Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dc0c2f-b193-4d0f-8f72-4cbdd25711ee/1/Kl-ughv2EmEhIB3ahgtxYE-Dyck.roa
File: Kl-ughv2EmEhIB3ahgtxYE-Dyck.roa (raw, json)
Hash identifier: s3YU4qAoE5xTiqhN9Ug+LjJ5tNJHF9/+LZpP2G0x/kw=
Subject key identifier: 2A:5F:AE:82:1B:F6:12:61:21:20:1D:DA:86:0B:71:60:4F:83:C9:C9
Certificate issuer: /CN=f0342c3ad92dafd938dc35172585bc341b652015
Certificate serial: 019410A6B94D4E92496313BDF03BF1487DEC
Authority key identifier: F0:34:2C:3A:D9:2D:AF:D9:38:DC:35:17:25:85:BC:34:1B:65:20:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DQsOtktr9k43DUXJYW8NBtlIBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dc0c2f-b193-4d0f-8f72-4cbdd25711ee/1/Kl-ughv2EmEhIB3ahgtxYE-Dyck.roa
Signing time: Sun 29 Dec 2024 04:22:29 +0000
ROA not before: Sun 29 Dec 2024 04:22:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203939
IP address blocks: 185.204.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:10:a6:b9:4d:4e:92:49:63:13:bd:f0:3b:f1:48:7d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0342c3ad92dafd938dc35172585bc341b652015
Validity
Not Before: Dec 29 04:22:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a5fae821bf6126121201dda860b71604f83c9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:67:d1:63:25:30:6a:5d:af:4a:63:76:de:
6e:8c:05:c6:bd:48:f0:15:ec:07:f4:d8:55:97:f8:
a0:69:1a:3d:48:98:ce:6f:ac:56:24:1c:c2:2f:0c:
e4:37:81:8b:74:1d:55:d2:8c:3d:03:f8:dc:ae:9f:
f0:a6:13:7e:03:86:cc:bf:4e:90:cb:48:52:cd:d6:
2b:d0:51:df:44:d5:96:93:cd:ad:07:4e:4a:f3:f3:
24:2a:26:e1:f4:7f:51:0e:66:bf:6d:88:58:30:6c:
15:d8:26:b0:54:33:2a:7a:72:6d:a1:39:2c:27:a8:
4b:0e:c6:59:ca:ec:2e:7d:c5:25:b6:bf:05:dd:f1:
3b:62:eb:9f:a9:d7:a3:03:0c:9e:7b:00:0f:8f:da:
74:d6:8e:d7:66:56:47:b5:46:2c:b0:4c:39:65:68:
e8:ec:76:67:1b:b5:48:c0:fe:59:82:ee:0d:de:29:
05:99:9c:a3:cf:55:e1:e5:57:05:cc:72:d5:9a:4c:
60:41:18:5f:2a:a4:a0:85:5c:8c:a5:89:9c:c6:1c:
99:9d:2f:f9:f8:82:32:9e:7b:3d:30:08:49:d1:d9:
38:4f:f0:ff:cc:9f:7b:97:1f:64:13:71:70:a6:43:
a8:8f:c6:21:7a:c4:6b:ce:43:ef:00:23:2a:5b:72:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5F:AE:82:1B:F6:12:61:21:20:1D:DA:86:0B:71:60:4F:83:C9:C9
X509v3 Authority Key Identifier:
keyid:F0:34:2C:3A:D9:2D:AF:D9:38:DC:35:17:25:85:BC:34:1B:65:20:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DQsOtktr9k43DUXJYW8NBtlIBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc0c2f-b193-4d0f-8f72-4cbdd25711ee/1/Kl-ughv2EmEhIB3ahgtxYE-Dyck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc0c2f-b193-4d0f-8f72-4cbdd25711ee/1/8DQsOtktr9k43DUXJYW8NBtlIBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.14.0/23
Signature Algorithm: sha256WithRSAEncryption
36:38:d1:c5:a1:e7:de:0a:d9:e4:32:bd:7f:77:71:63:82:2a:
b6:1f:5b:93:a9:84:15:8e:e2:23:c9:ad:92:d9:84:4b:e0:8d:
cd:56:3b:82:d5:ec:ef:16:16:9c:cd:42:b2:f6:6f:d8:4a:fc:
4b:10:40:1d:de:68:a0:34:93:e9:f7:06:85:4e:e9:56:2d:12:
12:8e:75:d2:d3:eb:13:62:9b:ed:4f:03:59:26:ea:03:82:0d:
6a:3c:d7:b9:28:d4:c0:df:5a:bd:17:72:91:b7:8a:9f:da:be:
1c:2d:60:09:a3:fa:b9:0d:75:80:08:79:02:06:bd:14:40:81:
7d:c7:95:a5:2d:ae:0e:71:b8:41:6a:41:cd:9e:a0:3c:00:5b:
ca:a4:28:e9:5b:81:4d:93:d0:e0:b2:6b:c0:eb:f4:69:c5:b0:
64:25:77:50:dd:a7:d9:74:92:09:c6:bb:1a:76:e9:3d:64:14:
6d:53:b6:61:1d:ca:f4:fa:ee:be:24:55:7d:d7:30:ab:51:18:
df:9d:fa:d4:65:fe:77:e4:7b:1b:4a:74:0f:92:2a:3a:74:4e:
4c:a2:1d:d7:b1:29:ed:f0:b3:fe:22:8b:4d:07:cf:cc:70:eb:
0b:9b:74:d7:41:28:31:e1:d7:3b:62:0c:9a:c7:f1:88:fd:ab:
a0:bf:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:57 2025 by rpki-client