Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/8cF9uJjVQIhdQ_UBWz-HfDDyMLg.roa
File: 8cF9uJjVQIhdQ_UBWz-HfDDyMLg.roa (raw, json)
Hash identifier: Mrr08jrNOTU1I6qzHWpRIgiMlQLyYHWp6FspSFp+M5c=
Subject key identifier: F1:C1:7D:B8:98:D5:40:88:5D:43:F5:01:5B:3F:87:7C:30:F2:30:B8
Certificate issuer: /CN=2a7166bde0d13beba0346454f31dc8a12b8429fd
Certificate serial: 01877AFC5272A9F976B87C9F59D105BFC0D6
Authority key identifier: 2A:71:66:BD:E0:D1:3B:EB:A0:34:64:54:F3:1D:C8:A1:2B:84:29:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFmveDRO-ugNGRU8x3IoSuEKf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/8cF9uJjVQIhdQ_UBWz-HfDDyMLg.roa
Signing time: Thu 13 Apr 2023 14:19:29 +0000
ROA not before: Thu 13 Apr 2023 14:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205741
IP address blocks: 185.235.58.0/24 maxlen: 24
185.235.57.0/24 maxlen: 24
185.235.56.0/24 maxlen: 24
185.235.56.0/22 maxlen: 22
185.235.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:fc:52:72:a9:f9:76:b8:7c:9f:59:d1:05:bf:c0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7166bde0d13beba0346454f31dc8a12b8429fd
Validity
Not Before: Apr 13 14:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1c17db898d540885d43f5015b3f877c30f230b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:8a:6e:4d:63:ed:c8:92:2a:4d:6c:64:d9:
f4:06:bb:1a:f8:79:ee:da:05:3b:71:52:99:4c:9b:
48:fb:a4:0f:7e:b2:dd:c0:dc:48:68:3e:2b:24:4e:
fc:10:eb:8e:09:9d:3b:6f:ff:48:35:6a:fa:43:d7:
98:05:8b:21:ce:9f:b7:b6:67:f1:2e:fd:40:c2:10:
16:ac:54:16:db:52:02:54:9e:c1:12:75:a1:74:57:
a0:d4:f0:96:a1:21:7e:52:64:2c:12:e3:43:f4:1f:
72:47:2d:73:d1:54:c9:f9:e0:27:a4:76:c9:86:1b:
d9:75:cc:6c:be:96:68:e6:4e:c0:da:dc:4f:1e:5b:
bb:c4:53:40:5e:f6:a3:29:51:df:06:dd:ff:cb:ff:
ce:9b:15:1e:11:23:d6:37:b6:9e:84:22:b2:a3:53:
f4:9c:60:ec:01:c9:e4:a7:49:dd:1c:5a:2c:a5:4c:
c8:23:7b:c0:9f:10:62:3a:38:83:75:e4:55:01:f0:
a7:28:ef:5d:95:ca:4d:e3:56:92:a1:bb:e4:e5:6e:
2a:0b:a7:a5:b8:79:84:43:28:b9:99:04:90:41:ac:
9f:17:97:7e:8d:ef:8c:dd:64:0c:81:0b:ae:2d:40:
78:1b:1c:77:b6:84:e1:bd:e7:0c:21:36:88:b3:ed:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C1:7D:B8:98:D5:40:88:5D:43:F5:01:5B:3F:87:7C:30:F2:30:B8
X509v3 Authority Key Identifier:
keyid:2A:71:66:BD:E0:D1:3B:EB:A0:34:64:54:F3:1D:C8:A1:2B:84:29:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFmveDRO-ugNGRU8x3IoSuEKf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/8cF9uJjVQIhdQ_UBWz-HfDDyMLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/KnFmveDRO-ugNGRU8x3IoSuEKf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.56.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:cf:84:95:6c:39:0d:5a:70:ee:3f:9c:19:85:4b:ef:46:10:
1a:4b:f7:9b:fe:21:e7:8a:f1:e7:7a:81:c0:67:e2:a3:02:46:
34:09:97:eb:61:e5:5d:bb:84:ea:dc:0b:33:ab:4d:6b:9a:20:
82:e7:11:fb:88:65:35:9e:b5:d7:ad:e5:98:f9:c5:14:9b:ef:
f5:c0:79:47:8b:34:9d:4f:7c:c1:f0:27:94:5a:4b:99:9d:2e:
3c:1a:3a:7d:d0:7a:28:f6:24:0f:49:5d:4d:66:74:5b:45:64:
00:a9:9b:ec:ad:74:b3:e5:e8:0d:a2:35:0a:08:ca:2f:3b:71:
2c:a9:6f:66:df:a3:ac:0d:f8:d7:4e:36:c2:65:42:b2:e2:8b:
7d:eb:f0:bc:fa:57:a5:57:88:c4:f8:cf:44:1d:63:da:b6:29:
3f:13:77:56:d3:5d:4b:07:e0:b5:2a:01:da:7e:dc:c3:65:92:
e5:7f:da:22:cc:6e:0b:61:0f:ee:9f:39:ff:8d:74:13:d2:d2:
87:e7:f0:65:03:d8:fe:1a:bc:f7:1d:ef:d6:bf:64:4e:e9:e7:
58:86:c1:aa:c3:24:15:39:82:cf:d4:fe:dd:82:cc:19:48:10:
f3:86:71:f8:61:8c:63:d7:23:78:f0:51:82:31:93:e4:0e:1c:
3e:df:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:37:10 2025 by rpki-client