Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/tXpEWpaRkX_uxctNkWMP8AuofUg.roa
File: tXpEWpaRkX_uxctNkWMP8AuofUg.roa (raw, json)
Hash identifier: pZuKzlrOWLQLv3qnWsw+obS3cenw2qYiklHiX9yebfg=
Subject key identifier: B5:7A:44:5A:96:91:91:7F:EE:C5:CB:4D:91:63:0F:F0:0B:A8:7D:48
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 018C8BD4F4A16A77D9C2CBA30A044D3CCB27
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/tXpEWpaRkX_uxctNkWMP8AuofUg.roa
Signing time: Thu 21 Dec 2023 10:03:58 +0000
ROA not before: Thu 21 Dec 2023 10:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203640
IP address blocks: 185.29.109.0/24 maxlen: 24
185.29.108.0/24 maxlen: 24
185.29.111.0/24 maxlen: 24
185.29.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:d4:f4:a1:6a:77:d9:c2:cb:a3:0a:04:4d:3c:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Dec 21 10:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b57a445a9691917feec5cb4d91630ff00ba87d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:30:a3:2c:cf:3a:3f:43:d6:1a:cc:07:1f:
8b:ef:0d:a7:11:70:af:33:fd:4c:fe:21:75:7d:86:
ef:ee:f6:8c:5c:67:dd:c5:47:0e:bf:50:50:64:3a:
ad:4e:00:bd:ad:e3:20:3f:73:36:54:42:19:5a:ed:
1f:0e:0b:d2:be:77:e0:29:1f:6d:8c:33:81:58:cb:
1d:eb:fc:a0:d3:9a:ec:ad:52:21:c0:1a:48:c7:e3:
27:52:a9:67:88:52:aa:7a:25:4e:5f:f8:e3:1d:6d:
cb:62:17:1a:d5:5c:76:50:c2:4a:8a:61:29:0d:8d:
93:47:57:71:8e:ea:8d:c1:b1:27:90:83:df:94:c8:
f4:67:b5:49:f3:fe:04:c7:3a:b6:b2:52:69:78:02:
13:b1:9e:c3:d7:49:56:76:1d:4e:e0:5c:01:ba:aa:
02:6e:61:8e:68:22:60:59:bb:51:9a:25:2b:51:2b:
57:a7:88:80:ff:27:f9:ae:97:75:77:de:7d:eb:53:
cc:39:a0:61:62:9c:1c:51:13:82:3f:33:14:bd:9b:
50:e6:a5:e0:cc:38:44:e4:b8:83:c8:bf:ea:b3:17:
19:58:89:7d:e9:1c:0d:9a:c6:32:e1:db:2d:48:7b:
65:b4:0e:5d:3e:38:97:d7:7d:7b:6a:38:92:96:78:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:44:5A:96:91:91:7F:EE:C5:CB:4D:91:63:0F:F0:0B:A8:7D:48
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/tXpEWpaRkX_uxctNkWMP8AuofUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:0a:20:76:c4:b0:26:85:88:50:44:e6:af:28:aa:65:e3:0d:
1f:89:a6:62:2d:08:b8:b8:31:c4:ae:f9:fa:7e:f5:bb:fc:d3:
15:3e:ae:b8:5c:58:1e:a8:af:ca:66:0b:ae:59:1d:c5:0f:2c:
78:c4:be:6f:31:5b:6a:6b:bb:b2:ac:5f:09:77:ec:b5:cd:ba:
8c:b8:57:29:2f:f8:ae:a5:24:a0:2c:38:46:48:8d:cb:97:37:
2f:ba:25:2b:d1:27:17:75:8c:63:6f:e4:69:43:86:ef:66:16:
bb:df:66:76:40:ba:b4:a6:c4:e2:fe:3f:d6:24:de:fa:8d:fa:
b3:c3:f0:9f:80:7d:fa:97:43:60:3e:3c:36:fd:6b:14:e3:85:
58:b7:e0:2c:ba:6b:80:d4:bd:77:aa:a9:67:33:d7:53:99:6a:
a8:64:42:23:46:be:f5:57:23:20:7d:5b:f2:e3:d1:c6:17:2b:
85:d0:cb:a4:4a:93:2a:4e:5c:e8:ea:87:d3:f7:d1:fc:4f:a0:
ef:b5:31:aa:71:41:29:f3:51:a4:2c:67:63:1d:d9:c3:d6:ea:
f3:f1:11:99:ad:8a:44:31:aa:03:aa:87:71:7f:28:df:1b:07:
3f:d8:77:ae:19:43:97:67:85:d8:13:78:2b:db:61:d7:37:87:
f5:ca:f0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:22:46 2025 by rpki-client