Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/V5nL5VtuRo1nLN8wcjQEDqgsz9o.roa
File: V5nL5VtuRo1nLN8wcjQEDqgsz9o.roa (raw, json)
Hash identifier: eRiOmjoLI+hybpoDGJ45PPNO/nzigLVQ9RSRjHQv78E=
Subject key identifier: 57:99:CB:E5:5B:6E:46:8D:67:2C:DF:30:72:34:04:0E:A8:2C:CF:DA
Certificate issuer: /CN=0acf0a954639c83582974bd29c1992272b3683a3
Certificate serial: 018572DEF30A5B545A096B4E0CC232F2E35A
Authority key identifier: 0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/V5nL5VtuRo1nLN8wcjQEDqgsz9o.roa
Signing time: Mon 02 Jan 2023 14:24:51 +0000
ROA not before: Mon 02 Jan 2023 14:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.202.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:f3:0a:5b:54:5a:09:6b:4e:0c:c2:32:f2:e3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf0a954639c83582974bd29c1992272b3683a3
Validity
Not Before: Jan 2 14:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5799cbe55b6e468d672cdf307234040ea82ccfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:68:2e:6d:ff:47:32:69:4c:b0:76:74:e9:
da:6a:a4:25:fb:e6:40:96:12:fd:e2:15:de:f5:24:
4e:8c:c0:34:29:1a:b6:ee:95:88:02:f0:57:98:f9:
19:cd:5e:17:d2:e4:fe:9d:f7:08:a8:4a:3f:f2:f4:
59:40:4e:36:f9:a5:01:2a:cf:06:1b:62:82:b0:2c:
e0:87:ed:c8:eb:3a:52:7a:cb:3a:31:a6:71:b3:85:
53:dd:0d:97:e0:ee:6f:45:11:26:f1:94:79:f0:22:
ae:c0:65:58:69:21:8d:bb:30:a0:7e:7b:70:62:d5:
b0:8e:d1:4c:fd:a4:d0:9a:47:30:3d:e9:50:38:a4:
c3:00:14:04:f3:0f:c5:9a:d7:52:10:ed:56:82:d2:
bd:d8:a8:da:13:8b:00:cb:c3:9f:17:4e:07:79:09:
05:0c:0a:6d:18:36:5c:b1:4a:ff:cd:0e:32:9b:2f:
e2:e6:bf:e6:e1:ce:f6:a7:a3:69:d2:98:69:e4:74:
4f:39:70:29:8b:76:22:b9:d3:7f:3b:a6:d5:b8:25:
4a:ee:07:c0:84:d0:83:81:b7:a6:e2:a0:62:d5:14:
9a:75:ee:ff:35:63:c4:98:a4:d1:f8:97:5c:bf:f2:
a1:47:2f:57:9c:14:ef:9e:b4:3a:c4:2f:94:2f:f2:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:99:CB:E5:5B:6E:46:8D:67:2C:DF:30:72:34:04:0E:A8:2C:CF:DA
X509v3 Authority Key Identifier:
keyid:0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/V5nL5VtuRo1nLN8wcjQEDqgsz9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:16:27:b1:a8:f2:0a:6b:ee:a0:a7:a1:ff:8e:a4:f8:59:aa:
67:12:6c:f1:7d:f7:17:1f:38:81:f7:5d:8e:78:56:c2:32:77:
5c:87:a0:84:00:68:9e:d9:21:0d:09:08:c5:8b:98:47:a6:cd:
25:01:40:b0:14:10:8c:4c:b4:00:59:4b:c5:ce:c8:66:28:be:
28:f6:6f:14:c7:bf:f6:b5:c4:d2:9b:53:9a:e8:26:f7:f4:69:
9d:36:6d:9c:37:72:60:34:30:f6:ce:2c:db:a9:d8:33:4c:e3:
1b:61:f3:17:4a:9a:95:65:cf:b7:47:d1:96:c8:cc:86:4d:2b:
9c:eb:56:0e:cd:54:6b:23:64:09:47:fa:53:1b:3b:70:69:7b:
2a:6a:a4:36:2a:da:f7:d6:c3:60:37:7a:c7:07:e0:98:62:92:
68:2d:76:1f:7c:03:c5:b3:fa:da:2c:59:da:eb:2e:ff:61:d2:
0c:79:8c:9f:34:9f:61:06:e0:49:6a:c8:9c:5f:b7:b8:42:ca:
95:b2:fb:78:2b:3a:3f:b0:1d:07:7f:ab:d0:bb:ae:00:ef:55:
a4:0a:7b:a9:dd:b9:5b:68:bb:00:0b:60:f7:8c:99:98:a6:01:
d6:83:3b:fb:c6:b0:84:ce:71:cc:62:bb:14:cb:48:c1:6d:fc:
6c:f2:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:36:15 2025 by rpki-client