Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/deIOkmJ8ssMd2RwtI-v-jMre1M8.roa
File: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (raw, json)
Hash identifier: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=
Subject key identifier: 75:E2:0E:92:62:7C:B2:C3:1D:D9:1C:2D:23:EB:FE:8C:CA:DE:D4:CF
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 01942369B54FE8F11FA1C4174EAAD4566039
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/deIOkmJ8ssMd2RwtI-v-jMre1M8.roa
Signing time: Wed 01 Jan 2025 19:48:37 +0000
ROA not before: Wed 01 Jan 2025 19:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8699
IP address blocks: 185.120.28.0/22 maxlen: 24
185.120.28.0/24 maxlen: 24
185.120.29.0/24 maxlen: 24
185.120.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b5:4f:e8:f1:1f:a1:c4:17:4e:aa:d4:56:60:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jan 1 19:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75e20e92627cb2c31dd91c2d23ebfe8ccaded4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:c3:b2:2e:8f:99:9d:d9:05:c0:45:f5:c9:
dc:e7:49:41:53:b6:4a:00:84:c1:29:44:82:3c:47:
cc:0b:70:b1:34:81:85:1d:c2:a5:d1:bb:c2:37:f1:
72:f3:7d:2f:1b:0b:9e:38:47:a8:84:90:13:ad:9c:
27:af:26:8b:f5:d1:f2:22:ba:4b:78:f1:0c:5e:df:
68:c2:25:d8:63:86:18:96:5d:ae:e1:3b:9e:d5:22:
c6:c5:fa:e2:91:7b:48:fc:a8:aa:dc:1d:33:c1:ad:
1b:12:43:1b:4a:53:3d:93:2f:25:25:5b:a8:7b:fc:
6e:34:36:26:25:4d:0b:f3:f1:07:ac:e3:fe:19:e4:
34:f7:0b:ba:b9:5b:d8:e9:d0:6a:c5:7e:7a:c6:52:
d5:3d:35:85:51:9e:25:dc:ba:27:ef:ed:6d:10:7b:
e4:6b:49:b7:07:d8:17:99:76:95:2b:4c:ae:88:46:
dc:5d:d8:64:5d:54:26:e1:fe:0b:7c:78:3b:5b:08:
15:a4:4f:fd:f7:06:69:8c:cb:89:97:22:76:2f:08:
69:24:81:61:0a:d5:43:f0:1a:ef:31:b4:fd:ef:17:
ee:9e:03:35:14:7d:2d:05:56:8c:4e:49:40:6c:75:
f5:fd:ee:9f:40:b5:74:97:6b:a3:91:9c:b4:a6:7c:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:0E:92:62:7C:B2:C3:1D:D9:1C:2D:23:EB:FE:8C:CA:DE:D4:CF
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/deIOkmJ8ssMd2RwtI-v-jMre1M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.28.0/22
Signature Algorithm: sha256WithRSAEncryption
71:74:a1:62:c0:77:19:54:f5:24:e7:f1:e0:5f:2c:ea:f4:80:
39:0d:fc:61:c3:9e:c9:7b:fb:64:6d:39:f9:08:57:8a:99:c2:
a1:7a:3d:59:f1:cd:18:e9:a2:58:26:6c:83:f1:d6:46:3d:5e:
00:96:40:17:cb:0a:1e:41:75:a9:95:32:aa:d7:2f:f7:5a:0d:
00:c0:36:88:89:84:eb:10:24:c3:4a:80:ac:16:b0:e6:d9:92:
d2:8c:94:15:78:83:14:b1:e9:99:0c:b7:2a:8e:57:cb:f0:bb:
db:7e:bb:3f:a2:c9:15:74:ee:d8:0a:38:b9:54:2b:8d:f7:59:
49:8a:a7:bf:1b:8c:07:0c:d1:e1:7e:1b:c1:b0:0c:93:75:2b:
9f:ae:75:1f:c5:48:fc:d4:b8:b1:62:64:47:a2:84:ee:bf:55:
f6:38:91:86:1b:38:65:a2:fc:71:60:1c:84:40:13:4a:69:1b:
ed:4a:b1:f0:71:34:60:e4:10:e2:d2:eb:22:e4:15:2c:a0:78:
3b:c7:f5:31:91:b9:af:7f:09:33:c9:b1:01:96:24:8b:4f:bb:
0b:0b:08:ef:8e:29:e5:70:2c:9c:ea:50:7e:db:1c:70:23:3a:
06:f4:ae:4c:89:9e:c8:48:15:8a:ec:26:fb:34:fe:91:87:aa:
1d:82:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:00 2025 by rpki-client