Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/vvI0g8BdWOjRPV00wNm8r2tdp4I.roa
File: vvI0g8BdWOjRPV00wNm8r2tdp4I.roa (raw, json)
Hash identifier: mTpdkbaV6/+O1nfMWFer4UtqR769YxVmqPMQSeiPoZY=
Subject key identifier: BE:F2:34:83:C0:5D:58:E8:D1:3D:5D:34:C0:D9:BC:AF:6B:5D:A7:82
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 01942521D6E470A2C8EF502CDEC00E72076A
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/vvI0g8BdWOjRPV00wNm8r2tdp4I.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203690
IP address blocks: 185.184.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d6:e4:70:a2:c8:ef:50:2c:de:c0:0e:72:07:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bef23483c05d58e8d13d5d34c0d9bcaf6b5da782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:6d:29:b4:ce:ed:da:4b:a3:4c:71:77:27:
5c:cf:7d:c0:dc:dd:ae:98:cb:4f:de:b5:42:65:33:
d0:1d:7b:47:4d:43:75:e4:78:74:c2:58:02:ba:5f:
d4:18:71:e9:69:dd:22:ec:8c:b8:ed:55:e5:fc:28:
da:e8:39:01:36:98:5e:40:0b:3d:fa:40:f3:41:ac:
c4:ab:ae:96:e4:bb:38:5e:7e:a9:08:28:7d:79:10:
fe:90:71:08:40:f3:df:ab:4c:5b:17:ab:9d:05:f4:
0c:3e:c6:ee:aa:e5:21:41:f8:c4:d1:ce:c6:cf:f3:
7e:33:9e:84:c2:49:11:8f:92:01:c6:d7:78:22:f4:
37:c2:52:34:9c:e7:cc:05:28:e3:ad:c4:ab:55:72:
fd:16:e6:c4:32:43:27:c1:10:7a:74:8d:84:94:64:
e8:a3:d5:15:ec:7f:ab:94:78:01:4b:db:bf:61:65:
88:03:e0:f2:38:63:9a:01:ca:c9:6e:31:52:ae:b3:
98:c5:5f:61:71:8b:d9:93:65:59:aa:5f:ce:d3:52:
45:6e:d6:e2:88:4c:5c:e1:65:6c:93:0e:d1:c0:fa:
f7:87:aa:39:2c:f4:85:b3:20:86:a5:ff:d3:78:b9:
30:c4:66:99:ac:79:15:f9:3b:2b:99:f5:e4:14:bc:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:34:83:C0:5D:58:E8:D1:3D:5D:34:C0:D9:BC:AF:6B:5D:A7:82
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/vvI0g8BdWOjRPV00wNm8r2tdp4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.10.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f7:a3:6f:bb:35:76:41:0b:c7:80:eb:4a:3a:73:70:dd:88:
6a:7f:ba:60:15:10:9f:20:96:6c:87:b5:ea:1f:9d:fc:43:81:
6f:2e:21:ce:24:6c:25:fb:0c:4e:e5:90:d7:79:9c:2f:ab:83:
95:b3:df:2b:bb:4d:0e:42:13:22:0f:cd:6d:af:52:da:dd:e0:
ad:5a:1b:ba:98:e8:81:1b:46:d9:38:92:ac:b8:02:f3:68:d6:
94:3d:51:07:0e:20:ba:c7:7d:32:c2:0f:6c:70:e6:fd:9c:f7:
ea:15:96:c9:b1:80:22:63:30:e1:70:50:30:e4:2c:cc:a2:3f:
f4:5f:f7:8f:16:7f:91:ab:01:3e:bf:91:26:a6:b9:b5:9b:fb:
41:21:0b:18:ff:97:82:7d:62:58:3f:36:e0:a0:ba:92:30:cb:
84:a4:21:80:1a:c2:7c:90:9c:e1:5a:89:79:04:25:4b:6e:03:
45:6b:1f:70:4d:13:6a:db:6a:38:35:ac:37:99:8e:fa:3c:22:
1c:f5:27:2d:1e:7d:91:ac:10:3f:dd:87:64:32:e9:4e:81:43:
eb:91:09:29:80:38:3a:13:ab:a2:50:2c:4f:1c:2d:2b:9e:b3:
64:d4:18:53:94:d8:fc:65:e7:bf:80:fa:a0:3b:d8:6c:46:22:
bc:9e:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:55:50 2025 by rpki-client