Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/J6nx8tvPhz6MpIQYGrzlZ7-Z2u0.roa
File: J6nx8tvPhz6MpIQYGrzlZ7-Z2u0.roa (raw, json)
Hash identifier: taeAsLjUqFaK3bP/zpX3hjOu/JPq7ubJZazASppuLbs=
Subject key identifier: 27:A9:F1:F2:DB:CF:87:3E:8C:A4:84:18:1A:BC:E5:67:BF:99:DA:ED
Certificate issuer: /CN=16de8a33a02cfe8fff75d0980f559771c93febd4
Certificate serial: 018AB3EB4DC7466AF63CE53B28CC729D1D01
Authority key identifier: 16:DE:8A:33:A0:2C:FE:8F:FF:75:D0:98:0F:55:97:71:C9:3F:EB:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ft6KM6As_o__ddCYD1WXcck_69Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/J6nx8tvPhz6MpIQYGrzlZ7-Z2u0.roa
Signing time: Wed 20 Sep 2023 18:47:37 +0000
ROA not before: Wed 20 Sep 2023 18:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.188.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:eb:4d:c7:46:6a:f6:3c:e5:3b:28:cc:72:9d:1d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16de8a33a02cfe8fff75d0980f559771c93febd4
Validity
Not Before: Sep 20 18:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27a9f1f2dbcf873e8ca484181abce567bf99daed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:50:4d:b5:f1:e9:9e:0c:94:47:83:54:7c:
bd:3c:b8:f8:f5:41:21:39:65:f3:d5:6a:33:f7:3f:
9d:1f:31:3b:53:df:26:21:48:15:c4:30:71:f4:b1:
66:85:e7:2b:e4:01:a0:92:b1:9d:21:6d:49:18:b9:
42:08:43:83:dd:4b:33:6a:1f:d0:23:b5:9d:92:d4:
4c:3a:19:72:d7:a8:b0:a7:78:29:d4:0b:5e:ce:b9:
ec:df:db:4e:36:d1:57:c5:b4:b1:05:77:56:f0:1d:
7e:9a:44:2a:b1:3c:16:97:be:06:9f:d8:96:28:c5:
b6:87:78:5d:59:f7:f0:dd:7e:0f:cf:2a:24:63:f0:
31:56:14:f3:e5:89:30:45:e8:4f:5c:73:c3:b8:1f:
0a:51:4e:29:6c:47:35:53:4d:db:61:7f:39:15:11:
36:cb:7d:e7:77:6d:31:cc:17:e0:dd:02:68:b1:a3:
f8:93:de:34:15:4d:4b:2f:30:5f:4d:b5:f3:68:29:
61:4f:9a:90:a1:b7:2f:1d:ca:6b:be:29:5b:39:f9:
f2:4f:f5:3b:5d:0d:81:7c:33:6d:cd:c5:b6:55:07:
0f:27:86:3e:10:bd:ad:97:6c:d7:cc:c0:38:51:1a:
3e:38:fb:45:72:d3:2c:37:df:2e:74:7a:c1:e0:34:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A9:F1:F2:DB:CF:87:3E:8C:A4:84:18:1A:BC:E5:67:BF:99:DA:ED
X509v3 Authority Key Identifier:
keyid:16:DE:8A:33:A0:2C:FE:8F:FF:75:D0:98:0F:55:97:71:C9:3F:EB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ft6KM6As_o__ddCYD1WXcck_69Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/J6nx8tvPhz6MpIQYGrzlZ7-Z2u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/Ft6KM6As_o__ddCYD1WXcck_69Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.31.0/24
Signature Algorithm: sha256WithRSAEncryption
03:84:7e:5e:d9:59:5e:2c:7a:a5:c1:a5:f2:19:2e:8b:46:3a:
dc:8d:9c:c0:53:4f:8c:d1:07:94:42:82:5d:ef:db:16:76:57:
a8:d6:c2:e6:7a:62:77:ec:a6:e1:eb:2b:f1:ec:85:2a:60:37:
bc:44:a1:38:c8:1e:c7:ed:8e:3d:34:a1:65:4d:be:6b:bc:22:
b0:41:27:94:b0:6a:50:7d:e0:a9:1f:4b:d3:bb:a8:d3:62:62:
f6:76:16:0c:da:ba:4d:de:3b:a1:80:8f:f4:f5:d2:f5:ae:f9:
c8:67:ba:24:01:8a:84:d4:7c:21:b8:60:99:71:e2:3f:1a:85:
25:0e:bd:14:4f:99:38:4a:c6:db:b4:c8:8a:eb:04:64:2e:22:
59:71:f2:96:a5:ef:dd:11:bf:80:5c:29:5a:d0:0c:59:c7:6e:
9c:9f:79:5b:7b:5d:4e:81:53:32:8c:ee:11:78:12:87:6b:6d:
25:9a:6c:62:1c:f3:da:34:d5:c2:29:24:94:d7:50:ac:81:ff:
4e:eb:3b:57:17:31:e7:6f:b8:91:15:db:39:04:99:90:e5:68:
0b:dd:e9:ab:59:0e:d9:05:3d:45:d8:b0:d6:44:e0:92:bf:42:
2d:09:70:27:f5:b8:b5:93:9b:94:1b:f3:bd:d5:84:22:d5:6d:
b6:87:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:15:37 2025 by rpki-client