Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa
File: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (raw, json)
Hash identifier: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=
Subject key identifier: 2F:71:31:D6:1B:98:19:B7:C5:68:89:23:5C:BE:0A:1A:37:56:8E:1D
Certificate issuer: /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial: 0194258F7586043BCFEEBE70CD92B98DB6E6
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207181
IP address blocks: 185.162.208.0/22 maxlen: 22
185.162.208.0/24 maxlen: 24
185.162.209.0/24 maxlen: 24
185.162.210.0/24 maxlen: 24
185.162.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:75:86:04:3b:cf:ee:be:70:cd:92:b9:8d:b6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f7131d61b9819b7c56889235cbe0a1a37568e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:07:7a:ec:52:88:8e:41:9d:da:c2:36:87:
a5:df:72:21:ea:29:55:ba:5b:f9:cf:4f:22:5a:51:
b1:71:9b:e7:dd:88:f1:5d:6b:af:fb:5e:56:de:75:
8f:cf:72:7c:9b:8f:00:4c:fe:f5:32:cb:25:d0:8b:
41:77:c0:0c:10:21:e1:31:da:26:ee:5a:c7:3c:24:
42:33:ec:6a:6d:32:6b:a1:12:bc:d6:f5:4e:08:24:
9b:de:80:28:dc:7f:92:0b:7c:b6:5c:c4:27:0e:f1:
e9:a2:01:c5:8c:5b:1a:1c:d0:98:31:06:e4:f9:66:
6b:fa:99:19:00:a6:96:04:05:28:61:a5:3d:9d:ee:
cd:ec:8e:bc:a9:66:31:d4:09:76:23:93:31:95:5d:
15:f7:43:10:4c:97:c1:8d:06:27:00:b3:b8:7f:c9:
1c:7f:8f:ff:13:07:43:ae:b9:b3:36:ca:c3:d2:aa:
21:04:44:b5:5a:8b:4a:09:aa:37:84:a0:63:73:cc:
b9:d6:49:0d:49:3b:92:30:a5:18:e3:19:0a:9b:c4:
9c:f3:91:ef:60:ef:8d:ed:62:a7:16:56:88:01:73:
94:18:37:6e:d1:b8:de:cb:d8:84:98:e4:d9:0d:bb:
5d:92:b0:37:45:f0:c3:b9:83:4b:78:59:c7:bf:9a:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:31:D6:1B:98:19:B7:C5:68:89:23:5C:BE:0A:1A:37:56:8E:1D
X509v3 Authority Key Identifier:
keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.208.0/22
Signature Algorithm: sha256WithRSAEncryption
79:f9:fd:66:a2:93:2e:21:0c:42:ec:b5:79:40:81:b7:ea:52:
e7:5e:4c:50:ff:5d:d8:f8:0e:a3:72:6e:95:ea:e4:56:72:c8:
2f:b8:2b:fa:40:90:38:aa:3b:3c:9a:d1:d2:c3:eb:c4:0e:f7:
42:45:1f:bc:ca:ca:68:ec:7f:71:06:15:4e:10:6f:5f:12:76:
63:5c:3b:fb:6b:64:ec:0a:4d:e4:5b:54:d4:28:82:ea:99:88:
75:86:aa:d3:ef:1a:c2:57:3e:46:6e:c2:64:63:0c:7d:fd:54:
ab:8c:d3:9d:d5:82:ae:e3:0b:36:cc:9f:b4:65:a8:31:4f:4d:
51:37:35:9b:98:91:3f:72:8f:25:5f:ac:96:af:15:1e:b3:26:
ee:96:2d:fa:46:3d:34:0c:c1:2c:22:7a:fb:c5:0b:21:93:47:
ae:a7:83:0c:d5:8e:0d:25:5b:d0:76:a9:fb:32:5b:23:08:cd:
0e:0d:8f:3a:d1:41:5b:77:6c:bb:ac:40:01:38:cc:07:65:0b:
09:78:21:1a:d4:d4:12:7a:65:4d:d4:c7:bf:37:05:01:7d:78:
c8:e2:18:28:6c:4f:d6:c4:bd:ba:0c:8c:be:90:cc:81:bc:53:
83:3d:35:7a:89:e2:58:9c:3e:dc:0c:98:12:83:d3:dd:a3:2c:
32:e2:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:31 2025 by rpki-client