Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/DjcU-mvtL17iCMeQA64SH6b1VHg.roa
File: DjcU-mvtL17iCMeQA64SH6b1VHg.roa (raw, json)
Hash identifier: pvCCsbT1kzyCJRv65hA/7wPsKhYHCqSQJgNdYwEn+dU=
Subject key identifier: 0E:37:14:FA:6B:ED:2F:5E:E2:08:C7:90:03:AE:12:1F:A6:F5:54:78
Certificate issuer: /CN=1187c516e7f6f173f0bcceb4b24ba9127120b54b
Certificate serial: 020F4D38
Authority key identifier: 11:87:C5:16:E7:F6:F1:73:F0:BC:CE:B4:B2:4B:A9:12:71:20:B5:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYfFFuf28XPwvM60skupEnEgtUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/DjcU-mvtL17iCMeQA64SH6b1VHg.roa
Signing time: Sat 01 Jan 2022 15:02:17 +0000
ROA not before: Sat 01 Jan 2022 15:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.228.120.0/24 maxlen: 24
185.228.120.0/22 maxlen: 24
185.228.121.0/24 maxlen: 24
185.113.186.0/24 maxlen: 24
185.113.185.0/24 maxlen: 24
185.113.184.0/24 maxlen: 24
185.113.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34557240 (0x20f4d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1187c516e7f6f173f0bcceb4b24ba9127120b54b
Validity
Not Before: Jan 1 15:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e3714fa6bed2f5ee208c79003ae121fa6f55478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:98:5c:b1:34:21:cf:0f:1b:28:e5:4b:1e:
ed:95:3f:68:7e:29:f8:af:89:5a:b8:dd:ff:35:fc:
9a:8e:bf:34:0d:42:4e:e4:72:43:00:52:4f:a3:18:
df:a2:b2:53:f7:93:c0:21:f0:c3:34:38:76:8f:7f:
f6:54:c9:e5:39:f1:da:3c:5a:ba:c0:8f:f3:93:cd:
ff:2b:29:be:c4:1f:b5:6d:4b:97:5d:49:e2:4e:e7:
d5:b1:73:2d:35:47:3b:98:60:e1:90:48:47:3a:8c:
e8:3a:08:e7:98:e1:49:e4:02:f9:38:97:51:4b:4c:
ca:3c:a8:32:40:b2:52:82:3f:3b:06:9c:a4:86:2b:
1d:79:5b:76:cb:93:c4:67:2c:26:93:7f:68:ad:da:
9d:58:df:b4:a1:59:bc:12:35:53:bb:f0:65:e9:ad:
26:bb:49:29:69:1c:17:8a:cc:d4:90:f6:5b:bc:27:
81:03:82:5e:62:4e:4b:52:5a:34:08:1f:8b:0d:f5:
8f:b2:d1:bb:0a:42:ae:fa:cc:40:fc:77:c4:dc:a0:
91:af:9e:5c:49:07:d5:23:63:84:d0:6c:65:2d:f1:
d9:5f:fe:8d:b4:b5:f9:a1:a6:80:e2:19:b4:d2:b4:
60:38:28:6a:cf:07:56:0d:93:d1:71:ef:c5:09:fb:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:37:14:FA:6B:ED:2F:5E:E2:08:C7:90:03:AE:12:1F:A6:F5:54:78
X509v3 Authority Key Identifier:
keyid:11:87:C5:16:E7:F6:F1:73:F0:BC:CE:B4:B2:4B:A9:12:71:20:B5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYfFFuf28XPwvM60skupEnEgtUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/DjcU-mvtL17iCMeQA64SH6b1VHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/EYfFFuf28XPwvM60skupEnEgtUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.184.0/22
185.228.120.0/22
Signature Algorithm: sha256WithRSAEncryption
31:bf:b4:82:5a:98:b7:ab:37:d5:15:3a:14:9f:4c:a1:05:93:
00:6b:03:a5:9e:42:60:42:0f:6a:01:18:02:aa:64:74:e1:44:
b5:69:67:80:4b:f1:fc:52:e4:09:11:f2:e2:b8:ac:13:05:2a:
42:bd:4b:3a:63:57:60:c6:b1:31:04:62:d6:e8:75:02:31:c0:
c3:b3:50:ad:b5:d7:a4:70:58:b2:6a:c5:fc:dd:51:f8:fd:6e:
ba:cd:32:5a:e9:a9:c3:d1:cf:92:15:80:11:fd:f0:c0:a7:73:
32:48:fd:b7:37:22:4d:74:6b:85:7a:9f:c1:81:8b:fa:7c:5a:
10:52:e4:2f:42:5c:88:95:81:67:d1:81:0e:ce:7f:30:0e:04:
60:54:a6:10:03:8f:30:0f:ad:13:f2:ab:a8:32:d3:df:94:2d:
96:d1:1e:8a:45:38:f9:be:55:7f:b0:22:46:84:55:74:cd:c6:
46:ad:df:86:12:26:d4:e9:b7:d4:61:d8:14:86:ba:58:13:29:
eb:5d:ba:58:63:a9:15:6d:e4:78:1f:ee:25:9d:83:2f:6c:76:
d3:e6:99:c8:04:31:c6:d2:32:be:ff:b6:d3:63:b9:23:90:a2:
09:b5:14:52:64:39:d3:a1:6f:70:3f:24:71:4e:bb:80:b4:f0:
cc:bf:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:42:14 2025 by rpki-client