Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/tLoY5nfmVJWTJGYh886gVbz0Hf0.roa
File: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (raw, json)
Hash identifier: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=
Subject key identifier: B4:BA:18:E6:77:E6:54:95:93:24:66:21:F3:CE:A0:55:BC:F4:1D:FD
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 01942368DB674E3F79AAC508083402C8F55B
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/tLoY5nfmVJWTJGYh886gVbz0Hf0.roa
Signing time: Wed 01 Jan 2025 19:47:41 +0000
ROA not before: Wed 01 Jan 2025 19:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203096
IP address blocks: 185.40.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:db:67:4e:3f:79:aa:c5:08:08:34:02:c8:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Jan 1 19:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4ba18e677e6549593246621f3cea055bcf41dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:7e:d7:90:a4:74:5b:c6:66:a9:36:99:27:
55:d2:aa:1a:03:ac:5e:c5:69:86:fa:3b:e1:71:58:
31:f5:98:e0:f5:09:0d:c4:c4:83:10:0a:3a:df:b8:
f6:17:94:ef:67:1a:f2:68:c4:6e:45:b4:af:ab:e6:
b4:a3:5b:54:f8:60:4c:12:db:9c:a2:51:f5:34:ac:
5c:27:be:0e:da:8d:32:aa:16:e0:61:db:5d:6b:82:
b7:b5:e8:6f:f1:45:b2:c8:b7:22:82:dd:52:03:de:
8f:97:25:5d:e6:d5:1f:b5:94:7b:29:0d:dc:c0:0d:
ec:d9:64:1f:6a:0e:e7:cb:04:33:fb:9a:8e:d3:df:
03:d3:d2:72:77:29:32:d0:0d:6b:3d:00:09:d9:4f:
30:65:cd:8f:d8:fd:62:18:f1:d4:4a:71:92:e2:0d:
c4:cb:69:f3:68:e8:52:f7:c4:dd:8a:02:cb:6b:75:
58:65:e8:67:7f:2f:d2:7f:99:10:65:6b:7f:c5:98:
aa:47:d7:0a:4a:be:0d:b3:4d:d2:f2:b8:6e:4e:02:
6a:03:fc:d4:de:5d:6b:9c:49:8b:38:b3:74:cb:d7:
66:43:07:22:73:a2:45:ce:fa:b9:ff:4d:e5:9e:55:
9a:b5:7f:f7:e2:30:63:d7:71:58:a1:09:ae:82:23:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:18:E6:77:E6:54:95:93:24:66:21:F3:CE:A0:55:BC:F4:1D:FD
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/tLoY5nfmVJWTJGYh886gVbz0Hf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.110.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5b:15:4d:fe:cb:2f:8c:23:d4:e0:ea:89:45:53:3d:0e:61:
93:cd:67:5d:c2:84:a4:2f:56:fd:72:14:be:14:87:6f:32:73:
09:44:7c:e5:64:0c:73:53:a7:df:08:c1:b1:28:1e:c1:ff:f6:
ba:ff:96:28:15:4e:19:79:83:a8:1c:49:5e:4d:f6:ba:f9:a1:
f6:a3:4e:4e:ad:92:26:a5:10:a5:38:b3:64:5c:b0:86:f5:af:
2c:86:39:b0:ef:cb:4f:e3:8e:2c:8e:73:fe:4e:52:9a:fe:89:
a3:a5:f7:13:14:41:b2:67:05:43:fe:22:70:a6:61:ae:02:71:
fa:e7:65:df:81:94:d4:53:a1:14:5d:d5:3e:5a:b5:eb:46:88:
e2:79:e9:a0:6c:6b:08:05:6a:bb:d3:74:4a:0a:64:03:73:48:
61:ae:38:08:81:3a:24:13:4d:2b:41:4e:d5:1c:b7:c6:76:38:
ef:69:d8:b2:27:88:ee:5f:37:3b:49:0f:a4:76:db:3b:ee:ed:
ad:18:bf:b1:a7:47:3b:bd:a6:77:9e:4e:79:c9:f6:f2:94:33:
1b:3a:56:86:23:4f:20:75:cb:e3:76:94:a1:d1:18:f4:da:71:
f0:d6:d7:ba:b7:ba:2b:72:3c:1c:4b:28:70:5c:0a:af:57:f7:
99:fd:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:30 2025 by rpki-client