Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa
File: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (raw, json)
Hash identifier: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=
Subject key identifier: A4:BF:ED:0C:99:93:76:D2:A6:A0:41:27:18:1D:D9:E5:2A:9F:A3:0C
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 01942444E1CA19D6C80CC21391AB5FB94594
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205516
IP address blocks: 185.121.80.0/24 maxlen: 24
185.121.81.0/24 maxlen: 24
185.121.82.0/24 maxlen: 24
185.121.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e1:ca:19:d6:c8:0c:c2:13:91:ab:5f:b9:45:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4bfed0c999376d2a6a04127181dd9e52a9fa30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:50:41:4a:a2:f4:ac:d0:19:7d:08:44:28:
1f:af:ed:e6:9e:a2:67:6e:b9:5b:6e:42:e2:7a:c4:
1e:7b:ff:90:1f:72:81:b1:c4:54:a6:75:1d:41:cb:
94:cb:ee:77:00:4e:04:50:b2:3c:8f:1d:62:43:3c:
f8:88:68:ca:a5:fc:e7:fc:81:81:e7:01:2c:ac:c6:
58:f8:b7:e8:18:d1:b9:dd:3c:bc:e0:1b:25:12:35:
27:f8:06:1b:0b:8d:a2:41:8c:91:41:ad:b7:14:c7:
48:69:6c:b8:d7:2b:bc:bb:5d:2d:db:aa:56:16:8c:
e7:ac:f2:f7:9b:bc:a1:bc:ea:e2:4a:d1:c7:30:0e:
b2:2e:99:18:67:1b:e2:62:b8:b6:a1:29:e4:d5:84:
67:55:51:8c:87:be:dc:65:f1:fa:85:36:1e:ab:e3:
cc:73:d1:2f:1f:32:ba:63:ee:8b:75:26:5c:89:24:
74:6b:3a:f8:87:cb:88:9b:b7:c8:01:c7:9f:97:ec:
3b:fc:ac:07:2f:66:12:ba:4c:4d:64:0b:a9:d3:89:
16:96:ef:c8:6c:5f:28:21:68:12:fe:68:43:c3:e9:
5b:6a:43:77:3f:9b:3e:e1:cf:d9:18:b6:43:c3:c0:
24:4b:78:8d:28:39:ec:70:87:75:92:37:53:a8:cf:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BF:ED:0C:99:93:76:D2:A6:A0:41:27:18:1D:D9:E5:2A:9F:A3:0C
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.80.0/22
Signature Algorithm: sha256WithRSAEncryption
41:e6:f0:20:7b:e5:fb:88:c2:fb:5d:e6:66:d9:cd:2b:85:cd:
44:df:93:a1:71:95:ee:16:ee:6a:13:d8:0a:cc:6e:6d:29:27:
a3:a6:c6:84:8f:64:3e:89:9e:73:9f:d7:ae:1a:f7:2b:d6:b5:
3c:10:f6:50:7e:c7:71:a9:af:b6:9a:7f:f8:f2:f3:69:81:15:
59:58:f5:17:fe:79:f3:98:3f:99:4f:72:c7:cc:fc:0d:ec:e8:
27:d0:f9:ad:49:0f:72:e4:73:76:f4:46:3a:5e:a1:90:8d:33:
2b:d0:6c:b3:d0:65:71:82:f1:3a:d4:8d:da:10:f6:8c:b7:8f:
43:68:d1:c3:92:bf:88:cb:c1:4c:22:07:f5:88:5b:4a:6c:e8:
ca:5f:6e:f8:1a:ed:a9:07:ee:2d:f9:d3:96:1a:0b:64:2d:58:
b2:58:e3:d7:57:0a:e5:66:99:33:4d:cb:2b:14:b3:a5:e1:10:
03:35:89:1f:bc:81:04:08:98:d3:3a:fa:52:fb:ec:61:93:f3:
3f:1d:57:b7:5a:e6:74:b7:e1:f2:49:23:f2:5f:e0:29:42:e0:
63:70:43:85:31:43:97:cc:c1:1e:96:13:27:6b:50:58:c2:fe:
68:24:ff:46:23:ae:ae:7a:f4:9c:0d:ad:1e:84:34:da:15:e9:
11:9e:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:54:00 2025 by rpki-client