Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/g1AtdX4-A4stQRdXTWV50haWr_U.roa
File: g1AtdX4-A4stQRdXTWV50haWr_U.roa (raw, json)
Hash identifier: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=
Subject key identifier: 83:50:2D:75:7E:3E:03:8B:2D:41:17:57:4D:65:79:D2:16:96:AF:F5
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019421B229B54C576A8F22A63183F1D8B15C
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/g1AtdX4-A4stQRdXTWV50haWr_U.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31463
IP address blocks: 185.167.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:29:b5:4c:57:6a:8f:22:a6:31:83:f1:d8:b1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83502d757e3e038b2d4117574d6579d21696aff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:6a:37:38:5f:70:49:e1:d0:ed:9b:2a:7f:
40:ad:9f:21:ce:a3:f8:c3:57:e8:01:0d:8f:f1:de:
01:d9:cb:ee:75:34:bf:31:81:49:8f:9a:fd:23:ae:
93:6b:bb:c5:c0:52:84:32:f1:70:19:f8:0b:45:8e:
8e:1f:54:1b:eb:e4:95:80:eb:c4:c9:49:d5:c9:3b:
ce:70:84:d1:ff:97:f2:20:0a:53:c2:04:31:10:5d:
eb:31:54:0f:0f:18:a0:b0:9d:26:e4:57:35:60:57:
ef:6b:3b:22:4c:26:39:76:17:c1:7b:d4:4e:53:f2:
c6:db:9f:05:4a:7e:3e:bd:88:8c:31:7e:4f:09:12:
9e:bc:06:c4:83:a9:26:22:0f:e0:74:69:ba:3b:ec:
b6:84:6a:21:a1:fc:f7:37:39:0b:07:90:ee:cf:47:
2b:3b:ac:c2:6e:89:cc:1f:e1:d0:b7:d5:2c:34:eb:
8e:f5:7b:30:0e:24:15:8d:14:0b:65:d2:22:29:d7:
db:81:0d:c7:98:12:41:65:ab:b9:cf:b1:19:fd:7b:
43:48:8d:54:20:4c:dc:be:29:ac:aa:75:3b:1c:ca:
49:9d:d9:27:fa:47:8f:40:bd:60:a1:99:1a:e1:ac:
c9:11:71:cd:9d:a3:00:a5:5c:45:32:08:f1:c4:7d:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:2D:75:7E:3E:03:8B:2D:41:17:57:4D:65:79:D2:16:96:AF:F5
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/g1AtdX4-A4stQRdXTWV50haWr_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ab:f3:d5:81:57:ba:59:f8:ab:6d:30:ad:25:e8:25:53:03:
bc:2d:d3:0c:d1:03:69:34:50:45:cb:9f:4e:30:60:7e:49:7f:
ce:84:b9:67:a6:f7:72:17:85:6b:43:74:68:45:ec:bd:1b:7b:
91:b7:e2:91:80:bd:b7:25:3d:f6:95:3f:01:34:05:9c:e3:2b:
ce:a9:27:e7:92:09:8e:85:a5:76:00:7e:49:76:7c:7e:b5:70:
7d:83:59:3a:16:5d:06:92:cd:35:b7:9c:e9:bf:fb:0a:b4:c9:
29:f1:93:53:bb:f1:5b:0f:b9:20:af:99:a6:43:43:fe:87:70:
ce:38:ad:77:b3:a9:b3:83:f7:df:2b:da:8e:83:09:31:10:55:
41:69:a8:3a:10:0d:f0:02:c3:ca:c9:cf:d7:58:25:41:92:7a:
c7:23:7b:64:85:81:45:e8:26:82:f6:06:d5:c0:0f:8d:d6:1b:
9f:9b:44:a9:11:bd:fa:c7:da:e4:0f:c5:9c:f9:e3:2d:b1:a5:
ff:5b:47:f7:a4:4e:be:41:41:c5:06:78:26:a5:3d:26:2f:b6:
7d:27:13:00:83:c7:ee:f4:7e:9b:66:f5:45:8b:22:e2:40:af:
b4:66:81:dd:80:e8:80:0e:80:64:35:00:ef:b9:70:45:ac:db:
14:89:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:05 2025 by rpki-client