Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/DHF4t5PSRpk6qWKPy2mALhrDjIE.roa
File: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (raw, json)
Hash identifier: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=
Subject key identifier: 0C:71:78:B7:93:D2:46:99:3A:A9:62:8F:CB:69:80:2E:1A:C3:8C:81
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 01942686E19C212E16047D519EF6003D7CD2
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/DHF4t5PSRpk6qWKPy2mALhrDjIE.roa
Signing time: Thu 02 Jan 2025 10:19:21 +0000
ROA not before: Thu 02 Jan 2025 10:19:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203839
IP address blocks: 185.122.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:86:e1:9c:21:2e:16:04:7d:51:9e:f6:00:3d:7c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 2 10:19:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c7178b793d246993aa9628fcb69802e1ac38c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5d:47:a3:df:8a:08:b3:65:d2:9d:4a:8a:93:
7f:16:31:7f:45:4a:34:0a:e1:1a:30:85:f2:c1:c2:
fd:87:b2:67:6b:c0:2f:0a:49:db:b8:c3:01:64:06:
4a:22:04:5a:6b:0f:57:a8:24:7d:59:b1:62:36:61:
60:e5:47:75:d5:34:9a:10:82:2a:03:75:4e:0e:65:
5c:5e:55:2d:14:ca:92:f1:39:48:42:84:f4:54:cf:
82:dc:29:fe:71:32:4d:3c:36:df:78:47:e0:cd:0c:
4b:6a:c8:d7:12:eb:70:39:10:60:ad:52:a4:5d:eb:
ff:02:88:f0:2b:14:88:4b:82:4d:be:47:28:92:6b:
6b:8a:e5:88:0d:15:bb:e2:31:ec:22:cf:01:b3:be:
72:59:9e:68:de:e8:2c:81:b4:b3:3e:46:bf:1b:16:
ba:8e:57:ba:99:de:5d:c8:e3:fb:3e:86:c9:b6:12:
d5:3c:9f:b6:4d:63:40:04:c9:ad:8f:ff:2d:c3:6a:
ed:f8:28:90:24:af:e8:b6:5c:87:68:7e:51:e4:1b:
2f:de:8f:fe:07:71:3a:1b:aa:ce:4c:6f:fc:1a:7d:
9e:49:5b:63:24:b7:d6:f9:46:83:aa:d6:5c:7a:be:
51:82:2e:06:b3:17:f5:7f:56:36:d4:3e:7c:84:b7:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:71:78:B7:93:D2:46:99:3A:A9:62:8F:CB:69:80:2E:1A:C3:8C:81
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/DHF4t5PSRpk6qWKPy2mALhrDjIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.112.0/22
Signature Algorithm: sha256WithRSAEncryption
24:43:87:89:a5:d0:85:c3:46:a8:70:86:ce:63:0f:59:79:9d:
c2:69:e0:f8:e5:d9:32:f6:63:64:e3:84:60:87:15:9e:d7:af:
89:c0:4c:c1:ef:a9:4f:7e:f2:4c:c1:4e:35:be:93:0b:34:dd:
b8:f3:c7:38:38:c6:ea:18:28:b7:9d:72:e4:11:45:14:f8:6b:
4c:11:44:e8:c3:6d:b7:cc:10:f5:ee:13:7f:8a:a3:ee:33:7a:
69:f8:1f:b2:e4:aa:3c:50:17:4a:ca:73:0e:eb:f9:aa:53:55:
33:6c:21:20:74:5c:5c:b1:1b:a8:f6:ba:1d:6e:53:85:15:8b:
71:2d:78:72:92:59:31:a9:15:60:e4:cc:26:32:86:85:db:35:
03:b3:58:55:a8:9a:d3:c1:30:b5:42:89:ab:b2:6b:34:a8:6f:
d8:ef:8b:78:79:f0:1b:34:6a:61:c0:5d:79:36:39:9e:90:e0:
9d:18:92:c4:ed:8a:24:43:3a:fb:db:be:71:95:9c:fc:01:4c:
6d:f4:29:b7:5d:97:c4:18:fd:d2:81:f2:8b:00:fa:3b:cb:4e:
61:4c:45:ea:f2:ae:9d:83:f0:8b:84:ae:ae:98:92:ec:3a:1d:
d9:df:52:79:9a:79:b5:62:3e:89:96:b8:31:19:32:1b:c9:a7:
0f:36:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:59 2025 by rpki-client