Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/sptRbeeMXh_YsSblKrCQ0WMDqjA.roa
File: sptRbeeMXh_YsSblKrCQ0WMDqjA.roa (raw, json)
Hash identifier: SqfJs94zRzI4wMv09mDXMEWotAFH0eAza2x8VWyAGS8=
Subject key identifier: B2:9B:51:6D:E7:8C:5E:1F:D8:B1:26:E5:2A:B0:90:D1:63:03:AA:30
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244514FAAF4E9E7B4B8356B2D2E4C553
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/sptRbeeMXh_YsSblKrCQ0WMDqjA.roa
Signing time: Wed 01 Jan 2025 23:48:14 +0000
ROA not before: Wed 01 Jan 2025 23:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42240
IP address blocks: 185.46.175.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:14:fa:af:4e:9e:7b:4b:83:56:b2:d2:e4:c5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b29b516de78c5e1fd8b126e52ab090d16303aa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:ca:aa:10:01:54:ca:d4:ba:cc:3e:eb:3b:
0d:eb:ce:01:b6:f3:d2:37:58:aa:5f:c3:8a:a1:be:
ea:b4:db:61:4b:24:d4:c1:6e:4a:13:c3:16:f9:71:
0a:34:83:1e:95:22:31:a8:ce:78:4b:98:42:57:22:
62:5d:84:a6:18:4e:f7:7e:69:5a:32:d2:ac:79:af:
81:1e:37:6b:01:19:05:12:02:2b:ab:3e:e0:11:41:
9f:5f:74:f0:77:9f:38:70:25:18:be:ce:48:ba:e7:
42:89:e6:6e:e9:6c:97:02:67:a3:e7:ad:bd:4d:a7:
43:05:d0:10:d0:b8:60:23:8d:d1:8d:e1:7c:17:14:
ea:58:c1:2d:dd:2b:4f:f1:95:32:d7:2f:b6:7a:19:
c6:b0:80:3d:89:9e:59:30:cd:b7:ea:f4:af:60:a2:
90:98:37:68:5c:0e:19:9f:d6:e5:c0:f3:b4:5b:07:
4e:8a:1d:4c:83:49:7b:68:59:a0:7d:4d:eb:41:32:
0b:86:0d:c7:a6:9b:e0:53:7d:a1:bd:d5:0c:79:85:
fa:f2:3c:77:c8:c9:eb:0d:4f:38:e1:14:d8:ee:f8:
1e:c6:96:10:c5:7e:9c:e5:87:54:e6:19:b0:4d:5d:
81:2d:f2:09:1f:65:58:60:60:45:c4:e8:03:c5:08:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:51:6D:E7:8C:5E:1F:D8:B1:26:E5:2A:B0:90:D1:63:03:AA:30
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/sptRbeeMXh_YsSblKrCQ0WMDqjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.175.0/24
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
47:35:0f:10:60:fe:1f:39:54:df:96:1a:b5:4a:08:b3:7c:6a:
d0:6d:b4:4b:8e:9e:be:d4:0d:76:95:4b:31:1c:08:1d:54:c8:
8d:8c:e1:cb:9f:96:fb:52:fb:ef:f9:95:31:dc:57:cd:a7:f2:
41:ed:32:f5:14:c2:f5:92:38:35:5a:78:2e:1b:e6:5f:5f:bc:
db:19:05:fe:34:ec:7a:07:63:cb:9d:ba:26:75:3a:37:5f:b2:
1d:94:05:60:79:ff:e0:7d:94:c0:a3:78:fc:86:d4:01:ca:42:
7a:0a:1f:28:f0:5d:26:be:94:7f:2a:07:a2:29:3f:eb:2b:70:
51:b7:4c:1e:3f:62:ad:80:3f:81:f9:9e:9f:5e:d8:33:5f:3a:
84:4f:73:bb:d2:a3:7d:d9:26:da:c3:fe:8f:ac:45:27:df:c7:
bd:f8:f4:31:17:46:10:82:c6:d9:91:a3:9b:d1:98:9d:c2:ab:
20:8c:53:7b:bf:85:56:0b:38:3b:8f:89:d1:c7:8d:68:9f:ea:
0d:ff:82:66:8a:2e:2e:2f:f3:8e:19:04:09:63:55:a9:a7:f1:
5a:56:23:34:cc:68:31:b3:f8:29:9c:db:8b:db:bd:6a:12:b2:
51:eb:53:eb:62:2f:5e:03:7c:39:bd:21:73:bf:aa:cb:29:ff:
94:67:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:57 2025 by rpki-client