Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/2fyWVlLkAEeAQkznD2Qoa4qb7FY.roa
File: 2fyWVlLkAEeAQkznD2Qoa4qb7FY.roa (raw, json)
Hash identifier: Pdbprh2qoQdIyM1gLbNesQuJNr7SZRC3rGh8cLNfay4=
Subject key identifier: D9:FC:96:56:52:E4:00:47:80:42:4C:E7:0F:64:28:6B:8A:9B:EC:56
Certificate issuer: /CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Certificate serial: 01856F4B48369F7DD7643DBBA02050C693C7
Authority key identifier: 0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/2fyWVlLkAEeAQkznD2Qoa4qb7FY.roa
Signing time: Sun 01 Jan 2023 21:44:42 +0000
ROA not before: Sun 01 Jan 2023 21:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.88.184.0/24 maxlen: 24
185.88.186.0/24 maxlen: 24
185.88.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:48:36:9f:7d:d7:64:3d:bb:a0:20:50:c6:93:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Validity
Not Before: Jan 1 21:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9fc965652e4004780424ce70f64286b8a9bec56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:5e:99:9d:3b:f3:64:35:e5:95:1d:07:d5:
e1:65:34:50:da:a8:b1:56:35:aa:ff:a3:c4:a8:f7:
f0:10:3f:f6:2d:d9:67:67:bb:9c:81:3a:ca:fa:05:
d2:b3:e6:c5:99:59:71:0a:98:40:79:e2:a1:3b:70:
79:75:92:a5:c8:c7:3d:f7:d1:20:d3:79:02:03:05:
be:ef:36:ae:58:55:85:af:5c:bd:0b:bf:93:47:79:
83:59:65:f0:6f:df:17:73:17:95:73:a3:af:d8:11:
44:2b:7f:d7:e7:21:0a:e3:7e:e2:9b:e2:ad:8c:f7:
6a:03:2c:d0:96:c6:78:72:95:a1:64:62:1c:7d:b0:
a9:1e:cb:5c:7d:00:ca:fd:5c:b2:36:f4:d6:8d:64:
ab:34:ff:40:3f:b0:28:c2:f9:5d:9c:0b:d5:d1:4c:
e1:bd:d6:1e:57:cf:50:16:43:47:9f:a2:7c:cc:6c:
a7:d3:22:99:ce:ba:6f:68:f9:79:bc:49:78:4e:b6:
79:40:95:27:f1:92:e5:b0:13:f4:78:21:d0:c9:fb:
f5:c2:fc:70:18:48:7c:9c:2f:1c:b6:d1:0e:33:40:
0d:f8:96:c4:ce:12:82:1a:25:21:73:31:78:05:9d:
40:f6:1d:0c:8d:d6:3a:d1:b8:2d:b2:84:40:6a:e1:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:96:56:52:E4:00:47:80:42:4C:E7:0F:64:28:6B:8A:9B:EC:56
X509v3 Authority Key Identifier:
keyid:0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/2fyWVlLkAEeAQkznD2Qoa4qb7FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/CxdYc63rg8jxai4OPLslHliDOoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.184.0-185.88.186.255
Signature Algorithm: sha256WithRSAEncryption
51:c6:27:fa:21:88:1a:77:30:d5:fb:7c:7e:66:ad:c3:fd:9c:
94:0a:ce:5d:b6:3f:d5:95:a9:ae:75:38:a0:41:f1:28:d1:e8:
62:8c:1e:14:54:ce:92:7f:33:f8:1e:9b:3c:79:f1:9c:ee:c2:
34:a5:39:45:2a:44:db:c8:b7:d3:62:78:65:f7:77:fe:cf:3e:
c7:1d:97:0f:99:0f:82:64:59:ff:da:af:9e:c3:b3:85:a1:52:
a6:25:ae:1f:af:f0:da:bf:0d:9f:0c:da:75:1f:43:e2:8d:43:
8f:ac:4c:d6:b4:63:5c:19:6c:48:e8:8c:a0:3c:be:b6:92:6c:
69:b0:03:c8:25:a8:52:7c:20:e0:0c:5f:53:13:54:12:92:3b:
c8:ad:a3:b4:b9:cd:2c:40:44:a2:61:51:b1:95:85:7e:39:2e:
e6:49:ed:0c:49:21:a7:64:97:b1:45:31:84:23:30:d6:61:3a:
55:04:d7:0a:35:f4:28:54:ed:7e:9f:d7:5b:4e:c2:1e:1d:05:
15:8e:b8:c2:6a:36:f3:4a:f9:38:39:40:20:c7:8e:e9:7b:83:
63:48:9e:60:20:8b:42:47:3f:28:13:59:37:08:fb:96:59:c8:
7f:c2:27:fb:60:8d:9e:94:aa:ba:05:95:51:18:84:7d:53:65:
11:f3:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:10 2025 by rpki-client