Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/gNq-DNUiY_bgRwQyKl_VBvsnRVo.roa
File: gNq-DNUiY_bgRwQyKl_VBvsnRVo.roa (raw, json)
Hash identifier: LAYTr3A4BNdNJDG5RyTTQVu3VDnTzfS+lgoqlIlbVqs=
Subject key identifier: 80:DA:BE:0C:D5:22:63:F6:E0:47:04:32:2A:5F:D5:06:FB:27:45:5A
Certificate issuer: /CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Certificate serial: 018CC3B70C837DC85A195E5B123625D9ABA4
Authority key identifier: CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/gNq-DNUiY_bgRwQyKl_VBvsnRVo.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.214.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0c:83:7d:c8:5a:19:5e:5b:12:36:25:d9:ab:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80dabe0cd52263f6e04704322a5fd506fb27455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:43:a9:e0:f6:14:b0:ee:09:02:b6:b2:b5:
28:2d:52:7c:c5:cf:02:aa:1b:64:8a:8b:0f:48:42:
81:01:6f:fd:56:00:d5:51:7d:db:92:09:9e:81:53:
f3:57:c7:e4:27:2a:a5:5f:ce:a0:3a:01:65:95:78:
ba:4b:97:06:39:4b:12:80:d8:91:4d:32:d9:8a:8f:
2b:1d:5d:24:6b:3b:7e:91:f1:84:8b:5e:65:a8:39:
8a:89:ed:ca:de:c1:26:bf:8f:4a:38:21:9f:80:91:
0c:47:47:23:6e:8f:da:85:5d:c7:52:c6:ce:30:cd:
a8:d1:51:6d:6f:14:3c:d6:3b:d6:68:3d:d9:f6:60:
cc:7f:60:12:4e:c7:bf:b4:22:fe:54:a1:15:a5:7a:
36:15:b2:30:0b:90:1e:f4:e5:c2:2b:10:c0:65:94:
00:84:35:76:6b:65:6b:30:6a:03:49:5d:16:4d:cb:
e2:a6:70:98:3c:31:d1:13:d0:78:14:6e:75:d8:e3:
73:ba:4b:6b:95:97:26:fa:8f:cd:94:e6:44:90:0b:
39:1c:25:2b:1b:84:34:6b:26:34:0f:7f:d9:53:6c:
b3:29:2a:70:03:a5:5f:97:be:95:20:f4:f6:dc:8c:
b6:d7:19:14:01:7a:1d:d6:d2:35:5a:e3:83:20:b8:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DA:BE:0C:D5:22:63:F6:E0:47:04:32:2A:5F:D5:06:FB:27:45:5A
X509v3 Authority Key Identifier:
keyid:CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/gNq-DNUiY_bgRwQyKl_VBvsnRVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.165.0/24
Signature Algorithm: sha256WithRSAEncryption
86:79:cc:76:2b:cc:aa:4a:18:ce:f9:99:78:8b:41:ca:64:88:
b5:00:85:bc:7b:0e:c5:88:d3:c8:ad:fd:89:3a:30:7d:20:f9:
d2:31:ea:fa:f2:5e:9d:ed:a6:be:14:54:fb:0e:7e:52:41:86:
ac:a7:fc:f0:bc:84:47:0e:b6:df:63:c7:29:bd:ce:be:de:c1:
f9:77:22:36:78:44:60:ab:56:41:05:16:96:bb:63:9d:16:46:
66:e1:11:1f:f8:b2:47:ef:77:01:eb:af:be:eb:1f:f6:e9:1c:
50:1b:46:88:9d:ba:3a:5d:5b:70:54:0f:ca:2e:46:94:88:00:
3c:9c:17:24:44:f8:53:69:1b:de:f9:27:e2:12:a9:10:ab:ea:
6f:3f:94:bc:62:e1:4f:71:21:5b:52:2a:47:58:ed:81:9e:cb:
ab:99:4f:3a:9c:9f:47:f7:77:28:9e:93:4a:3d:b1:a6:1d:56:
d2:0c:f1:21:1e:91:6b:cf:c1:e8:f0:2e:83:5b:d8:92:86:ce:
15:45:39:34:af:4f:1c:12:de:f3:64:33:a6:0c:df:ec:b9:65:
6f:7e:c0:d9:35:76:c0:55:ef:97:25:51:1b:f9:f5:d3:a5:05:
52:3a:43:87:b6:6c:af:af:52:99:ca:14:60:b1:a1:58:a2:98:
f2:b5:19:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:22 2025 by rpki-client