Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/v9KM8OQ-DWpjdph76UHaqdPxykY.roa
File: v9KM8OQ-DWpjdph76UHaqdPxykY.roa (raw, json)
Hash identifier: ZEWsWvyNwHDggCDXVB+qSLAsmH44pX9075p3IA13cVk=
Subject key identifier: BF:D2:8C:F0:E4:3E:0D:6A:63:76:98:7B:E9:41:DA:A9:D3:F1:CA:46
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 01942068528E7EECC2E039D99200E0212388
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/v9KM8OQ-DWpjdph76UHaqdPxykY.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12812
IP address blocks: 185.190.28.0/22 maxlen: 24
185.190.28.0/24 maxlen: 24
185.190.29.0/24 maxlen: 24
193.188.128.0/22 maxlen: 24
193.188.128.0/24 maxlen: 24
193.188.129.0/24 maxlen: 24
193.188.130.0/24 maxlen: 24
193.188.131.0/24 maxlen: 24
2a02:f700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:52:8e:7e:ec:c2:e0:39:d9:92:00:e0:21:23:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd28cf0e43e0d6a6376987be941daa9d3f1ca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:aa:2a:70:64:fe:ae:a3:87:ec:10:2b:c7:
88:c3:35:62:0c:d4:a1:c0:f1:71:bd:ba:05:18:ab:
0b:68:41:f3:45:65:a2:b3:70:46:99:df:7e:e1:4b:
e2:a7:ad:e6:3f:29:e8:68:5c:8b:8a:f3:11:70:d6:
1e:54:1a:83:39:74:7b:ca:c2:fd:1d:07:90:3f:f3:
ca:5a:b5:c9:1f:71:53:eb:13:e6:90:c8:18:89:a6:
cf:f6:21:00:25:37:8e:f4:ec:2e:2e:52:12:c6:6a:
6d:42:6c:26:b1:27:c9:ed:f4:63:74:e2:b7:35:3c:
45:3e:52:9e:51:33:81:bf:fd:5f:7d:07:37:06:ab:
db:ae:21:9e:69:c4:b1:18:7b:c9:8b:70:bd:27:0d:
b6:3c:ee:ce:07:ba:6c:54:bf:8e:c2:18:6a:20:51:
3e:1a:cb:b0:5c:ea:9a:94:a6:3a:96:d9:4b:ba:a7:
04:68:7c:ff:e1:f7:80:0c:17:5b:ff:21:f6:03:b5:
68:2d:c7:0a:18:98:90:77:4e:2e:a8:76:9a:6b:8f:
ab:50:c6:73:10:8a:17:51:82:0a:70:b4:10:6f:fd:
04:d0:40:ed:26:57:c6:f0:56:d6:bc:66:f9:f2:a9:
26:02:cd:c8:7a:6f:ec:b8:b7:c2:21:63:f8:68:78:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:8C:F0:E4:3E:0D:6A:63:76:98:7B:E9:41:DA:A9:D3:F1:CA:46
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/v9KM8OQ-DWpjdph76UHaqdPxykY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.28.0/22
193.188.128.0/22
IPv6:
2a02:f700::/29
Signature Algorithm: sha256WithRSAEncryption
0e:86:c3:1e:9a:50:04:44:cf:7e:3c:59:70:ff:c6:4c:de:7e:
0a:a0:ab:e5:1f:85:6b:3b:c2:22:7f:b3:6a:96:e1:3d:09:48:
06:47:0a:7d:e0:54:e2:67:3d:0e:d0:58:f1:cb:1f:90:0c:9a:
99:14:d0:f5:f0:86:ce:ce:8e:af:66:dc:14:a1:5b:51:e1:df:
bb:6a:6b:4e:49:9f:5d:df:e3:b3:83:7a:d8:09:26:e8:eb:8e:
40:d1:0a:f7:ec:3c:18:63:a3:8f:9d:fc:52:da:eb:02:19:83:
c3:4e:f6:b4:fb:c8:7c:95:3f:d0:8d:74:d2:a3:03:69:72:4e:
f9:a0:ce:e7:e7:39:31:ff:11:8a:50:33:71:4f:63:1f:fd:b2:
44:aa:8a:c0:f4:7c:89:ba:cb:12:1f:b9:94:5a:bb:a2:27:5b:
03:2b:a9:10:f9:ea:94:76:fe:5d:b2:48:93:b7:9a:0c:e8:a1:
c5:4d:e3:85:16:c1:c9:75:e3:71:b5:b6:41:e3:a0:e0:fc:ce:
d5:fc:de:77:2e:56:74:96:bb:24:d4:19:23:5c:c2:1a:a7:ef:
f4:74:48:c8:7d:75:48:4f:5e:70:6d:f2:55:f1:1d:67:56:27:
a2:93:64:31:ca:a6:87:43:9d:64:24:4f:9e:66:c7:28:66:0b:
26:9f:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:09 2025 by rpki-client