Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/tOCJO2X19pYXFeftaYs0r2sV080.roa
File: tOCJO2X19pYXFeftaYs0r2sV080.roa (raw, json)
Hash identifier: dBxHWj4yoI72NrIbWjEEkzKyPyuO5n7ViIWp4/pWHGM=
Subject key identifier: B4:E0:89:3B:65:F5:F6:96:17:15:E7:ED:69:8B:34:AF:6B:15:D3:CD
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018CC5DC0A850912820F2233194A0BDB8F2F
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/tOCJO2X19pYXFeftaYs0r2sV080.roa
Signing time: Mon 01 Jan 2024 16:29:41 +0000
ROA not before: Mon 01 Jan 2024 16:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.187.155.0/24 maxlen: 24
185.187.154.0/24 maxlen: 24
185.121.24.0/23 maxlen: 24
185.121.26.0/23 maxlen: 24
2a05:b0c4:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0a:85:09:12:82:0f:22:33:19:4a:0b:db:8f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 1 16:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4e0893b65f5f6961715e7ed698b34af6b15d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:60:26:b4:61:74:e7:0e:b5:fd:59:72:44:
51:14:f7:90:03:11:4b:4c:da:2e:72:d4:ad:1a:f0:
37:9b:ea:96:99:f4:3a:d4:4d:c2:02:e7:98:44:dc:
99:3f:9b:cf:1f:87:5e:ae:4d:c5:83:29:79:48:35:
48:78:8b:91:68:93:ba:c0:87:15:db:31:ba:f7:a4:
57:91:7e:43:52:fe:5a:8e:87:41:99:b6:7b:17:6e:
73:1c:51:73:f9:ed:a1:6c:1e:5d:f1:e0:7d:89:e7:
05:bd:fc:52:83:28:93:63:8d:25:b0:91:ea:bf:c6:
2a:a3:94:82:bd:b8:27:af:7b:30:7c:02:ba:92:ce:
8d:3f:88:48:ed:4b:57:b3:ad:ee:45:18:d1:8e:c1:
2f:43:82:93:cb:31:ee:cb:22:30:24:da:90:89:75:
54:1d:f0:f2:55:0f:09:e7:66:2e:88:4f:38:c8:e5:
9a:5d:56:a1:fa:8f:c6:22:24:d0:7f:6c:09:06:da:
33:9c:2f:a5:a8:5a:55:b5:9a:63:7d:48:23:42:1b:
ad:de:4a:0a:49:49:2b:65:be:22:a2:ba:27:62:95:
3a:4f:73:35:42:08:97:a4:32:6d:b0:cc:80:da:08:
c7:9f:02:ab:b4:b8:bd:d8:3f:dc:89:70:41:65:51:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E0:89:3B:65:F5:F6:96:17:15:E7:ED:69:8B:34:AF:6B:15:D3:CD
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/tOCJO2X19pYXFeftaYs0r2sV080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.24.0/22
185.187.154.0/23
IPv6:
2a05:b0c4:2::/48
Signature Algorithm: sha256WithRSAEncryption
36:dd:e1:c8:c0:de:1f:e8:93:87:ae:85:bc:e8:0b:88:d9:29:
b5:cf:cb:9b:cc:20:5c:5e:a3:03:ae:09:08:50:fa:4e:09:96:
33:71:93:51:51:b4:79:78:b3:a9:73:93:37:f8:1e:5a:83:fc:
d2:a8:b4:74:91:f5:33:d8:cb:36:b5:f2:96:af:0e:b3:5e:a4:
9a:33:59:44:05:38:05:6e:d6:f7:f5:c1:78:dd:4b:b9:48:98:
17:9a:d1:17:18:96:38:6f:fd:82:02:00:50:42:86:9b:8c:52:
87:18:a3:17:40:83:2c:d7:b5:b0:c8:4c:4d:84:bb:5f:42:b3:
af:6d:11:9d:52:bc:e1:1e:a4:79:c4:f6:be:8e:a8:84:d0:1a:
2a:92:5e:45:36:72:cf:46:7f:6a:6c:5f:c6:7d:d8:aa:62:13:
fe:a0:df:7a:d6:1f:98:49:b9:f0:cc:de:e8:9c:b8:c5:ec:9d:
8d:90:64:b5:8e:6d:08:b5:a1:d4:28:0e:85:95:1e:ec:16:4c:
d9:62:36:0b:d6:17:1d:53:57:b3:c4:30:fb:33:09:f2:c4:f2:
44:40:3a:20:0e:6e:af:e4:29:5e:d6:2e:e8:de:20:d0:e3:dc:
ec:51:ed:fa:fa:1a:92:a4:12:68:d5:46:ff:af:96:bf:57:cc:
1f:21:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:20:44 2025 by rpki-client