:b1:07:9e:48:f9:92:0b:f7:13:49:56:05:
7b:b4:7c:aa:33:a7:89:4a:51:c4:3e:e8:3b:df:e1:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:10:F2:BB:3C:1F:D8:90:68:82:27:0D:B3:55:82:1A:27:85:50:AA
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/7xDyuzwf2JBogicNs1WCGieFUKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.65.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9b:32:ec:7d:cc:8e:1a:29:f7:8b:0e:ce:3b:73:30:bb:d2:
54:3b:1e:6a:72:e3:36:b8:55:04:40:36:e8:88:b0:1a:ff:cc:
34:6a:34:c1:85:56:91:f0:92:c8:0d:5d:17:fa:2d:a1:4d:59:
0a:92:a9:83:e2:e5:50:b8:a2:c2:46:ac:bd:ed:5e:ef:6d:53:
56:46:1e:d5:0b:68:d5:92:d3:66:2d:0b:83:c0:90:0a:d0:5c:
01:7b:60:04:a2:ed:15:49:8b:ba:bd:a8:39:0f:7c:c1:2f:bb:
52:a0:bd:a9:7d:dd:15:74:74:60:52:78:58:8c:39:37:e3:c0:
2a:68:ff:c1:f1:95:66:47:c0:f6:d9:a8:e5:d2:45:c7:e2:d4:
9f:0f:d8:f0:f9:67:1c:7d:cf:77:2d:d7:94:34:af:0c:c4:de:
22:93:57:e8:d2:12:29:1d:17:70:8a:bb:96:81:ff:7c:ea:7a:
79:66:f9:8c:49:ac:ab:48:6d:56:e1:98:df:eb:37:7d:4e:5c:
96:ba:05:2d:ca:ca:f4:4a:83:29:cc:60:50:fb:80:7a:01:34:
cc:34:3b:1e:b6:02:42:8d:bf:cc:f7:8e:75:18:8a:5a:a2:05:
ea:bc:81:82:94:15:c2:99:85:4c:2d:fd:26:2c:ca:f3:9b:91:
0c:44:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:25 2025 by rpki-client