Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa
File: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (raw, json)
Hash identifier: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=
Subject key identifier: 6C:CB:31:2C:B4:BE:EA:63:77:77:74:D5:06:13:4C:AA:09:F3:E4:04
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 019424B3B213474A781AE63062DF7FAB4E48
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61295
IP address blocks: 185.241.215.0/24 maxlen: 24
2a0c:bf80::/48 maxlen: 48
2a0c:bf81::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b2:13:47:4a:78:1a:e6:30:62:df:7f:ab:4e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ccb312cb4beea63777774d506134caa09f3e404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:11:ea:73:d7:31:74:57:35:fb:ab:b8:b2:
ee:80:db:4e:4f:28:5b:ab:d7:08:51:90:32:2a:04:
50:0e:a2:49:86:29:9f:59:24:81:1c:c1:9d:74:26:
3e:13:7a:8b:c8:c4:ef:95:10:38:4c:07:c6:f0:94:
78:ea:79:c9:0b:ad:fc:3f:49:85:03:e3:bf:cd:ad:
67:a4:08:0e:b7:9f:04:85:4c:3c:4d:ac:da:d1:64:
18:4e:a6:92:6b:76:01:12:68:83:80:7b:4b:b3:a5:
e9:45:17:45:5a:3e:ac:98:40:ed:c6:db:2c:20:d4:
fb:d9:3a:36:62:fc:91:e8:1c:e9:94:d1:48:6d:69:
d8:4d:a9:7c:36:c0:a9:66:b1:31:31:57:34:22:c9:
82:73:f3:d1:96:23:85:a6:39:67:8e:80:d1:5f:b7:
a6:d7:4f:f8:4d:a7:09:d8:a6:bd:e4:95:21:ac:65:
60:8c:93:52:4a:f9:fe:1b:e8:73:44:c3:8f:a8:b3:
3d:1c:6f:34:da:e6:92:4c:98:1c:ab:a7:9b:37:6f:
58:b0:b1:62:a2:df:0d:80:b4:f7:26:13:bc:84:5f:
79:91:7d:08:8e:7e:7d:59:ee:f7:14:cf:d8:d7:04:
40:94:85:2a:13:6c:6d:39:c0:32:7c:47:63:70:6b:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:31:2C:B4:BE:EA:63:77:77:74:D5:06:13:4C:AA:09:F3:E4:04
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.215.0/24
IPv6:
2a0c:bf80::/48
2a0c:bf81::/48
Signature Algorithm: sha256WithRSAEncryption
b0:13:35:f7:ef:b1:a7:08:2b:c5:12:f4:c0:62:24:20:4d:2f:
df:57:de:f1:e1:60:58:eb:b1:82:62:c3:62:af:b4:9c:54:1a:
1e:20:22:f2:53:f2:14:23:23:af:8f:27:87:aa:dd:3a:67:79:
e2:36:1c:0f:ec:67:30:98:b9:45:58:b9:0f:96:6f:4b:dc:c1:
b7:4a:99:c4:5f:b5:da:a8:2f:f8:33:87:23:de:b1:f4:07:50:
4b:32:f9:53:eb:48:c9:9b:40:50:ad:88:40:ec:28:77:fb:fa:
7a:f7:c0:01:8b:e8:43:a1:f3:6b:c4:b4:dc:f8:f8:8b:1a:a7:
2e:bd:80:e0:a3:56:48:55:c7:d5:10:1c:c5:67:a4:61:18:b4:
d5:50:8d:55:8b:75:a7:07:00:ca:09:ab:d0:83:5e:e8:57:48:
40:78:ed:c5:83:2e:df:cb:a0:3a:42:7b:fb:c7:4f:91:8e:c5:
c7:08:0c:73:42:2d:c4:3c:a2:b6:ed:dd:5c:61:cc:db:03:03:
6c:3a:3c:c9:1d:77:58:95:b5:a2:b7:44:05:be:53:88:d3:18:
23:4b:21:de:7c:8c:5c:87:92:21:29:31:da:f4:f5:20:bd:df:
cb:0a:b0:73:dd:c2:02:08:b0:5b:26:34:e8:19:f2:fd:ff:5c:
5a:22:9a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:53 2025 by rpki-client