Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/c4p_BLGDdzUFuqYC6ja2kzX9b0I.roa
File: c4p_BLGDdzUFuqYC6ja2kzX9b0I.roa (raw, json)
Hash identifier: dXosFZE0EOcrP/UCssuaodno9goL3jWbyQg+dVTcJCQ=
Subject key identifier: 73:8A:7F:04:B1:83:77:35:05:BA:A6:02:EA:36:B6:93:35:FD:6F:42
Certificate issuer: /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial: 0194274813DD356BF61D023A5E05AAAC4CCD
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/c4p_BLGDdzUFuqYC6ja2kzX9b0I.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206706
IP address blocks: 185.228.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:13:dd:35:6b:f6:1d:02:3a:5e:05:aa:ac:4c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=738a7f04b183773505baa602ea36b69335fd6f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:e8:20:51:27:d3:f2:b2:67:38:f8:f0:e0:
ac:2e:d4:bd:29:13:83:a2:81:70:96:0e:4f:3e:4c:
47:aa:0b:3e:9f:91:86:74:d5:9a:48:cb:ce:43:e2:
dc:10:9b:30:bb:69:e2:5a:3d:08:46:4e:d6:da:94:
00:de:a5:cd:c3:da:97:c4:bf:cb:eb:b1:3a:db:da:
ef:a5:7f:a3:3a:9c:37:7a:cf:80:6c:f4:3b:e2:41:
db:ca:e9:f5:c2:83:7b:16:0c:06:12:19:62:41:fa:
7b:dd:17:a3:ec:22:bc:70:3e:f0:b1:e2:bd:4f:95:
fc:c2:d9:c0:2c:75:4b:b4:dc:35:4c:40:8d:82:4c:
2f:90:a2:41:79:f9:ec:42:01:6a:f9:27:7a:b6:ad:
0c:d5:e2:c1:72:98:d8:1a:ac:a4:34:8c:aa:55:a9:
de:44:2d:c0:1d:a5:a3:61:18:13:7a:0e:a4:f9:f5:
7b:90:b3:9a:2c:3e:23:fe:1d:27:46:b9:9f:9b:dd:
db:97:9c:00:81:70:cc:56:e9:b3:a4:66:f8:7e:aa:
a1:54:31:4d:4b:30:07:1d:61:fd:62:77:e6:b2:b4:
60:b7:09:bb:1b:7c:80:48:c6:84:63:56:d1:3f:d8:
44:1c:b5:ad:25:07:81:6e:44:aa:59:e3:f3:54:19:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:7F:04:B1:83:77:35:05:BA:A6:02:EA:36:B6:93:35:FD:6F:42
X509v3 Authority Key Identifier:
keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/c4p_BLGDdzUFuqYC6ja2kzX9b0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.249.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c2:cb:2e:e3:d5:46:d7:46:58:a7:2f:33:fa:ab:a3:30:34:
cc:ce:d5:07:fe:bf:11:3e:48:39:fe:4f:6e:39:79:64:ac:38:
70:44:93:3e:2e:3b:7c:73:57:a2:6d:a1:33:aa:c9:4c:af:34:
e6:ed:05:58:33:50:67:8b:78:12:88:a6:64:95:e9:44:da:5c:
29:19:eb:cb:37:f4:2d:bf:5e:f9:23:78:0e:34:23:2c:b0:5b:
3b:57:27:52:d0:8c:45:86:96:e7:7f:74:0c:d2:fa:8d:c2:ff:
00:c5:7b:62:29:b1:3f:30:7a:0c:86:79:d9:21:26:dd:bc:85:
b3:a4:c4:aa:e1:2e:5c:ae:d2:6d:7e:c3:58:d1:cf:1e:6d:9b:
3d:0c:e0:7c:18:97:4f:12:88:bd:30:88:c8:02:01:ed:72:c3:
4c:6e:0c:ed:1b:06:15:2a:0f:7d:d3:7f:a3:e8:78:12:af:5e:
96:98:30:2b:26:88:2a:2e:34:dd:50:43:78:2b:50:98:db:78:
c4:6f:a8:1f:09:5e:7c:31:03:ed:ce:46:af:a0:26:40:a3:fb:
3c:1e:f9:24:8a:a1:92:28:d7:2c:9a:1c:81:cf:c2:d2:9b:85:
46:44:a4:50:31:d2:20:ea:e7:92:6c:a4:5b:35:50:84:51:2f:
15:7f:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:13 2025 by rpki-client