Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/fDbGVlgtsrCvwYCmF9tRzSS1PsI.roa
File: fDbGVlgtsrCvwYCmF9tRzSS1PsI.roa (raw, json)
Hash identifier: zWgvClC8tpvL/R8i4pTe49kC8bXhhEA+XASyJf9qHm4=
Subject key identifier: 7C:36:C6:56:58:2D:B2:B0:AF:C1:80:A6:17:DB:51:CD:24:B5:3E:C2
Certificate issuer: /CN=0d17fbb6604d94c2e99f46060ea7a7c0c7443451
Certificate serial: 0D0D78A4
Authority key identifier: 0D:17:FB:B6:60:4D:94:C2:E9:9F:46:06:0E:A7:A7:C0:C7:44:34:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRf7tmBNlMLpn0YGDqenwMdENFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/fDbGVlgtsrCvwYCmF9tRzSS1PsI.roa
Signing time: Sat 01 Jan 2022 01:02:05 +0000
ROA not before: Sat 01 Jan 2022 01:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211212
IP address blocks: 185.203.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218986660 (0xd0d78a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d17fbb6604d94c2e99f46060ea7a7c0c7443451
Validity
Not Before: Jan 1 01:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c36c656582db2b0afc180a617db51cd24b53ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:8a:86:65:c6:c8:d2:f7:30:30:f3:61:4e:
3c:c8:23:a7:f0:dd:38:57:d9:90:ef:5f:5b:77:29:
4c:4d:28:35:12:0e:5c:84:fd:61:0c:d4:d0:6f:52:
f3:c5:3e:de:c3:48:53:03:37:65:4a:73:7d:1e:b9:
5d:61:d7:fe:19:f7:e8:cb:42:e3:20:44:a4:87:68:
a5:a2:d0:a6:e4:36:0f:27:a0:0d:f2:30:fd:db:23:
b4:6a:e3:ed:93:28:66:e8:d2:04:c6:85:ca:50:2c:
b9:86:fc:61:e2:92:06:5d:e8:45:fa:16:9a:ae:22:
8d:a0:df:4d:8f:5a:5c:59:23:62:eb:f8:0a:77:52:
ef:fe:5c:e0:51:51:09:19:cf:a0:1c:08:1d:95:4d:
bf:d0:9d:5c:a3:19:f2:52:56:db:52:86:a2:c9:ed:
29:dc:3f:c5:34:62:25:04:59:50:7b:3d:b5:86:a1:
80:5f:7f:b5:4b:9a:7b:61:5d:9f:f4:e8:9b:95:d6:
14:be:60:9b:92:22:aa:5f:58:2a:37:e7:58:de:78:
cf:21:df:48:70:3f:f7:a2:52:ed:da:57:da:e5:8e:
c1:ab:58:b1:87:43:6f:4d:b6:d6:6a:b5:e2:1b:06:
1e:30:18:6e:e3:bd:d1:eb:e9:f7:26:b9:8e:06:c5:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:36:C6:56:58:2D:B2:B0:AF:C1:80:A6:17:DB:51:CD:24:B5:3E:C2
X509v3 Authority Key Identifier:
keyid:0D:17:FB:B6:60:4D:94:C2:E9:9F:46:06:0E:A7:A7:C0:C7:44:34:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRf7tmBNlMLpn0YGDqenwMdENFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/fDbGVlgtsrCvwYCmF9tRzSS1PsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4d1aa6-4004-4ec8-83f0-3055dbadbb22/1/DRf7tmBNlMLpn0YGDqenwMdENFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.184.0/22
Signature Algorithm: sha256WithRSAEncryption
23:20:90:61:ff:7d:0b:f9:d7:ba:4e:54:f6:25:d5:ef:03:64:
c6:67:1d:c9:f7:7e:f9:bc:9f:41:b3:93:f8:80:a8:c7:13:83:
4e:77:86:d4:7a:59:1a:16:a0:e5:d3:fb:83:84:ae:ea:0b:71:
6b:28:9a:88:02:6b:80:ee:55:7e:99:ca:1e:68:13:53:0a:47:
ce:52:10:4b:7c:fe:6d:ae:86:ea:fa:77:ac:36:52:5a:07:c1:
e6:48:15:b9:74:f8:07:f8:7d:ea:1d:ea:8a:2a:8b:81:7c:85:
8c:05:2b:83:84:98:53:49:84:b0:e2:d8:83:8e:50:25:80:2d:
60:a6:bb:f8:5c:69:d2:8f:dc:d6:bd:14:c6:b7:2a:f9:dd:36:
cb:30:fe:c7:80:1f:df:61:ae:e8:a2:f4:c3:94:d8:1f:4e:f3:
fd:0d:89:d5:57:d6:7c:a4:d6:17:89:f9:54:35:1e:7c:25:37:
4c:90:b0:df:58:e5:a7:b1:f8:ed:1d:e2:9b:85:98:00:27:24:
a0:58:59:c3:a8:24:04:0c:88:9b:95:1b:d2:4d:ee:c2:d4:4c:
46:3e:e6:1b:fc:4e:79:3e:2f:d2:5c:13:1a:d0:88:0b:e2:f3:
ee:25:74:b0:4f:2b:60:9d:36:7b:3c:fa:31:84:33:38:e5:e3:
d7:8b:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:08 2025 by rpki-client