Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a31768-d44a-474a-8514-0c5d7031ffad/1/Xxn6-TJ1b8MMaD3xrhlgO8AbMvg.roa
File: Xxn6-TJ1b8MMaD3xrhlgO8AbMvg.roa (raw, json)
Hash identifier: B1t/1kYBKCsSngjpooR8XEiIMCbv5FVL0BJjuDMmjXk=
Subject key identifier: 5F:19:FA:F9:32:75:6F:C3:0C:68:3D:F1:AE:19:60:3B:C0:1B:32:F8
Certificate issuer: /CN=ce0b298e1e2b300469070d1c10ccaea6f1f80ae2
Certificate serial: 01856FF9708C44845A8E7BDAB61BF3DACA00
Authority key identifier: CE:0B:29:8E:1E:2B:30:04:69:07:0D:1C:10:CC:AE:A6:F1:F8:0A:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgspjh4rMARpBw0cEMyupvH4CuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a31768-d44a-474a-8514-0c5d7031ffad/1/Xxn6-TJ1b8MMaD3xrhlgO8AbMvg.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 185.251.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:70:8c:44:84:5a:8e:7b:da:b6:1b:f3:da:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce0b298e1e2b300469070d1c10ccaea6f1f80ae2
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f19faf932756fc30c683df1ae19603bc01b32f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:29:6c:95:ef:67:08:60:d0:47:63:01:6f:
41:6c:26:a7:f0:59:1a:93:ef:e8:7d:93:f0:b5:90:
b6:f1:3a:88:0a:16:46:c8:e0:29:75:ca:92:ad:b9:
e2:d8:73:0e:39:64:de:23:8d:b0:9e:cb:5a:0d:ba:
3b:36:df:ff:86:fb:f1:71:fe:fb:a6:67:4c:68:7d:
b4:cb:e0:91:13:0d:4a:2b:28:71:ca:30:af:44:73:
d6:be:42:04:b3:8b:63:79:7f:ac:2d:54:c8:ce:ad:
c1:32:04:34:a2:26:57:d4:4b:4c:1b:4b:e8:ce:aa:
7e:4d:a8:1a:80:48:0e:a5:1b:e4:09:f3:ba:f6:95:
d2:62:e2:02:dd:e0:35:68:ff:e2:5d:41:b1:6d:9e:
37:c1:ab:bf:f6:14:59:f0:be:e4:cd:af:af:2b:5b:
a7:bd:f9:54:d0:6d:f8:32:9e:ef:e6:ed:7f:25:31:
7c:38:40:4b:6c:d0:e4:44:c6:ba:e9:6c:b5:15:03:
5f:eb:d6:cc:4d:98:89:73:4f:39:4c:f8:21:43:9e:
de:99:f4:c1:14:b4:3d:cb:2a:2c:8a:ac:81:49:d0:
b2:5b:fa:68:d7:71:98:6c:dc:84:84:ae:18:02:75:
0c:b2:cb:9c:74:44:2b:a6:02:78:e8:af:70:b4:75:
3c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:FA:F9:32:75:6F:C3:0C:68:3D:F1:AE:19:60:3B:C0:1B:32:F8
X509v3 Authority Key Identifier:
keyid:CE:0B:29:8E:1E:2B:30:04:69:07:0D:1C:10:CC:AE:A6:F1:F8:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgspjh4rMARpBw0cEMyupvH4CuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a31768-d44a-474a-8514-0c5d7031ffad/1/Xxn6-TJ1b8MMaD3xrhlgO8AbMvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a31768-d44a-474a-8514-0c5d7031ffad/1/zgspjh4rMARpBw0cEMyupvH4CuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.19.0/24
Signature Algorithm: sha256WithRSAEncryption
63:87:ab:ec:1e:80:e1:32:d7:5c:c3:48:9f:b4:3a:0b:82:78:
bf:2a:d5:70:99:c9:a7:83:45:68:a2:5f:7a:af:b6:74:49:db:
9a:5d:2b:40:9d:01:70:3c:4b:96:ce:fe:52:68:46:56:d6:21:
7a:4b:40:b6:7f:53:12:7d:b0:24:b4:8e:7f:32:9e:37:9c:d2:
71:c0:1b:c4:ed:72:27:9a:79:2c:a7:30:7d:3e:2f:e0:2a:8d:
9a:d0:8e:a3:ba:d2:23:e5:a4:94:8a:bf:4c:24:d0:42:7f:82:
93:d0:1a:af:35:48:4d:d5:6d:ee:39:98:cf:f7:f7:21:e7:ff:
50:74:6f:49:cb:75:55:4c:d5:b6:4d:5d:de:32:06:b2:d4:03:
42:de:d0:d3:76:64:63:22:3f:1d:91:37:f1:0f:71:e5:bc:10:
29:86:14:03:9d:9a:c3:88:bf:78:5b:03:c5:12:4a:9f:a2:f2:
86:7c:1e:23:8e:c5:8e:8a:72:72:3a:4e:4f:22:bf:5f:a5:f9:
01:79:5b:d7:e0:70:71:4d:8a:90:2e:86:19:dd:21:1c:d3:25:
9a:ce:32:9a:2f:f4:02:81:d8:e4:1e:61:a1:17:8d:ee:fe:3b:
af:60:77:8f:d0:94:43:20:f2:78:f6:3e:36:84:ba:20:51:3f:
35:1a:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:06:09 2025 by rpki-client