Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/2UjFuvX2L2HlHVOmk25UEQM1MLc.roa
File: 2UjFuvX2L2HlHVOmk25UEQM1MLc.roa (raw, json)
Hash identifier: odRGaS3NSeDU4+y0dTYULctzz3tKEI89Jzkjz2YezM0=
Subject key identifier: D9:48:C5:BA:F5:F6:2F:61:E5:1D:53:A6:93:6E:54:11:03:35:30:B7
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 0188FE0B5B3BFAB581FDB6382BACDC501CD9
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/2UjFuvX2L2HlHVOmk25UEQM1MLc.roa
Signing time: Tue 27 Jun 2023 18:08:57 +0000
ROA not before: Tue 27 Jun 2023 18:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 185.217.5.0/24 maxlen: 24
2a12:f8c1:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fe:0b:5b:3b:fa:b5:81:fd:b6:38:2b:ac:dc:50:1c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jun 27 18:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d948c5baf5f62f61e51d53a6936e5411033530b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:08:db:db:f3:1f:43:eb:bc:b4:24:23:e5:
5b:a5:4f:18:81:6d:64:5f:2b:82:28:7a:b8:93:68:
53:1c:ec:19:30:3c:37:de:6c:ce:77:7a:db:1e:ee:
92:27:c9:d8:d2:ea:46:cc:be:df:89:0d:72:23:3c:
14:b7:a9:2f:fc:80:59:b4:6d:24:e1:d4:c5:c6:d4:
3d:f6:24:cb:c9:b1:b6:45:18:3a:49:6f:c9:2c:fb:
3f:bf:bf:27:33:39:02:f2:60:3d:28:82:d6:ee:97:
73:ee:24:9b:b3:10:62:33:51:90:ae:dc:f2:e2:59:
fa:e0:c2:72:9f:4f:4f:18:9a:55:26:61:ac:6f:21:
af:c4:d3:2a:a1:b7:50:8a:7f:13:dd:e9:70:e5:5b:
55:91:36:93:e4:40:c7:4f:db:5f:aa:2e:d3:84:87:
a0:8d:60:83:92:f3:3d:e5:c1:74:f8:19:2f:cd:1a:
88:71:77:c5:02:8b:f1:32:42:57:58:05:40:ba:4c:
dc:ca:c0:f7:c0:04:c6:06:06:28:4f:35:e6:f9:b3:
7e:5b:3f:d6:d7:ad:32:5c:a1:96:f4:a0:eb:46:c6:
b0:5e:5f:b6:92:5b:be:e1:6f:17:b7:a0:df:ba:ff:
8f:9c:38:04:a4:2c:5d:e3:f7:a1:c7:ec:6f:6b:e9:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:C5:BA:F5:F6:2F:61:E5:1D:53:A6:93:6E:54:11:03:35:30:B7
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/2UjFuvX2L2HlHVOmk25UEQM1MLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.5.0/24
IPv6:
2a12:f8c1:100::/40
Signature Algorithm: sha256WithRSAEncryption
32:48:a9:49:ba:53:94:8b:19:ba:65:ff:7d:c9:c7:97:0f:46:
25:9d:35:61:af:54:d3:a6:9a:74:96:5b:5e:46:e5:02:ef:f9:
01:d9:f8:e3:eb:78:62:8e:88:01:a2:ff:98:de:0c:19:a4:37:
eb:44:7e:6c:54:d8:93:cd:15:f1:64:64:18:a5:b0:65:e4:e0:
56:18:9c:f1:69:23:3a:25:89:e8:5e:3b:0d:28:cb:00:49:cb:
89:3c:4a:d4:0e:eb:d9:23:fb:3a:90:39:bf:a3:3a:a2:8c:61:
76:be:83:ff:07:52:95:35:e9:f4:55:94:9e:3d:a4:04:ae:03:
7e:40:91:20:f2:c9:ac:8f:de:23:32:ba:03:26:1d:c8:70:9e:
22:94:dd:31:9d:bc:a1:52:a6:74:0a:e4:e2:bb:3e:e7:15:e2:
63:06:ec:79:03:f5:b0:b5:41:3f:43:d0:2f:51:c3:be:cf:f9:
ed:5d:e9:38:14:96:0c:09:a4:06:48:f5:52:09:04:01:d6:0f:
5c:c4:a3:6d:25:44:96:2e:cd:0f:66:38:fd:9f:89:f4:fc:d2:
11:3d:49:11:e0:6d:33:3d:f8:b5:03:37:f2:9d:f1:2f:07:9f:
7f:aa:5c:72:53:da:84:b9:fe:0c:74:73:3e:a8:bd:ce:d4:7d:
65:33:46:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:05 2025 by rpki-client