Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/Kjp895gnYVsoK6RcSFd7GaUkEn4.roa
File: Kjp895gnYVsoK6RcSFd7GaUkEn4.roa (raw, json)
Hash identifier: JRuOISGrpqVf683TavmpfSxbpuh3ALVSAvIrSPqnic0=
Subject key identifier: 2A:3A:7C:F7:98:27:61:5B:28:2B:A4:5C:48:57:7B:19:A5:24:12:7E
Certificate issuer: /CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Certificate serial: 010AE4
Authority key identifier: CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/Kjp895gnYVsoK6RcSFd7GaUkEn4.roa
Signing time: Wed 26 Jan 2022 18:28:13 +0000
ROA not before: Wed 26 Jan 2022 18:28:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 185.214.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68324 (0x10ae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Validity
Not Before: Jan 26 18:28:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a3a7cf79827615b282ba45c48577b19a524127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:cd:8e:9a:0d:52:49:38:32:a5:64:56:16:
3b:80:b6:08:e0:13:28:0a:42:e4:3d:e9:ae:24:61:
20:ca:1b:ee:eb:31:32:28:bc:bc:36:65:67:ae:fa:
9c:75:7f:98:90:e4:36:3d:b2:3a:3e:91:e9:08:50:
b4:c1:0c:bb:9b:43:ca:98:f3:98:c5:98:8e:87:59:
de:fc:0b:04:3b:ab:ee:98:7a:24:5f:6b:ee:95:84:
07:f3:81:77:d2:e8:22:6d:85:ac:b0:a9:42:71:32:
96:dc:24:02:07:3d:0a:0e:33:f7:dc:f6:f0:64:73:
1b:62:28:ea:bf:a2:e8:29:b7:5f:22:cf:51:e7:91:
5d:27:d8:ef:bc:84:71:52:34:4c:c4:95:9a:f0:c9:
10:ed:df:3b:68:99:99:88:b7:a2:55:2b:48:0d:7f:
10:d2:fc:4d:81:e3:31:49:6a:00:01:65:8e:2d:24:
d3:92:80:29:71:89:b2:19:cb:e4:75:17:06:3e:50:
b3:dd:19:85:fb:ec:b9:13:6e:b4:d6:e2:16:7e:70:
68:76:08:8e:83:7f:41:f8:ed:18:69:3d:b0:33:02:
d2:dd:73:55:06:40:45:eb:7a:13:8a:ed:89:56:03:
78:bb:a5:02:1b:4a:ca:09:5c:8d:f9:35:c5:99:6f:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3A:7C:F7:98:27:61:5B:28:2B:A4:5C:48:57:7B:19:A5:24:12:7E
X509v3 Authority Key Identifier:
keyid:CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/Kjp895gnYVsoK6RcSFd7GaUkEn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9c:1e:c6:f0:02:59:ae:07:4f:19:06:ad:84:6d:cb:b4:ff:
8c:7b:3e:fe:f2:cd:f8:47:4f:8d:78:c3:3c:21:f3:11:c8:3d:
d0:94:24:6b:58:5f:40:be:b1:e0:eb:f4:05:18:e6:33:78:62:
48:0b:86:e8:54:62:8d:3f:67:ea:fd:fc:0d:f0:ee:8a:92:28:
be:d9:64:3d:69:e8:e4:84:dd:ea:a4:ce:66:06:a9:9e:e5:a5:
91:d6:6d:67:04:5c:5a:6e:fb:4b:00:90:fe:69:32:bc:bf:cb:
ef:17:7f:7d:4b:9d:88:c7:65:7e:86:a0:f7:2a:d5:47:aa:8c:
68:30:63:0a:b7:d2:27:02:bf:63:14:b9:a2:0e:48:83:02:3d:
b1:de:5b:b9:c3:21:5c:f5:fb:51:d2:99:57:7a:d9:a9:98:d3:
62:17:15:1d:4d:12:ea:07:60:6a:95:98:4d:3f:c8:a3:ca:cd:
3c:d9:59:da:57:80:7f:df:3f:36:2a:c3:cd:1f:63:16:fc:03:
32:e1:4f:76:c5:b3:b9:47:94:fb:89:1b:6e:01:48:56:1a:35:
06:06:b6:5a:cb:c6:7a:aa:16:42:90:b4:d6:19:ce:9e:74:36:
b6:84:f9:f9:9c:a1:6f:1f:2f:98:ad:5e:cf:95:43:3f:30:77:
ea:dc:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:18 2025 by rpki-client