Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/IMNeIJkxtwQghHk0OVw0g1XyQjw.roa
File: IMNeIJkxtwQghHk0OVw0g1XyQjw.roa (raw, json)
Hash identifier: pAijVG3xgP8vnE9pTk9onojsErF8yN+EzFJF20g/epE=
Subject key identifier: 20:C3:5E:20:99:31:B7:04:20:84:79:34:39:5C:34:83:55:F2:42:3C
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 0194E4CB5ED76854378A1F7459D88607F4F8
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/IMNeIJkxtwQghHk0OVw0g1XyQjw.roa
Signing time: Sat 08 Feb 2025 09:02:00 +0000
ROA not before: Sat 08 Feb 2025 09:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 185.84.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:cb:5e:d7:68:54:37:8a:1f:74:59:d8:86:07:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Feb 8 09:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20c35e209931b70420847934395c348355f2423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0e:c7:f6:20:dd:83:20:02:e5:c3:6a:aa:6f:
23:aa:87:8a:13:f5:12:db:db:59:b1:66:c7:22:c7:
4f:9d:93:e5:3e:d0:c4:14:0b:ae:c7:9c:4b:ff:67:
31:b7:17:51:93:57:b5:51:46:f5:21:b1:a4:91:5e:
e7:0d:37:3e:2b:39:e7:ca:f1:cb:a3:6f:e4:42:42:
61:cf:7e:d7:99:c9:22:a2:da:cf:5e:fd:6d:da:80:
fc:f8:3f:5a:83:1b:0e:8f:55:d8:64:f3:86:97:16:
6d:e5:59:d0:fa:64:bb:ab:71:f4:3d:ac:e1:ea:04:
1e:c1:33:b5:d7:4b:71:b3:ac:ec:8c:2a:a3:3f:14:
25:46:89:ef:45:4b:89:36:52:26:59:38:ef:e1:34:
33:02:06:39:d1:7a:ef:46:8f:8e:ad:49:07:07:ef:
48:33:e2:b2:3f:80:da:35:13:34:34:c9:60:e0:0e:
34:c2:fa:0d:5d:c5:1f:1a:e9:f3:48:55:3e:5a:26:
49:23:c2:a2:13:9a:bb:8a:bd:7d:e5:c4:bd:5f:c0:
00:1d:d9:54:e9:f5:eb:1e:e2:d6:65:36:4f:ad:b2:
b3:78:1f:c8:ef:37:f0:ec:c6:6f:25:92:34:09:00:
34:4e:62:7f:58:18:d2:1c:e7:b4:4d:76:1d:a0:ae:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:5E:20:99:31:B7:04:20:84:79:34:39:5C:34:83:55:F2:42:3C
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/IMNeIJkxtwQghHk0OVw0g1XyQjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.159.0/24
Signature Algorithm: sha256WithRSAEncryption
95:40:03:56:6f:bb:9f:75:5c:f0:e7:70:92:11:60:49:28:c8:
7c:60:d2:83:28:05:14:4c:96:cb:3b:72:c5:c5:e3:7b:55:bb:
15:ce:97:43:c2:4f:0f:fb:c1:02:e9:bf:ae:39:34:04:63:df:
71:a9:de:48:23:e8:2f:17:25:1e:54:cf:16:72:13:3a:5f:88:
d4:6b:13:1d:b3:3f:be:4b:9f:2f:38:da:2b:1c:1c:8d:10:b0:
a9:21:ec:93:42:fa:16:37:de:14:ab:9a:9c:b3:7b:c1:e9:93:
48:90:32:01:2e:c9:b5:74:d8:af:db:cd:5c:a1:80:e3:cd:61:
50:66:1d:71:88:c0:98:c7:dd:98:94:b6:e2:9e:a2:f6:3f:35:
c2:53:11:4d:f8:df:21:61:4d:7c:23:7e:59:26:fe:a7:ed:74:
fd:66:21:d3:35:91:4d:a4:0f:92:e3:8f:f5:a8:5c:5d:40:38:
10:67:12:09:8b:8c:56:52:44:7f:38:6f:d1:be:10:30:f1:f7:
ca:06:06:60:aa:93:c8:34:e2:66:f6:bd:f2:89:d2:31:7a:ff:
34:64:b6:47:d2:01:b7:98:4e:b9:19:3a:22:63:5d:4f:d9:7d:
4a:fa:56:c6:f3:43:e6:1d:8f:43:b3:08:2f:79:1d:5f:e8:49:
1d:f7:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:36 2025 by rpki-client