Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/9myXlljA6lb2bQhdVjTaQXzC-eA.roa
File: 9myXlljA6lb2bQhdVjTaQXzC-eA.roa (raw, json)
Hash identifier: 9FiBNMVpCcBIv3Gl7ffclJJEFclk9T31CtHxC9nLeyY=
Subject key identifier: F6:6C:97:96:58:C0:EA:56:F6:6D:08:5D:56:34:DA:41:7C:C2:F9:E0
Certificate issuer: /CN=daa1708726d32349bfbb2a120f58daa20d1d2cca
Certificate serial: 018607E4AD3C51D14F26D42FD0E8ECBFEB30
Authority key identifier: DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qFwhybTI0m_uyoSD1jaog0dLMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/9myXlljA6lb2bQhdVjTaQXzC-eA.roa
Signing time: Tue 31 Jan 2023 12:54:32 +0000
ROA not before: Tue 31 Jan 2023 12:54:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60064
IP address blocks: 185.155.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:e4:ad:3c:51:d1:4f:26:d4:2f:d0:e8:ec:bf:eb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa1708726d32349bfbb2a120f58daa20d1d2cca
Validity
Not Before: Jan 31 12:54:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f66c979658c0ea56f66d085d5634da417cc2f9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:20:92:b4:60:f0:f8:19:34:9c:29:16:05:
d6:18:ea:5a:40:38:c3:ca:36:8a:5f:e6:ab:2e:7c:
0e:0b:da:34:73:97:97:e7:0f:1b:09:6f:51:60:f6:
f7:ec:47:22:f5:f6:8a:db:e1:33:49:72:6d:b3:b0:
88:c3:f8:e4:c7:46:32:39:13:9d:c6:2c:43:bc:68:
7f:a6:bc:15:ff:a1:61:2b:d7:05:3b:80:77:1f:94:
45:20:04:a7:7b:c7:83:9b:30:ea:5f:89:b4:84:29:
90:87:07:00:7f:e1:e7:75:c3:74:6e:53:f4:6b:59:
f9:83:94:b1:c9:aa:45:1b:4d:ad:04:fa:02:18:dc:
98:19:87:d5:ae:cf:3a:e2:c2:92:8f:59:f9:4b:b0:
4e:f9:95:19:e8:c3:85:92:4f:73:d2:b8:08:d6:89:
d9:48:a4:f6:ad:8a:84:b2:01:6b:28:a2:36:3b:2d:
23:38:33:53:fa:93:1b:68:37:59:be:ee:2a:44:35:
79:a2:81:ea:36:ca:ef:f6:79:51:1a:bd:79:27:6d:
fb:a7:c3:bd:27:d6:f5:86:0d:24:d9:76:be:9e:c2:
58:7e:24:07:cc:b7:5b:a8:26:9f:21:e0:71:a2:f5:
5a:9b:42:7d:d9:e4:ae:0a:8c:7a:8f:18:e6:7f:6a:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6C:97:96:58:C0:EA:56:F6:6D:08:5D:56:34:DA:41:7C:C2:F9:E0
X509v3 Authority Key Identifier:
keyid:DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qFwhybTI0m_uyoSD1jaog0dLMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/9myXlljA6lb2bQhdVjTaQXzC-eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:36:8d:be:e3:97:c0:53:71:21:dc:44:a1:54:c8:1e:e4:f9:
27:4c:a5:4a:f6:19:41:62:31:5f:6b:6f:6e:dc:b6:57:e1:99:
3b:d1:ff:c4:84:03:85:32:5a:ab:60:47:bf:ab:4f:9c:ea:68:
47:a7:36:e3:50:00:0f:1c:da:8f:ea:59:c2:07:0e:09:2f:67:
92:d1:05:31:90:10:f7:e2:30:8c:be:de:9c:42:de:87:ed:c5:
71:d0:09:e3:07:c7:3b:db:2f:b4:98:d6:33:c7:cd:97:39:89:
11:27:92:1c:fb:ab:9a:72:fa:1d:b3:af:a8:75:80:df:5f:06:
43:6d:a7:2e:a6:ec:14:c3:fe:ec:20:80:57:4d:1c:58:20:f7:
76:f3:37:9b:78:cc:db:0b:e8:31:bf:d9:c0:ca:75:90:6b:f0:
b8:04:63:cb:63:7f:47:a8:ed:6f:13:15:05:ef:e2:ed:5c:4f:
5e:77:1e:6d:75:7f:5a:e4:a9:72:d0:cb:a0:c8:9a:b6:84:af:
00:b4:2a:02:b3:89:51:ad:54:93:1d:0e:c4:86:2b:d6:de:2f:
fd:f6:1a:c3:7e:7b:23:81:46:cc:67:af:d9:cf:62:27:96:bc:
2c:4f:9a:0f:4a:05:23:3e:3e:02:11:7d:49:6e:5b:89:09:dc:
fc:89:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:24 2025 by rpki-client