Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa
File: r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa (raw, json)
Hash identifier: zSG7oRCig4axArTg72yLWZy9j2Lnt0Tay8wTKKxpjxM=
Subject key identifier: AF:C0:B1:F6:2B:F6:52:CF:AC:5C:80:4B:1F:8C:A6:2A:D8:CE:FE:9C
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 0194258F706C9B382887AAC8593DB2613353
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209379
IP address blocks: 185.203.200.0/22 maxlen: 22
2a0a:edc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:70:6c:9b:38:28:87:aa:c8:59:3d:b2:61:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afc0b1f62bf652cfac5c804b1f8ca62ad8cefe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:35:da:9f:7c:0f:4c:f0:05:cd:92:dd:3a:
4a:e7:60:65:c6:c9:e5:a0:0b:5e:72:65:ba:a6:47:
2a:5c:05:4c:17:3f:b3:b5:ec:d5:b8:58:42:f9:25:
ad:f2:cb:61:38:fd:d7:37:fe:2c:b5:66:a2:70:eb:
43:2f:bb:5e:c3:75:68:1a:61:47:a4:b1:01:18:9b:
6b:26:08:0d:fb:20:4e:4f:6f:c0:83:51:20:c3:20:
9e:4f:d1:0a:b5:0d:d2:23:02:a1:04:4d:6e:9b:c2:
ce:9f:1b:23:b5:9a:f3:19:4d:50:af:35:88:32:11:
15:13:9c:7b:09:cb:7b:df:af:15:7b:3b:d7:4b:34:
30:f1:14:c8:29:4f:0b:44:e7:eb:c4:dd:e9:7b:ca:
08:ce:e5:d0:2d:7e:99:3d:68:20:a7:31:7a:d6:0a:
c3:c3:45:e2:4e:23:8e:7e:f2:00:e1:01:18:1b:b1:
28:c0:a0:22:b9:1a:18:dc:93:f0:39:61:f0:84:2e:
a2:c9:c0:e7:b1:67:85:ab:9e:a3:47:bb:61:c6:fa:
70:d1:ad:5b:90:87:00:b7:c4:33:52:da:b1:b2:a0:
01:d3:6c:a5:cb:61:5a:3e:18:9a:66:11:5d:17:88:
0e:c2:1b:00:16:58:64:52:d8:a8:b1:8e:5c:36:ae:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C0:B1:F6:2B:F6:52:CF:AC:5C:80:4B:1F:8C:A6:2A:D8:CE:FE:9C
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.200.0/22
IPv6:
2a0a:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:fe:da:d0:f4:95:ba:f4:5d:77:3b:9f:14:26:00:ac:64:78:
4a:ea:db:23:bf:34:1f:08:fd:49:b2:78:1a:c2:65:b2:68:60:
80:44:eb:d8:1f:ac:4c:4d:e1:f9:b1:14:ac:31:7f:94:5d:07:
ee:d7:ef:53:5f:0b:35:f9:93:d1:c7:ed:0e:cc:e9:2f:b6:47:
e7:9a:e5:d1:1a:fe:67:2a:d8:da:1c:89:e0:2d:d4:f8:a7:79:
1d:4f:5a:77:b8:a2:20:a7:3c:c7:0e:15:1f:85:e7:74:f8:2d:
c3:75:86:30:b6:c9:93:10:55:96:d1:1d:e2:4f:00:7d:51:cc:
3b:b6:57:e9:4c:45:40:e8:09:23:1a:4f:53:ea:cb:84:50:d9:
27:22:6c:39:ab:a4:b5:6a:e0:df:e6:29:15:67:5a:71:89:90:
16:34:eb:4a:fe:96:3e:d9:bb:4c:d1:5b:17:b2:65:03:86:bb:
76:b3:c8:47:a7:3c:09:ff:3f:a5:be:57:43:d4:02:2f:95:e8:
d7:9f:97:72:18:74:b8:08:a4:f0:d5:fc:db:3d:1d:cd:a6:a3:
3e:9e:79:eb:4e:39:db:63:1c:7e:cf:dc:70:b1:d9:73:59:cf:
d3:0e:6e:6b:56:f2:a4:fc:68:f3:6c:e5:d1:66:8c:b0:39:46:
98:48:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:27 2025 by rpki-client