Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/xgDkR70LRIPmfq_Xy9NKKSoM674.roa
File: xgDkR70LRIPmfq_Xy9NKKSoM674.roa (raw, json)
Hash identifier: ksJ1rEAIdGNGDDTTMVvnKwIlW+IACo3l2+nmWb0gIro=
Subject key identifier: C6:00:E4:47:BD:0B:44:83:E6:7E:AF:D7:CB:D3:4A:29:2A:0C:EB:BE
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 018CC94FF2C18D2C9B28C2664E56D1F66DD2
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/xgDkR70LRIPmfq_Xy9NKKSoM674.roa
Signing time: Tue 02 Jan 2024 08:35:09 +0000
ROA not before: Tue 02 Jan 2024 08:35:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210906
IP address blocks: 185.47.92.0/22 maxlen: 22
185.7.236.0/24 maxlen: 24
185.211.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4f:f2:c1:8d:2c:9b:28:c2:66:4e:56:d1:f6:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 2 08:35:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c600e447bd0b4483e67eafd7cbd34a292a0cebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:2b:fc:b9:2b:3f:b3:db:81:b3:a4:32:e4:
79:79:4f:83:52:50:2f:4f:7b:ff:01:2e:63:f5:17:
8b:eb:a5:23:7a:6f:c8:67:a7:5b:10:90:39:79:b3:
58:18:c9:5f:62:5a:cb:2e:4a:18:a8:83:af:d0:3b:
74:96:d1:42:a6:79:e9:35:d5:7f:17:d6:80:97:cf:
c1:f0:97:b2:bd:50:c4:61:5d:df:10:92:d1:3c:9e:
89:48:e2:50:a0:fc:21:4a:db:4b:76:58:bc:d5:69:
f3:58:e5:db:34:a0:a4:c1:89:ba:75:ac:32:c5:3e:
dc:3d:a0:f5:bc:9c:84:59:56:09:af:ff:9e:26:2d:
9d:46:66:04:46:c0:47:be:85:fd:5e:5e:48:bb:3a:
2c:bf:87:d0:66:f1:26:3c:aa:3f:b2:1c:78:82:78:
79:ff:ed:50:db:cf:9c:d3:fb:a2:2a:9c:8b:c8:14:
e8:ce:73:48:ce:aa:d2:29:cf:37:27:3c:dc:79:f6:
cb:b1:3a:00:43:27:c3:f6:11:a8:0f:13:dd:bf:f1:
c5:38:7e:45:f5:37:98:2b:5b:54:8c:5a:42:91:91:
19:dd:bf:6d:f6:36:2e:2e:ed:a4:53:17:ee:ec:16:
67:2e:79:63:0c:b6:f5:cc:64:1d:76:5f:86:8d:6f:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:E4:47:BD:0B:44:83:E6:7E:AF:D7:CB:D3:4A:29:2A:0C:EB:BE
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/xgDkR70LRIPmfq_Xy9NKKSoM674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.236.0/24
185.47.92.0/22
185.211.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:23:33:4a:79:2e:a8:9f:2b:ae:ea:c6:90:a5:04:2e:12:20:
0d:43:d4:ee:63:82:0c:b2:c9:4c:6d:c1:20:97:9a:96:6c:29:
d5:82:1f:5c:d9:4f:66:c8:9a:37:58:b9:d7:92:64:92:2c:08:
a6:8e:fa:31:77:49:6e:ac:b8:21:52:7f:2d:fa:f0:27:72:cf:
66:2d:37:74:92:03:ff:9a:a7:0f:e5:3e:54:42:93:84:a6:a5:
31:24:a7:6b:73:d0:56:bd:00:02:c5:a7:7b:ef:8d:10:a6:af:
18:f6:c8:84:52:30:8c:3f:76:ab:3c:90:44:12:7b:23:ed:7b:
18:20:1c:70:58:70:34:98:ba:09:d2:02:b2:59:85:f0:91:67:
77:71:2d:84:dc:df:09:0b:3d:66:25:83:ac:0b:da:53:10:7d:
cb:0c:9e:7f:57:68:7c:08:93:5f:b0:c0:4a:a8:2f:c3:1b:8a:
b6:35:41:5b:53:c3:01:79:2e:3f:26:53:da:6b:2a:05:43:63:
35:68:a7:4a:3b:34:6b:d2:7c:48:ef:6f:92:a4:4a:19:60:f9:
26:09:ad:c8:d7:ac:0b:cb:77:0d:12:e5:b4:5e:03:2b:8b:49:
d9:ac:ef:fb:f5:b2:2d:7e:e9:f0:e3:f8:49:87:03:3a:42:2e:
80:af:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:35 2025 by rpki-client