Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/CDs0Y6uBpaKqB2D_XClU5JAv4og.roa
File: CDs0Y6uBpaKqB2D_XClU5JAv4og.roa (raw, json)
Hash identifier: SGXQQk9l3QVcd0SvUanVJDgTzEjKsyoJjmSwhaQ9/58=
Subject key identifier: 08:3B:34:63:AB:81:A5:A2:AA:07:60:FF:5C:29:54:E4:90:2F:E2:88
Certificate issuer: /CN=b86611d1d90f0a807b2949f7474d41c3683886dc
Certificate serial: 0E7325D2
Authority key identifier: B8:66:11:D1:D9:0F:0A:80:7B:29:49:F7:47:4D:41:C3:68:38:86:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGYR0dkPCoB7KUn3R01Bw2g4htw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/CDs0Y6uBpaKqB2D_XClU5JAv4og.roa
Signing time: Sat 01 Jan 2022 04:55:29 +0000
ROA not before: Sat 01 Jan 2022 04:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200507
IP address blocks: 185.98.163.0/24 maxlen: 24
185.98.160.0/22 maxlen: 22
185.98.162.0/24 maxlen: 24
2a01:9200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242427346 (0xe7325d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86611d1d90f0a807b2949f7474d41c3683886dc
Validity
Not Before: Jan 1 04:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=083b3463ab81a5a2aa0760ff5c2954e4902fe288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:5e:55:dc:76:e0:a5:c2:35:c5:fa:7f:d2:
eb:26:25:fa:19:fe:a5:51:16:1e:cc:4d:ef:df:9a:
dd:64:81:45:fb:49:e4:4a:2d:75:de:45:b3:c4:87:
32:0d:58:53:af:9b:c7:4a:77:56:67:3b:08:83:87:
20:00:18:e0:05:a2:a4:5d:68:53:10:60:3b:01:e4:
b3:83:7a:d8:63:8c:77:f0:0b:bb:5f:25:fd:cd:ac:
01:a4:cb:db:fb:25:81:b8:f0:11:cd:56:f6:50:ed:
84:0e:97:c3:e9:53:c4:cf:5d:b7:eb:dd:04:62:03:
f9:a6:8a:8a:cd:d4:d5:30:81:d1:6a:40:b3:72:16:
3e:cb:b8:77:c9:5a:2b:a2:d4:b7:b9:c7:72:64:28:
6d:0b:cb:97:4a:7f:50:c1:f4:0a:e5:55:1d:29:b9:
c8:2b:ad:7b:27:4a:65:3f:60:f3:15:4c:5c:c2:0a:
d2:64:ac:62:bf:cf:8c:52:7e:fa:a4:ab:80:1c:63:
73:bc:bb:9b:6f:d9:1e:c0:85:f6:e1:52:0a:88:7f:
47:a2:d9:bf:7b:db:c5:df:d7:79:c0:0e:26:e6:5d:
fd:d7:e8:bd:d7:72:78:ac:91:c3:59:75:70:73:0a:
f3:37:12:7f:c3:78:aa:e2:7f:76:25:70:3b:37:78:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3B:34:63:AB:81:A5:A2:AA:07:60:FF:5C:29:54:E4:90:2F:E2:88
X509v3 Authority Key Identifier:
keyid:B8:66:11:D1:D9:0F:0A:80:7B:29:49:F7:47:4D:41:C3:68:38:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGYR0dkPCoB7KUn3R01Bw2g4htw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/CDs0Y6uBpaKqB2D_XClU5JAv4og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.160.0/22
IPv6:
2a01:9200::/32
Signature Algorithm: sha256WithRSAEncryption
88:28:a8:2b:a6:4e:4d:1e:1c:ba:bd:ea:c0:75:25:d4:a2:f1:
e7:b1:0b:cf:11:78:0d:c0:b1:3c:31:e6:a8:42:eb:e1:fe:6c:
85:14:38:d9:94:3a:c4:c8:fe:82:9e:e6:98:c1:d6:19:4d:34:
3c:b5:76:28:19:86:44:49:63:be:e2:11:d1:b7:2e:31:6e:7d:
3e:7a:b4:d6:7f:62:3a:31:f9:2c:e7:be:2d:fb:43:b8:a0:76:
e9:01:fb:bd:5a:79:6b:c8:7d:72:a0:9d:86:be:76:ca:47:57:
47:7d:fa:28:b4:04:64:1d:3d:74:74:3a:a1:cc:7d:d6:86:d7:
70:06:dd:bc:24:aa:1f:c7:49:0c:ee:ea:59:2b:2d:b6:38:4c:
f4:ff:cd:1b:77:b3:d2:0e:5b:89:d7:c0:57:ea:2a:41:38:dd:
5c:6e:73:c0:e9:e1:aa:1b:ca:b0:29:ce:6e:e5:a1:d8:58:88:
51:f4:ea:58:13:f6:8f:4a:3a:c6:a9:0d:83:3c:b1:30:e5:33:
bb:63:b1:a7:72:db:d0:09:44:8d:c3:62:45:8b:e2:05:84:e8:
b9:d9:68:ec:b0:cb:f2:df:63:9f:26:16:20:81:68:64:4b:dc:
2d:1d:af:b1:bd:0e:e2:f2:13:e7:19:93:d9:5d:63:7b:cf:0e:
1d:09:24:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:54:00 2025 by rpki-client