Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rEhdV-K5_kqKt-Sjko69uXNv_XU.roa
File: rEhdV-K5_kqKt-Sjko69uXNv_XU.roa (raw, json)
Hash identifier: FWqZBhMlKrKNHitrAHOC+5iiinw13J+bpXwwdqNUNPc=
Subject key identifier: AC:48:5D:57:E2:B9:FE:4A:8A:B7:E4:A3:92:8E:BD:B9:73:6F:FD:75
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A6F2D8757D41752A722559B31133
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rEhdV-K5_kqKt-Sjko69uXNv_XU.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212836
IP address blocks: 185.233.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a6:f2:d8:75:7d:41:75:2a:72:25:59:b3:11:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac485d57e2b9fe4a8ab7e4a3928ebdb9736ffd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:23:27:c3:2c:2a:38:c8:9f:0b:69:33:6e:
52:cc:5d:37:ac:ee:b0:ab:00:fd:51:6e:a4:b7:02:
03:69:16:83:91:96:d1:4a:ec:d4:08:bf:a3:6d:26:
52:61:67:dc:21:f4:cf:03:2e:9d:fa:43:e9:a2:83:
f4:8a:c2:a4:12:e4:02:ce:8d:b8:ad:55:4e:be:ae:
a4:e2:db:60:64:35:bd:4e:3d:6d:47:90:cb:40:24:
79:f2:03:6f:84:2d:7a:7d:d1:d8:6b:6d:4f:b1:59:
30:99:5a:95:07:98:e1:20:60:e1:7c:45:8e:53:31:
d9:68:83:f1:88:53:17:78:27:26:4d:74:69:72:38:
e1:16:ff:42:bd:12:bc:57:4c:30:ae:b9:fd:71:08:
d5:e8:27:65:fc:c1:8d:71:a5:1a:0f:ba:dd:3e:07:
55:9a:9e:d5:8b:50:f2:38:3f:00:f9:75:cd:95:76:
18:64:b3:b0:44:48:69:01:72:e2:0e:ba:6a:11:d9:
e2:f4:67:6a:65:2c:0f:21:90:2a:4b:7b:0a:2c:ea:
ff:c9:6b:dd:dc:c1:57:da:68:a2:41:4d:26:e5:55:
3c:2f:28:33:72:d5:b6:35:8c:a1:90:8e:d5:3c:dd:
71:95:bf:dc:ce:31:33:ad:4c:12:44:a0:72:40:18:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:5D:57:E2:B9:FE:4A:8A:B7:E4:A3:92:8E:BD:B9:73:6F:FD:75
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rEhdV-K5_kqKt-Sjko69uXNv_XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c6:ab:9b:c0:d0:61:89:5d:7a:5f:5f:9d:a2:c5:c1:37:13:
87:db:23:b5:ea:29:da:4e:d3:21:68:be:33:8f:d8:48:c2:4c:
90:f9:74:0a:08:8a:75:3e:fd:78:8d:63:f3:34:ff:25:10:12:
91:5b:34:10:98:44:c5:c9:e8:b2:71:3e:cf:19:44:17:c0:41:
43:41:87:63:a2:11:c1:c8:16:cc:6a:89:fc:94:64:66:d5:1e:
91:fd:dd:bf:7f:a9:cc:82:ae:02:35:4b:72:f2:f6:3f:e8:88:
90:40:2a:8e:d3:55:d4:2a:bf:ec:a5:1a:a5:f4:b2:73:7f:10:
e3:40:e6:b0:06:84:97:92:7c:29:93:47:23:82:27:fc:88:0a:
3c:ef:47:30:85:4b:c9:79:ac:a3:d4:61:12:db:de:5a:6f:e6:
3a:62:ca:33:57:b7:ba:f4:37:21:ee:59:fc:ff:76:3d:91:ab:
d8:37:d0:20:78:2b:ec:ff:a7:d1:4c:42:d3:12:74:01:b3:38:
c4:a2:a4:c3:a7:86:f7:0a:d9:9e:72:82:33:53:2b:44:bc:99:
b8:38:8c:d2:32:9f:22:50:93:f7:38:9c:ce:ae:ff:d2:c0:3b:
58:4c:47:f7:b0:29:6f:28:bb:cc:40:57:cf:2d:7f:f1:a1:6f:
f9:b3:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:25 2025 by rpki-client