Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa
File: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (raw, json)
Hash identifier: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=
Subject key identifier: 96:D1:14:3C:9E:7D:88:C9:B1:4D:D3:44:60:B1:9B:33:56:2A:EA:36
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 01948367D0FAD280FE56F80EB738088132E1
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa
Signing time: Mon 20 Jan 2025 11:10:06 +0000
ROA not before: Mon 20 Jan 2025 11:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.192.216.0/24 maxlen: 24
185.192.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:67:d0:fa:d2:80:fe:56:f8:0e:b7:38:08:81:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 20 11:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96d1143c9e7d88c9b14dd34460b19b33562aea36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:11:24:45:c2:1f:3a:c2:9a:fc:02:b7:3b:
45:ed:27:bd:de:18:79:42:76:8b:ec:27:dd:b7:e4:
a4:79:48:02:da:02:ef:85:a1:4d:cd:da:a5:fd:e3:
0f:78:bf:94:94:c8:26:05:99:df:cc:04:5e:ec:1d:
e1:7d:72:e0:43:e6:9b:4e:c0:f2:62:d2:62:43:81:
da:fc:74:32:2c:3c:06:84:39:b2:1c:2f:8b:4e:d4:
2d:08:03:ae:2c:cb:bc:08:f9:ea:f5:2d:40:d9:9e:
79:6a:85:38:c8:a0:6e:65:6e:96:87:a3:f1:e9:04:
4d:1e:8c:5c:d7:df:03:6f:79:00:9e:fe:d1:26:6b:
bd:ce:40:eb:5b:6a:0d:e6:a4:75:92:1a:43:44:ea:
02:22:4e:93:76:ad:ad:80:95:0d:13:30:3c:a7:63:
bc:22:29:98:9b:51:de:fd:b9:3d:09:33:c8:38:f0:
80:f8:1e:4e:2a:7e:d1:6a:05:e2:7a:a4:b9:11:bd:
8d:3f:8b:61:98:e3:7f:23:3d:53:65:46:7a:16:5e:
37:16:a4:99:40:d9:4e:b5:e0:3e:9d:be:0f:06:ad:
2c:ca:23:ee:93:25:0c:60:ee:9d:ea:c6:ff:1c:ce:
05:9e:8d:8d:7f:b4:5a:6c:8d:13:ec:4a:ed:f9:3a:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:14:3C:9E:7D:88:C9:B1:4D:D3:44:60:B1:9B:33:56:2A:EA:36
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.216.0/23
Signature Algorithm: sha256WithRSAEncryption
be:0a:56:05:34:ed:d3:14:96:8f:02:ce:ac:a7:f4:9a:0d:0e:
50:f1:ab:d8:a6:72:6a:e8:d4:21:6d:7e:95:1a:c8:cf:f5:f2:
a4:f2:9d:6e:11:f7:62:c6:e4:42:2b:cc:ae:27:98:59:77:05:
9e:f9:15:b7:e5:d0:3d:49:8d:8b:64:a5:f0:86:5e:49:5c:ce:
c8:a4:01:75:05:c8:aa:f4:1f:a2:9a:55:e4:42:58:a5:48:eb:
f9:24:ca:68:6a:c6:33:52:8b:2d:30:08:74:ce:57:c7:a4:11:
e5:05:00:d5:87:50:da:47:0d:8b:f4:a9:e6:ed:bd:18:a2:c5:
e0:f5:39:82:f3:3d:66:6d:97:31:22:b2:1d:5b:01:f2:0a:9c:
49:8b:a7:7b:3a:87:0c:e2:b2:b9:16:bf:a8:5c:32:9c:c0:f7:
ce:69:6c:de:ea:79:49:7e:4e:4b:00:87:6e:5b:9a:f0:8e:84:
61:14:b6:5e:a5:e5:3b:34:6f:5c:f7:0a:41:1a:e5:af:a3:7f:
5b:7c:a8:a9:c4:9e:6a:18:e0:82:06:ac:2c:35:30:72:ae:cc:
65:d8:bf:a2:01:1e:30:42:36:63:5c:ff:56:0a:ce:da:fb:80:
c8:39:06:d0:ee:63:49:ba:03:fa:0b:6c:94:f8:ad:23:84:05:
94:70:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:05 2025 by rpki-client