Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/nFuG3ps_t2FWaijKK4Kuo-tX1i0.roa
File: nFuG3ps_t2FWaijKK4Kuo-tX1i0.roa (raw, json)
Hash identifier: aQom5C4RwyWtksZssdhvuNwweT2ICfUtp+CjcTmM1ZQ=
Subject key identifier: 9C:5B:86:DE:9B:3F:B7:61:56:6A:28:CA:2B:82:AE:A3:EB:57:D6:2D
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 018571F0F09CDECC5655814379BA3FD2F7C4
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/nFuG3ps_t2FWaijKK4Kuo-tX1i0.roa
Signing time: Mon 02 Jan 2023 10:04:53 +0000
ROA not before: Mon 02 Jan 2023 10:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.42.25.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.42.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:f0:9c:de:cc:56:55:81:43:79:ba:3f:d2:f7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Jan 2 10:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c5b86de9b3fb761566a28ca2b82aea3eb57d62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:7a:4b:a3:30:26:57:8a:f5:56:c1:cf:76:
a4:b2:5a:a9:a7:af:29:ea:0d:de:cf:f1:28:19:f0:
75:bb:38:fc:5b:ad:f2:f3:d1:c0:a1:40:26:70:0d:
ce:07:c6:eb:4f:21:62:ef:15:72:65:6e:c2:64:f7:
9d:81:ea:92:41:5b:c4:2f:71:5b:2d:8d:c1:4c:81:
56:9f:d4:b1:6b:ea:60:9c:87:9b:9f:c2:8f:5c:bb:
8f:2f:d5:b2:6e:3c:10:1f:0e:32:af:5e:c3:b0:4b:
56:6c:d1:48:79:f7:49:ee:73:c7:b6:39:fc:11:c1:
a7:df:e8:c0:99:a3:cc:c5:d8:36:c4:92:d1:f5:b0:
28:ef:0a:d4:c2:e1:a2:26:7d:84:0e:72:a8:2f:e4:
ca:9e:77:db:62:e2:31:58:3a:b9:46:a5:d3:fa:bb:
30:05:2a:ae:d5:60:12:c1:b3:7d:4f:69:a6:17:13:
5f:e2:64:dd:15:a3:fb:ba:d2:7e:72:47:66:94:de:
55:37:a6:ae:b4:f5:d0:e3:0b:45:5d:0a:89:36:54:
99:bc:90:ae:f3:2f:ab:41:b1:9b:15:08:bf:cb:70:
ac:bf:ea:e7:bb:45:34:1f:6a:03:f1:81:da:e7:12:
f9:16:61:69:a6:20:5d:dc:8f:0d:34:c4:f9:8f:49:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:86:DE:9B:3F:B7:61:56:6A:28:CA:2B:82:AE:A3:EB:57:D6:2D
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/nFuG3ps_t2FWaijKK4Kuo-tX1i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.25.0-185.42.27.255
Signature Algorithm: sha256WithRSAEncryption
5a:8d:a7:eb:9c:05:ec:54:98:d1:69:1f:f3:72:89:2a:27:c4:
61:31:27:ff:b6:79:98:e0:04:0e:c6:76:c0:e5:9e:e4:16:3d:
38:07:1c:28:88:57:10:fe:b7:97:05:0f:61:b2:16:13:30:0a:
bf:fd:1d:a7:91:28:d4:04:86:d2:bd:2c:97:cc:94:03:b9:2b:
ce:0b:76:52:cb:c4:ab:d6:bf:30:52:d4:62:84:1e:54:65:02:
34:bf:13:43:53:6a:3b:7a:74:28:7f:e9:d8:4b:ce:44:96:52:
c2:77:ff:1a:54:0e:19:46:bd:d5:bf:4d:68:9a:62:11:13:a6:
5b:58:20:5d:4d:b5:e1:19:7c:24:de:d2:ce:62:86:3b:60:5d:
40:33:24:03:14:f4:38:82:c3:85:97:c4:ac:0b:ae:58:b8:94:
2f:71:6d:3f:1c:ce:df:aa:c2:5e:f4:65:28:f4:53:f8:1e:c5:
4a:36:26:31:17:76:4e:b1:ca:da:af:df:99:31:3b:95:08:dc:
a7:10:10:f8:a4:d9:13:86:4a:42:f4:00:1d:88:06:bf:b2:ac:
50:83:c5:25:84:d7:1b:e4:64:5a:6d:7b:cc:a1:e7:24:5c:ab:
cc:4b:47:f5:55:35:31:2a:7f:6a:9b:10:1d:20:92:b4:37:6c:
bd:00:fa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:23 2025 by rpki-client