Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa
File: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (raw, json)
Hash identifier: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=
Subject key identifier: D1:49:D2:F8:8C:52:AD:26:C9:BB:42:CC:C1:91:A0:AE:53:8C:41:A6
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B54AD5DAA7C2FA93C14EF452F04174
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa
Signing time: Thu 02 Jan 2025 15:49:40 +0000
ROA not before: Thu 02 Jan 2025 15:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216050
IP address blocks: 185.100.169.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4a:d5:da:a7:c2:fa:93:c1:4e:f4:52:f0:41:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d149d2f88c52ad26c9bb42ccc191a0ae538c41a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:3d:eb:a9:72:7e:e9:7d:c2:e4:5c:12:b7:
e3:b1:72:31:19:2d:5d:98:d7:1e:d4:9c:08:7e:2c:
82:d2:3a:0f:c2:0a:71:62:8c:ab:13:24:27:9d:98:
fd:84:13:b8:37:97:2b:be:57:6e:a3:6b:09:37:83:
3d:e3:59:04:57:52:af:b7:eb:43:f2:37:07:f9:1a:
17:78:c4:27:92:88:69:eb:2c:08:7e:35:0a:e3:fb:
ab:90:f2:3a:f2:04:69:15:55:40:d2:38:85:dd:fb:
5c:b9:d9:97:b2:14:b8:b7:01:3e:25:74:a2:7a:49:
8d:8d:58:e3:11:99:f4:f0:b1:a2:05:9f:f9:24:05:
46:3e:62:2f:a9:6b:1f:50:d9:0c:e8:7f:e3:a8:a7:
a3:00:32:a6:a7:63:5c:45:69:26:cb:5a:58:b4:c3:
af:95:a1:82:87:d1:a7:3c:71:6e:69:07:72:83:ff:
01:6a:eb:4e:4a:8f:54:26:bd:e0:b6:9e:7d:49:dc:
54:19:8f:52:12:9a:c3:89:71:53:cc:a6:c9:ab:5e:
3c:61:7e:e9:ca:cb:10:c7:2d:77:eb:df:79:29:9c:
53:a7:72:e1:32:5b:59:87:c4:66:8b:4b:f1:e4:a0:
31:b4:64:87:f2:31:fc:8d:58:dd:e6:d2:e4:01:19:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:49:D2:F8:8C:52:AD:26:C9:BB:42:CC:C1:91:A0:AE:53:8C:41:A6
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.169.0-185.100.170.255
Signature Algorithm: sha256WithRSAEncryption
2a:05:68:38:05:72:2a:81:d7:a9:38:9a:20:55:7a:7c:cb:75:
31:fe:93:30:01:8c:78:7d:34:8b:8f:50:1c:3e:89:7f:c0:97:
75:81:df:39:05:1f:6e:32:5d:d0:19:c7:00:e2:c2:41:00:7d:
2a:1e:1d:fc:24:2f:41:bd:3c:6e:d4:5c:ba:ac:1e:22:8c:ef:
5e:ba:52:ac:d3:1d:e7:d4:1b:33:2f:f5:d6:77:d4:81:d1:83:
71:83:db:a3:3c:55:da:50:8a:ef:8c:a3:a4:45:9b:61:ad:63:
e9:e8:0a:a3:f4:e4:04:d7:f2:bd:3b:d7:53:3d:7b:91:85:2e:
da:52:4f:eb:75:c0:67:54:83:11:b5:09:5d:61:f2:09:91:ba:
2a:d5:9f:77:56:8f:9f:e8:1d:08:13:ce:04:51:a7:4d:c4:4f:
cd:ac:ef:3b:61:0f:bd:b5:12:9d:24:3b:18:7e:a5:f5:d2:1a:
5d:34:90:cb:bb:de:d9:31:eb:7f:4f:ff:2f:88:6f:6f:bf:0c:
62:ed:e6:3c:28:63:e8:06:a3:1a:40:cf:29:68:5b:47:eb:d0:
ad:86:11:37:f2:a0:46:77:39:bc:16:ae:e4:e1:ee:43:33:be:
ba:88:6b:b1:c5:1a:db:02:14:cd:c2:fb:af:8e:79:c2:16:16:
41:00:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:36 2025 by rpki-client