Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa
File: DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa (raw, json)
Hash identifier: kpTlHHw5FsxD4697vv8Q+YHIpuXKVuz/l4Fu6lFpvJY=
Subject key identifier: 0E:2B:2D:67:75:43:90:85:2F:48:0F:F9:B8:DB:97:21:03:CE:5C:F4
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019437E58FE18D532711C43A68DBEF76DA14
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa
Signing time: Sun 05 Jan 2025 19:16:19 +0000
ROA not before: Sun 05 Jan 2025 19:16:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57771
IP address blocks: 185.54.92.0/22 maxlen: 24
185.54.92.0/24 maxlen: 24
185.54.93.0/24 maxlen: 24
2a00:8640::/29 maxlen: 48
2a00:8640::/32 maxlen: 32
2a00:8641::/32 maxlen: 32
2a00:8642::/32 maxlen: 32
2a00:8642:dc1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:37:e5:8f:e1:8d:53:27:11:c4:3a:68:db:ef:76:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 5 19:16:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2b2d67754390852f480ff9b8db972103ce5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:ba:7b:a1:85:34:71:20:92:f5:57:5c:f3:
35:58:ae:3f:54:ea:14:a2:e9:f7:00:f1:8c:33:76:
50:a9:73:96:38:93:6e:19:0e:40:99:74:fd:96:28:
4a:de:85:aa:ee:93:2b:18:88:41:d5:b5:49:6f:69:
1c:1c:2f:12:63:ac:29:82:5e:09:ff:8f:fe:e1:46:
a3:e8:ba:6f:17:a3:bf:52:2f:8d:22:54:74:8d:a8:
ca:c5:37:d7:a6:a8:cd:bf:a7:6b:4f:3c:6f:f5:4d:
23:fb:b7:b4:83:f7:4c:d3:45:82:20:43:ba:51:be:
db:98:d1:a4:f7:3d:bd:46:1d:63:bd:13:f1:0d:6e:
14:59:70:1c:a3:81:da:f9:a1:5b:9f:d2:32:c0:b1:
15:9d:44:7b:69:c0:ab:7f:84:d1:d2:77:d1:bd:41:
0e:83:32:0e:2b:86:9c:15:43:cf:cb:58:bb:a3:d3:
1e:36:cf:97:bb:a7:0d:bf:3f:cf:3c:8d:bf:3b:62:
b2:f2:ea:5a:cc:2f:1a:9f:71:2e:14:eb:f7:af:36:
32:88:7f:9c:77:f4:36:78:78:f6:83:8e:36:1f:42:
88:85:f9:a7:50:3d:8b:b7:b0:84:75:c8:d9:32:2d:
6c:0e:7a:55:b0:af:1b:fc:25:5c:87:5a:01:60:39:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2B:2D:67:75:43:90:85:2F:48:0F:F9:B8:DB:97:21:03:CE:5C:F4
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/22
IPv6:
2a00:8640::/29
Signature Algorithm: sha256WithRSAEncryption
19:49:28:11:df:70:3f:04:e3:4e:df:8d:d9:1a:84:af:7b:8c:
3f:62:a7:64:75:07:29:b7:80:54:d3:33:21:7b:e8:69:ab:6d:
7d:40:14:92:2d:0c:6c:68:de:fb:87:62:58:65:1a:de:0d:6a:
72:99:3d:b8:92:46:93:a2:ba:72:61:6a:73:8c:a6:fb:75:89:
62:b1:42:24:e0:d5:fa:12:c8:5c:92:9b:fc:c0:90:89:d4:d5:
b5:87:4e:14:7e:26:e0:5e:49:ba:8e:4b:16:c0:43:68:1c:8b:
82:6c:c7:82:f3:13:0f:b4:c0:1a:05:04:df:85:7a:29:3b:80:
0c:f1:d6:e3:57:e6:0e:07:9b:68:04:c6:48:71:97:02:4b:e1:
80:75:ed:0f:4d:e4:c8:8d:a0:8b:dc:3c:93:73:c3:7c:c4:89:
57:01:83:38:24:f4:ce:9b:a5:78:70:79:d8:ce:64:8f:28:64:
5a:7a:ab:ff:12:a8:a6:2c:43:fd:02:b8:82:bc:6c:e8:f9:aa:
10:86:64:7a:7a:b0:e6:4d:cc:f3:98:3a:9d:ca:7e:87:9e:67:
8a:44:2d:37:7e:06:63:7b:08:a4:3d:a0:57:7e:b0:94:fe:8d:
01:4f:1a:f8:8d:58:19:5e:6c:37:2c:35:ba:30:e9:fb:5d:b7:
20:79:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:19 2025 by rpki-client