Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/s0PuoSm-KYTqqu0d3WqQI-1GOOA.roa
File: s0PuoSm-KYTqqu0d3WqQI-1GOOA.roa (raw, json)
Hash identifier: P+t3ZmJ+56vGNNpYQ8NtgineWZuch78/BUzglqGy8RI=
Subject key identifier: B3:43:EE:A1:29:BE:29:84:EA:AA:ED:1D:DD:6A:90:23:ED:46:38:E0
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 0183A8302D213F200E5F97A80C161B6FE9CF
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/s0PuoSm-KYTqqu0d3WqQI-1GOOA.roa
Signing time: Wed 05 Oct 2022 12:47:53 +0000
ROA not before: Wed 05 Oct 2022 12:47:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6799
IP address blocks: 185.174.56.0/24 maxlen: 24
185.174.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:30:2d:21:3f:20:0e:5f:97:a8:0c:16:1b:6f:e9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Oct 5 12:47:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b343eea129be2984eaaaed1ddd6a9023ed4638e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:85:18:09:42:42:36:13:12:8f:a9:93:81:
d9:41:f0:3d:25:14:37:68:c9:4c:e0:da:bf:4b:c1:
64:dd:fb:97:6a:a7:4f:53:58:43:fd:b7:ff:65:19:
65:88:56:49:6d:02:0e:99:e9:6a:3d:30:6f:ba:7d:
8b:c7:09:8b:bc:94:36:0d:fc:5e:2d:58:6a:3c:8a:
b2:07:c6:70:78:81:64:c0:6c:57:21:6a:10:ac:05:
62:77:69:eb:88:b0:be:78:4a:7c:fc:32:3f:11:57:
8a:c2:bb:c6:22:3a:a1:d8:f6:9d:61:c1:b2:19:b4:
03:2b:c0:f7:a9:a0:fb:ec:29:a6:07:50:17:3f:06:
5e:29:e9:6a:e8:31:92:55:de:76:9e:1a:72:3f:fb:
b3:8d:3f:e0:88:e6:18:ed:d8:05:4e:67:99:6f:9f:
11:9d:b0:d0:8c:e2:c0:c0:b4:fd:b3:78:09:ce:47:
e7:91:4a:8a:d1:c0:01:b0:91:20:83:be:26:25:51:
3a:29:22:70:1b:10:38:2e:32:2a:88:74:ea:3c:01:
6d:54:04:6e:d9:bc:06:2d:37:40:fc:53:41:96:da:
24:c2:65:55:61:5a:c8:20:a5:2a:34:12:7b:d3:95:
27:9d:40:bb:fd:29:e8:3e:c6:cc:6d:82:2c:a4:85:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:EE:A1:29:BE:29:84:EA:AA:ED:1D:DD:6A:90:23:ED:46:38:E0
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/s0PuoSm-KYTqqu0d3WqQI-1GOOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.56.0/24
185.174.59.0/24
Signature Algorithm: sha256WithRSAEncryption
20:83:28:ea:2e:71:b8:80:70:c6:87:0c:20:77:b3:25:7d:5d:
af:1b:b1:e3:b4:2e:b1:31:68:e2:4a:cc:f9:87:48:c2:b7:aa:
34:59:54:cd:fc:8a:5b:9f:f4:48:6f:d7:ef:91:a4:3b:04:ee:
7d:2c:55:f5:49:35:ef:d6:8b:d7:d4:0a:80:61:c2:18:a7:42:
1c:d8:3c:4a:26:ac:f7:80:d4:d2:d9:4d:d1:95:0a:c7:05:2d:
1f:9a:d7:10:c3:33:f1:e3:5f:d2:21:5e:63:1a:39:7d:3c:79:
c7:74:ea:28:f5:0b:0a:3e:4e:ed:11:fc:eb:07:50:15:f5:c6:
f8:69:59:13:d2:09:77:f0:5e:3f:99:aa:4f:dd:bd:e0:53:42:
9d:59:e2:4d:9f:f2:f4:e4:a2:ef:77:ba:94:14:cc:84:b4:67:
15:16:b9:a5:2f:1a:38:bf:ca:d4:b9:48:0e:60:66:68:b8:ab:
6c:26:91:e7:76:93:e3:f7:ef:ae:18:80:b9:e9:e1:e7:b8:f8:
b2:59:29:07:6b:0b:65:c5:64:ec:d4:aa:df:ba:15:01:81:5f:
c9:26:56:2d:28:c5:b1:92:05:0f:ff:58:07:27:92:6e:ba:6d:
a7:29:2d:8a:ee:72:af:9d:6a:d6:a2:37:c3:0f:07:c2:87:59:
d7:90:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:09:24 2025 by rpki-client