Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa
File: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (raw, json)
Hash identifier: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=
Subject key identifier: 45:7D:E3:EA:11:BC:8C:F1:D0:96:A8:10:0C:5B:31:58:8F:70:8E:25
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 019423D7F49E0866E5916C6B847A6C362E2F
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208154
IP address blocks: 185.75.192.0/22 maxlen: 22
2a03:4ca0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f4:9e:08:66:e5:91:6c:6b:84:7a:6c:36:2e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=457de3ea11bc8cf1d096a8100c5b31588f708e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:85:09:d5:b9:70:a3:c7:87:73:3c:90:01:
5e:48:3b:31:a1:92:83:ba:d6:49:88:82:a8:e4:70:
98:14:6b:0c:9d:44:3c:ca:b1:4f:81:dd:9d:0d:cf:
af:e1:3d:b0:8a:09:14:cd:6a:5f:16:2d:f6:b7:b9:
dc:46:ce:15:f4:3d:9c:5a:ae:c0:44:67:13:f6:82:
a7:b8:02:65:a3:f8:84:b1:39:ef:52:eb:13:6e:3d:
7b:4a:94:f8:39:33:c8:9e:13:7d:e2:2b:10:c9:0c:
b0:f6:bb:c3:64:fd:2b:2e:6b:1f:b0:67:f3:3b:6f:
c1:4d:15:7c:88:8c:ae:c6:4b:c3:17:5c:7d:d1:d4:
a0:13:b4:45:dc:d6:1d:9d:27:90:71:45:a2:d0:cb:
99:d9:0d:b5:78:95:ba:b6:9e:04:73:0e:2b:3e:1e:
99:7e:8e:40:32:3f:ce:52:5a:b1:fc:03:d2:ba:85:
f7:68:ab:eb:09:9f:3d:ca:a8:dd:cb:87:00:24:db:
25:44:68:f8:c2:0d:c1:44:8a:91:79:ec:ba:06:33:
28:76:51:cb:ca:a5:82:9b:2c:1e:d7:5a:5c:3a:20:
99:45:7b:d6:2e:26:39:15:4c:aa:e9:e7:8f:e2:89:
00:91:9f:42:79:3d:8a:84:8c:95:3b:e6:69:0f:56:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:E3:EA:11:BC:8C:F1:D0:96:A8:10:0C:5B:31:58:8F:70:8E:25
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.192.0/22
IPv6:
2a03:4ca0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:ae:9b:f0:9b:52:0c:3a:84:f9:69:fa:cb:18:66:31:44:17:
e3:b8:7f:82:88:40:7e:6b:84:ec:15:f6:d8:55:4c:55:b3:89:
33:c5:a2:4c:1d:24:db:97:ce:09:36:d0:73:2d:3e:84:c1:67:
68:e4:b3:44:84:df:bc:1f:74:c9:e0:e0:31:9c:2f:b7:84:27:
c9:bc:eb:3c:66:6d:c6:15:81:bd:ae:1a:73:be:25:50:01:36:
2a:f9:fc:47:c6:7b:96:0b:69:e7:61:ac:f6:ef:48:78:e1:63:
08:b8:80:0b:8b:0d:ea:2d:bb:ca:50:b7:60:80:04:c6:b1:96:
5d:a4:40:4f:94:2a:f4:91:7d:fd:3a:bb:ab:78:82:c2:c4:bd:
8a:b7:60:2f:0f:27:44:21:26:4e:d0:42:c1:2c:e2:31:35:e3:
20:e8:fc:84:78:47:14:34:37:8c:16:44:3c:a6:b6:f4:fe:90:
1d:68:fb:e7:8a:f9:a3:54:fd:06:80:27:21:5e:d9:02:27:7d:
af:05:2c:92:f9:ba:38:e4:79:09:47:38:b4:d7:d3:02:ae:0e:
f9:c5:bf:4a:1f:96:18:72:ac:bb:30:bf:09:88:a3:b1:e6:13:
a9:a0:df:be:1d:3a:d6:f8:81:43:3b:14:bd:b7:7f:5e:db:ae:
b2:5c:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:11 2025 by rpki-client