Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ExusXckLrxsZNqKlfCaNi76wyn8.roa
File: ExusXckLrxsZNqKlfCaNi76wyn8.roa (raw, json)
Hash identifier: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=
Subject key identifier: 13:1B:AC:5D:C9:0B:AF:1B:19:36:A2:A5:7C:26:8D:8B:BE:B0:CA:7F
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019575AAC1B691017B1E74A7E183A3A1C225
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ExusXckLrxsZNqKlfCaNi76wyn8.roa
Signing time: Sat 08 Mar 2025 12:11:19 +0000
ROA not before: Sat 08 Mar 2025 12:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 274024
IP address blocks: 185.83.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:75:aa:c1:b6:91:01:7b:1e:74:a7:e1:83:a3:a1:c2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 8 12:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=131bac5dc90baf1b1936a2a57c268d8bbeb0ca7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:d9:20:e8:75:ee:35:ec:d9:7a:48:ce:b6:
c0:50:7f:66:60:a0:9b:c8:c4:97:fd:c6:a2:43:ea:
20:75:4c:f4:47:f0:a0:06:dc:d8:02:8c:21:c5:54:
27:36:f7:f7:9a:d6:e7:69:23:08:66:9d:45:7c:72:
bb:6b:5f:80:71:bf:0b:5a:df:c2:a1:7a:d2:7c:1e:
2b:c4:a2:18:42:35:a1:a3:ef:ec:c6:f6:32:44:eb:
f2:3e:4e:c9:37:3e:e2:07:b2:76:6a:85:54:a5:aa:
0d:a1:ab:24:de:d9:52:e0:b0:08:38:46:f7:aa:c2:
39:3f:6f:5c:43:36:cb:d8:a1:85:d0:35:b5:a2:59:
92:18:14:52:67:a6:bf:ad:8f:48:c5:12:fc:c6:f7:
fa:ce:43:17:f5:a7:0d:d5:47:ed:fb:54:2e:ee:12:
d5:04:5d:21:32:67:7c:04:ad:d1:a8:02:04:c2:c3:
73:2c:79:b8:d4:df:a8:46:02:e2:62:c8:70:d2:b0:
67:77:f9:64:5d:2b:f1:77:a2:66:0a:ec:7c:11:97:
4b:32:69:73:a6:df:cf:11:61:f0:3a:69:49:51:97:
5b:eb:0c:3a:ee:e0:2c:9b:13:15:b4:f1:a5:65:18:
26:ea:f9:cf:62:fc:2c:ee:52:87:25:96:45:46:9a:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1B:AC:5D:C9:0B:AF:1B:19:36:A2:A5:7C:26:8D:8B:BE:B0:CA:7F
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ExusXckLrxsZNqKlfCaNi76wyn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.200.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:98:f9:1d:98:2e:2c:80:be:b0:c2:bf:71:3c:1c:d4:76:de:
e9:82:a6:6b:19:77:86:cf:f6:29:d2:4f:b8:85:c5:7c:28:b8:
de:9e:de:1a:79:62:cb:1d:a1:53:a5:81:6e:d0:be:66:88:71:
2a:0a:e8:fe:93:0a:47:26:71:8b:26:16:09:4c:c5:07:cc:9a:
15:d2:42:2f:18:51:75:d4:63:38:ee:9a:e0:46:02:3e:03:68:
c5:19:6c:a7:6a:af:86:4d:be:9a:8b:10:1b:2a:02:b6:e5:bc:
29:77:89:96:d0:83:41:fd:7a:99:a7:46:3c:62:52:0d:e2:da:
d3:18:72:5a:3c:b2:00:94:b1:74:78:46:6d:7d:90:e8:aa:4b:
61:ed:e8:0e:74:65:c0:4b:2c:0b:b1:52:f6:ff:63:6e:da:4b:
1e:f0:cf:c3:e0:44:d8:a2:e4:bf:52:87:bf:84:a5:75:35:a1:
f4:79:ac:68:40:ae:2a:5a:9e:a3:bd:3d:ad:3a:01:dd:fd:00:
e5:fc:b5:e7:6f:52:7b:3e:50:e8:02:fd:04:a1:7f:1e:83:ff:
90:5f:5b:58:ce:f1:fe:3c:fb:51:9f:09:a6:ab:25:65:6b:ba:
26:3d:50:6b:08:64:3e:a7:cc:16:7c:f7:53:61:65:3c:27:6e:
27:a4:0c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:39 2025 by rpki-client