Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/Etlzvle51jjXW5LXkP4Cwlea1Zg.roa
File: Etlzvle51jjXW5LXkP4Cwlea1Zg.roa (raw, json)
Hash identifier: 9LZBKe93STKxz5If1O6W6bK3uw0P7SGv5FY/seDK1HQ=
Subject key identifier: 12:D9:73:BE:57:B9:D6:38:D7:5B:92:D7:90:FE:02:C2:57:9A:D5:98
Certificate issuer: /CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Certificate serial: FDBF32
Authority key identifier: B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/Etlzvle51jjXW5LXkP4Cwlea1Zg.roa
Signing time: Sat 01 Jan 2022 12:02:36 +0000
ROA not before: Sat 01 Jan 2022 12:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.251.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16629554 (0xfdbf32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Validity
Not Before: Jan 1 12:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d973be57b9d638d75b92d790fe02c2579ad598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:55:9f:cb:f4:22:40:8b:b4:62:c6:71:2c:
61:ff:d4:ce:2b:a3:8a:1e:45:f1:f3:dc:fc:7d:d7:
97:0f:3d:e8:6a:af:ab:52:0c:66:f6:f5:70:76:48:
ee:b4:56:44:7a:20:95:fd:60:05:4c:67:25:ba:e1:
d1:cb:a2:bb:a5:85:a4:75:fc:54:c1:ea:5b:91:9d:
24:71:f1:41:dc:2d:46:4e:24:ad:32:ea:96:9a:1c:
f0:41:1a:54:ba:16:08:41:ec:fe:ca:a0:26:85:b5:
6f:5c:1b:e1:d9:30:02:66:73:e9:ec:ea:ca:e2:18:
c3:3c:7a:1d:cd:c4:b3:e1:32:be:b6:46:64:fd:86:
94:b2:ca:26:5f:76:d2:d5:28:10:44:bb:c7:46:ac:
09:72:11:92:c4:6b:08:31:85:8c:78:78:dc:a2:9f:
08:18:90:43:cc:a5:26:72:89:98:18:e8:a8:65:5c:
15:ac:22:38:6d:ab:b8:aa:a3:5f:44:31:e8:04:6a:
77:63:78:46:d4:99:26:91:4a:5a:45:2b:72:80:61:
d9:15:3a:4b:35:b5:81:36:c3:9d:f8:ed:b1:64:69:
c9:9a:d1:55:e7:74:ff:6f:c4:85:9d:d0:1a:58:ba:
2b:0c:bb:6b:84:9b:bc:35:fd:0e:64:01:47:2d:53:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:73:BE:57:B9:D6:38:D7:5B:92:D7:90:FE:02:C2:57:9A:D5:98
X509v3 Authority Key Identifier:
keyid:B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/Etlzvle51jjXW5LXkP4Cwlea1Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
35:29:70:da:b0:b0:81:01:aa:38:df:05:d7:0c:8e:7b:8a:37:
d8:0f:49:f2:c8:e7:d5:99:7e:74:77:41:6f:c2:02:68:c4:84:
20:44:6c:3b:d4:4e:42:0c:61:0f:8c:76:db:b7:56:29:59:aa:
69:2f:77:3b:e3:b5:4c:29:b0:ab:c3:8b:13:9e:1d:16:c2:59:
ed:15:56:43:cb:a8:a2:4c:82:8c:c7:69:84:33:d9:9a:e7:aa:
1d:e8:93:63:ab:98:45:61:e3:91:ac:31:f7:27:67:65:83:50:
72:74:53:17:08:a7:28:8e:35:e6:e7:7f:a0:e7:70:7f:02:d4:
8a:ee:16:1e:62:be:cf:d8:d2:d3:91:c3:26:8c:06:92:7f:1e:
ce:27:00:7f:f8:eb:34:8b:70:d1:21:64:3c:e6:40:3e:89:8d:
3f:8a:42:73:41:5e:7c:11:38:af:64:c4:7d:0b:53:4c:5f:90:
01:97:78:00:d4:8f:ea:62:60:39:1a:f3:ec:b9:94:23:54:b5:
a2:2f:b5:e5:6a:6b:5b:5a:3a:57:7a:c9:bb:00:1e:6d:90:af:
af:b0:0a:f6:47:d8:f1:7d:ba:7b:d2:ba:d3:0f:f0:65:2a:8f:
f6:03:54:b2:95:7d:89:19:15:ed:6f:4c:c4:fb:11:d8:e7:09:
cd:dc:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:35:17 2025 by rpki-client