Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/D1M0sjr1PH8Yys4-1MS43KjOpQM.roa
File: D1M0sjr1PH8Yys4-1MS43KjOpQM.roa (raw, json)
Hash identifier: 2Q7ZkQbIGE2fBfzNEEGOF12hD07hA4SM+mHj72HM/gU=
Subject key identifier: 0F:53:34:B2:3A:F5:3C:7F:18:CA:CE:3E:D4:C4:B8:DC:A8:CE:A5:03
Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial: 019427B5856CEB3BD9E431FC249A5CC8E8DB
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/D1M0sjr1PH8Yys4-1MS43KjOpQM.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59874
IP address blocks: 185.68.36.0/24 maxlen: 24
185.68.37.0/24 maxlen: 24
185.68.38.0/24 maxlen: 24
185.68.39.0/24 maxlen: 24
2a05:1580:10::/48 maxlen: 48
2a05:1580:11::/48 maxlen: 48
2a05:1580:12::/48 maxlen: 48
2a05:1580:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:85:6c:eb:3b:d9:e4:31:fc:24:9a:5c:c8:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f5334b23af53c7f18cace3ed4c4b8dca8cea503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:3f:58:4c:02:6f:16:fc:3a:71:c9:7e:3c:
37:d6:d2:6e:97:15:4a:d8:77:22:c4:a5:7a:dc:76:
4e:44:29:85:fb:dd:2f:a7:c7:69:48:c3:04:f4:63:
4a:b0:8c:cb:d7:c7:af:2c:6d:cb:d4:46:5f:cd:e0:
e9:96:5e:22:d8:0b:6c:2c:73:ef:ec:5f:be:85:df:
32:41:ee:34:95:30:f7:5a:54:17:36:8b:c2:bc:95:
60:0e:83:28:a0:20:b8:fa:f0:69:7e:6d:50:3e:38:
fc:56:93:e5:02:a6:cc:b9:d3:dd:15:67:3d:1e:5c:
48:f0:b0:c1:f1:60:af:19:d8:61:36:01:1d:38:14:
86:81:e7:f1:73:62:e9:f4:61:a7:f3:33:42:7f:b7:
f5:f5:2a:4b:dc:11:70:5d:1e:9c:4a:9e:73:58:9d:
83:5a:45:9e:19:c8:5a:06:e6:8d:e6:89:87:fb:76:
83:2a:d5:62:9d:a2:ec:6f:47:e0:48:55:50:20:e0:
73:f5:14:06:95:b9:78:2b:4f:26:88:36:ac:52:f1:
a1:68:19:ed:d5:b2:9f:9f:23:17:1b:c1:73:96:b7:
0e:b2:b0:79:f4:0a:75:e2:f4:e0:c1:75:d0:f6:71:
3a:3d:b4:80:be:05:73:7e:28:b5:d6:eb:cd:e7:40:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:34:B2:3A:F5:3C:7F:18:CA:CE:3E:D4:C4:B8:DC:A8:CE:A5:03
X509v3 Authority Key Identifier:
keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/D1M0sjr1PH8Yys4-1MS43KjOpQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.36.0/22
IPv6:
2a05:1580:10::/46
Signature Algorithm: sha256WithRSAEncryption
b6:63:c9:dc:ad:be:7d:7a:e8:12:ba:51:ac:78:54:2d:e2:a3:
31:5e:5f:40:ef:75:ef:f9:94:09:d5:01:e9:65:8e:6c:31:97:
43:d5:f0:75:f1:6d:fe:4d:d9:ef:43:b4:b5:6b:ac:59:10:60:
c1:85:64:3d:7d:aa:a6:70:0d:8c:be:ec:b5:61:3d:24:98:3b:
d4:0f:77:92:85:0f:b7:ca:bf:d7:4e:f7:e0:fa:52:79:f3:88:
44:e6:fe:56:05:f7:af:61:03:b0:90:34:c7:37:48:83:d5:dd:
8b:c3:e5:df:77:44:91:c1:63:55:89:06:e0:df:41:3f:97:55:
ac:b2:56:43:af:be:6c:f0:84:da:c5:3b:32:7b:fc:37:8e:2b:
3c:e9:78:d9:76:0b:65:f1:95:31:1d:48:81:32:43:ff:78:33:
7b:ae:e2:ef:c0:83:e2:cb:02:a5:5d:7b:54:5c:03:a3:c4:c7:
04:1a:70:68:d4:f8:a7:70:b6:10:ea:24:e4:24:7d:ae:03:ac:
7b:2b:b1:fb:62:14:4a:51:5c:30:e9:11:03:66:a9:33:78:5e:
87:0e:86:94:25:76:45:a3:d0:b3:8b:ab:64:2d:7f:05:b8:dd:
76:04:74:14:6d:38:53:39:02:00:62:77:1c:38:fd:4c:9d:f9:
44:64:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:51 2025 by rpki-client