Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa
File: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (raw, json)
Hash identifier: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=
Subject key identifier: F9:7F:F9:AC:1C:0E:E9:0D:26:12:A5:4E:F8:7E:D8:5D:04:5B:3F:CF
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 01941F8C5C4B5D198AEE07A0FE26FF2D588D
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 185.46.184.0/24 maxlen: 24
185.46.185.0/24 maxlen: 24
185.46.186.0/24 maxlen: 24
185.46.187.0/24 maxlen: 24
185.205.80.0/24 maxlen: 24
185.205.81.0/24 maxlen: 24
185.205.82.0/24 maxlen: 24
185.205.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:4b:5d:19:8a:ee:07:a0:fe:26:ff:2d:58:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f97ff9ac1c0ee90d2612a54ef87ed85d045b3fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:58:5c:ca:ae:3f:42:21:e0:d9:63:64:d9:
44:36:ff:5b:ed:ab:08:4b:bc:17:ee:4b:4e:cf:de:
28:48:bd:c1:9f:20:3a:0a:1f:59:a8:5e:1c:22:a5:
64:5a:a3:5f:73:ff:4b:13:86:66:50:00:ae:6b:a0:
e3:03:19:04:3f:58:9f:67:54:16:42:68:e0:76:3b:
a4:8c:70:5e:d2:7f:94:3a:bf:13:1c:af:64:a2:f5:
dc:eb:e0:45:10:cb:8c:71:f4:c6:1f:b4:98:c4:5e:
d2:01:bd:9a:39:65:56:64:d6:a8:55:b6:34:9c:88:
3a:ea:c2:0d:36:c7:f3:93:74:ad:2e:65:0f:dd:89:
49:0f:cf:d4:bb:81:7b:f8:a6:06:7b:34:66:4f:92:
78:10:be:5c:69:05:30:ab:7c:4c:a3:97:25:16:53:
11:27:04:a7:fa:d6:41:49:d5:8a:c8:3b:b3:11:e2:
00:24:0a:cb:d9:a8:8c:21:39:32:29:f4:c7:dd:df:
3a:dc:df:16:af:54:f0:62:d9:69:6b:1f:3d:46:76:
91:05:df:1e:1b:7f:16:65:a4:40:03:fa:94:df:8c:
6e:d4:7c:9c:a8:78:4d:85:13:57:ca:e9:c9:0a:0b:
e0:29:70:8a:6b:a0:9b:bb:c7:bb:ed:c4:cb:5b:1a:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:F9:AC:1C:0E:E9:0D:26:12:A5:4E:F8:7E:D8:5D:04:5B:3F:CF
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.184.0/22
185.205.80.0/22
Signature Algorithm: sha256WithRSAEncryption
59:4b:8c:b7:2c:f0:17:71:55:27:f1:04:3a:a1:e1:d6:03:4e:
d8:d6:6a:4e:f6:d0:0a:f2:da:c4:19:d6:5a:27:b6:b7:fc:28:
1d:1d:b9:45:91:1a:3e:cd:33:85:34:13:bb:1f:0d:38:1d:07:
c9:f1:81:77:99:4f:8e:15:9f:74:9e:1a:7e:2b:67:fc:3a:78:
f4:fd:43:3c:d5:fb:29:83:50:0b:31:50:11:e0:7b:fc:94:91:
e6:24:37:d9:7c:53:33:9d:80:ef:58:b8:59:06:15:f5:4b:7d:
da:ea:b5:74:38:5f:35:c6:5b:1c:1a:da:83:84:b8:cc:53:e6:
6c:60:28:2c:37:bf:55:ce:80:76:15:5b:4e:a8:a7:9c:35:ae:
17:6c:7c:fe:25:a2:5f:b4:31:15:b2:69:52:39:5d:dd:4b:e8:
9e:b3:62:1e:1f:22:7c:96:c3:8e:9d:20:24:c3:fa:ca:0d:6b:
27:75:d4:bb:94:b2:83:74:d6:aa:16:e7:68:62:9c:28:f8:19:
03:7f:c8:19:55:dc:17:1d:de:3a:29:fa:7c:af:6b:96:0d:ae:
51:f3:7a:91:5c:95:eb:84:bf:7f:f6:db:e4:8b:bc:26:76:27:
55:58:7b:76:49:65:8e:2d:f2:60:27:5b:0f:4d:ce:3d:86:2d:
7b:db:a9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:18 2025 by rpki-client