Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/D2UlrDijHWiYlM0nhkTxfbuhofk.roa
File: D2UlrDijHWiYlM0nhkTxfbuhofk.roa (raw, json)
Hash identifier: BdPXKWwTdvykfOAqO0GH63fRQX3vCAtriDigG7m5AT8=
Subject key identifier: 0F:65:25:AC:38:A3:1D:68:98:94:CD:27:86:44:F1:7D:BB:A1:A1:F9
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 387CC94C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/D2UlrDijHWiYlM0nhkTxfbuhofk.roa
Signing time: Sat 01 Jan 2022 05:54:16 +0000
ROA not before: Sat 01 Jan 2022 05:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28699
IP address blocks: 185.27.92.0/22 maxlen: 22
109.205.120.0/21 maxlen: 21
109.205.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947702092 (0x387cc94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f6525ac38a31d689894cd278644f17dbba1a1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:ba:b6:ac:19:93:35:2f:54:e1:c0:77:a5:
ee:8b:b8:89:91:15:80:c8:61:6d:9e:09:36:c9:0b:
fc:86:c0:98:8c:8a:96:63:ec:51:d5:32:8f:7b:76:
52:a3:fd:bb:55:ba:2c:e8:bb:08:05:39:7a:5d:db:
a6:ec:e7:38:80:00:2b:d0:8f:15:ae:a6:b0:47:66:
de:d9:65:4a:55:74:fe:9e:5a:c1:03:05:17:70:01:
18:20:8e:1a:87:d3:14:f2:ca:ee:bb:dd:89:3a:e6:
a1:77:31:80:59:8f:a3:83:7d:d7:84:1d:72:13:27:
d9:84:9e:86:d0:77:53:8f:ba:a9:ee:0a:6f:eb:25:
68:33:d8:e8:13:6c:5b:b8:38:1d:6e:62:7f:b8:1a:
0d:69:e4:d1:0b:46:d3:85:9a:07:3f:7d:df:f0:c2:
14:d8:f9:60:ab:ce:af:65:89:e8:bd:c6:9a:98:e1:
42:c7:2b:73:f5:b6:39:7e:c2:25:e7:cc:d9:8d:19:
ac:d1:58:87:20:be:e3:4c:4f:67:f4:65:c3:99:a0:
ef:05:cc:82:c2:64:52:c9:1d:93:ec:f5:ed:d4:b9:
7b:c7:06:77:6c:ea:dd:ed:bd:85:a3:48:70:47:0a:
1b:ef:87:73:05:8b:56:33:d3:f0:10:90:49:7f:92:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:25:AC:38:A3:1D:68:98:94:CD:27:86:44:F1:7D:BB:A1:A1:F9
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/D2UlrDijHWiYlM0nhkTxfbuhofk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.120.0/21
185.27.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:63:0f:eb:a9:43:b4:d7:e2:64:cd:77:2b:c1:ad:d8:fc:aa:
2c:45:ab:e0:70:2c:c8:2f:fd:d1:4f:08:42:ca:b0:e4:ab:60:
1e:4e:06:16:5c:b3:f2:f4:c0:6f:c3:5e:c5:de:0b:98:c9:50:
89:25:80:0d:ea:ba:e9:1b:04:e7:cf:11:8f:6e:03:21:c8:bc:
37:95:65:30:52:2f:a6:64:22:fb:26:12:87:09:34:e0:14:c4:
77:a1:a7:4a:7e:a0:13:ef:ae:64:d7:e8:1c:02:16:59:a8:e9:
bb:0a:00:e4:32:35:94:56:bf:6f:54:b6:a2:ac:0d:7f:d6:d6:
7a:9f:5d:77:e0:4d:83:da:83:a7:b1:31:7a:db:e4:2f:be:fd:
49:67:09:ee:dd:ce:13:1e:9d:4a:0c:a3:cc:22:b1:87:b9:e9:
4c:5e:63:26:c0:fd:77:91:67:7b:cb:87:87:6c:87:18:1e:77:
12:49:4c:af:dd:c4:2e:09:4e:52:cc:57:e0:3e:05:98:c2:1b:
62:46:e5:3c:77:e8:a7:1d:75:dd:4a:8c:76:ff:29:81:7b:61:
80:1c:49:66:a6:0a:27:c1:84:0d:1b:30:4a:6d:7c:7a:d0:f8:
ba:0d:49:ea:e4:92:60:a4:67:7b:22:d6:ca:55:7c:bf:ec:82:
e7:bd:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:06 2025 by rpki-client