Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/gaoVzAxyXAFqHTNVDxJoCz_yim4.roa
File: gaoVzAxyXAFqHTNVDxJoCz_yim4.roa (raw, json)
Hash identifier: 2EfBhXhV4ZS822m0FwhPdxUFYPECgLiwIFkmNrKTpi4=
Subject key identifier: 81:AA:15:CC:0C:72:5C:01:6A:1D:33:55:0F:12:68:0B:3F:F2:8A:6E
Certificate issuer: /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial: 0642C3F8
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/gaoVzAxyXAFqHTNVDxJoCz_yim4.roa
Signing time: Sat 01 Jan 2022 14:58:16 +0000
ROA not before: Sat 01 Jan 2022 14:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8218
IP address blocks: 185.75.240.0/23 maxlen: 23
2a05:5504:3::/48 maxlen: 48
2a05:5504:6::/48 maxlen: 48
2a05:5504:9::/48 maxlen: 48
2a05:5504:1::/48 maxlen: 48
2a05:5504:11::/48 maxlen: 48
2a05:5504:4::/48 maxlen: 48
2a05:5504:7::/48 maxlen: 48
2a05:5504:2::/48 maxlen: 48
2a05:5504:5::/48 maxlen: 48
2a05:5504:8::/48 maxlen: 48
2a05:5504:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105038840 (0x642c3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Validity
Not Before: Jan 1 14:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81aa15cc0c725c016a1d33550f12680b3ff28a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:ae:dc:75:06:13:de:b7:97:41:34:dc:57:
28:29:8a:a7:7a:3d:c3:a5:12:73:d7:13:02:3d:d6:
7a:bd:28:2b:2a:d8:77:2c:62:4d:d5:86:d9:98:78:
1b:e3:2a:19:0d:b3:15:69:ca:08:af:c6:a7:dd:1c:
99:d2:70:91:f0:b6:cd:59:22:c8:a4:44:f9:16:5b:
fc:a7:9a:d7:23:8a:26:a0:1c:1f:ae:42:f0:0d:56:
4e:31:1c:5d:2e:33:31:f8:b6:88:21:9a:78:e0:af:
b6:ce:3e:75:6d:71:16:d5:16:41:ca:7e:d6:78:75:
75:5c:61:a7:7b:d8:d7:d1:3b:52:1f:7d:0e:eb:25:
2a:94:80:e3:3f:b1:3d:80:11:91:81:5e:5e:2e:0f:
88:2b:2d:f9:62:6d:c8:f6:d8:44:49:bd:5b:71:9f:
d0:0d:2f:aa:9b:c6:14:ae:00:70:71:e8:e9:5e:fe:
78:cf:dc:62:e9:dc:f1:d0:19:b4:19:d7:f1:4e:17:
25:ab:b2:f8:0b:de:0b:a7:c4:4a:87:ea:c3:93:83:
e2:cc:45:a0:b8:83:ce:60:99:f1:0c:aa:4f:1b:b1:
cc:dd:ba:77:93:c2:59:db:b8:98:26:83:bc:9d:c7:
54:7b:af:0a:c7:7a:4f:52:12:f2:23:83:14:60:19:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:15:CC:0C:72:5C:01:6A:1D:33:55:0F:12:68:0B:3F:F2:8A:6E
X509v3 Authority Key Identifier:
keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/gaoVzAxyXAFqHTNVDxJoCz_yim4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.240.0/23
IPv6:
2a05:5504:1::-2a05:5504:9:ffff:ffff:ffff:ffff:ffff
2a05:5504:10::/47
Signature Algorithm: sha256WithRSAEncryption
bf:da:e4:bd:30:fb:ec:19:23:78:31:65:cc:82:98:b0:e8:ba:
90:e6:3a:94:f1:79:ba:d7:67:04:6a:83:28:6f:f6:16:c5:58:
0b:33:7e:31:d0:98:b1:5f:22:4f:de:65:7d:8c:f5:de:fb:22:
70:ca:02:8c:18:1f:82:6a:4c:e1:07:eb:46:9a:af:08:e5:8c:
f6:1d:36:ab:82:31:b6:4b:af:27:38:61:e8:78:7f:3e:81:53:
8e:41:b7:86:56:41:03:65:83:40:f2:e3:0d:d8:f2:f6:6f:f4:
fd:0d:91:fa:a6:18:7a:1e:98:3e:fe:78:f2:9a:ce:ea:68:a8:
65:cf:01:a3:68:d6:93:2d:30:14:12:1d:fc:99:50:a1:e5:13:
24:84:1c:86:13:34:6f:62:17:36:91:de:9b:fa:f5:3a:63:60:
d0:28:ee:63:04:f4:a7:0e:c6:48:c8:1c:85:57:dd:a8:47:f7:
82:cb:18:4e:48:d3:dd:d2:a5:8d:8b:0f:f1:76:9e:b0:5e:fd:
bd:76:46:b5:81:59:f9:3b:f9:e0:f3:00:ae:68:f3:63:73:9d:
a7:12:8b:fc:b1:f7:58:37:97:5c:5e:27:98:3f:bc:4a:57:c2:
fc:68:95:06:b2:71:19:c5:d3:fa:3f:a2:cf:12:b8:f5:ed:b6:
ff:93:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:34 2025 by rpki-client