Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/U5RgC0uQE_5OwaGXUAaQyJWTalQ.roa
File: U5RgC0uQE_5OwaGXUAaQyJWTalQ.roa (raw, json)
Hash identifier: JI0BO8Vlek62i5PxDgIuYeZIhPs7iE9PvgkXnwDbZ7s=
Subject key identifier: 53:94:60:0B:4B:90:13:FE:4E:C1:A1:97:50:06:90:C8:95:93:6A:54
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 018AF7503717B651CB3077C675ED628B1BD1
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/U5RgC0uQE_5OwaGXUAaQyJWTalQ.roa
Signing time: Tue 03 Oct 2023 20:52:23 +0000
ROA not before: Tue 03 Oct 2023 20:52:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.240.166.0/24 maxlen: 24
185.240.165.0/24 maxlen: 24
185.240.167.0/24 maxlen: 24
45.85.180.0/22 maxlen: 22
194.31.1.0/24 maxlen: 24
194.30.161.0/24 maxlen: 24
194.30.165.0/24 maxlen: 24
194.30.183.0/24 maxlen: 24
185.227.218.0/24 maxlen: 24
185.227.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f7:50:37:17:b6:51:cb:30:77:c6:75:ed:62:8b:1b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Oct 3 20:52:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5394600b4b9013fe4ec1a197500690c895936a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:0e:99:e5:29:c7:96:1b:1a:ac:a8:82:78:
20:58:95:3f:17:6b:dd:8b:3c:d6:d9:8f:80:04:ce:
93:7c:20:d3:39:5f:21:25:a1:6c:a4:8e:d8:c8:4c:
5f:a4:34:2c:d0:fa:ae:74:3b:03:67:46:b1:e6:60:
e6:ee:1d:50:d0:cc:9e:3c:64:2d:aa:1a:18:95:16:
6f:2b:a1:53:ab:2e:0f:78:a0:ce:4a:0c:29:fe:5e:
e1:c1:3e:61:cd:38:01:f0:b8:b6:83:3d:9b:a8:23:
45:79:fd:e7:49:28:ee:e1:30:1a:68:0d:83:82:cc:
58:1a:4d:15:a1:f6:2a:13:0c:fb:cb:25:41:67:71:
22:61:82:27:5b:41:4a:66:11:e9:b7:4c:12:06:57:
1a:a7:f1:57:04:57:ec:ef:2c:47:1f:ac:93:dc:bb:
5c:2a:be:72:cb:b7:36:4a:42:46:55:43:68:16:9f:
b6:83:fc:d1:61:8e:4d:30:69:f1:c6:97:b1:1d:73:
17:7b:c1:a0:47:29:83:cf:28:99:7c:06:f9:d5:d6:
ee:3e:70:7a:b7:98:43:c5:d7:45:91:53:ac:40:2b:
55:e2:25:96:bf:ab:3d:a5:2d:df:00:5a:38:00:4c:
14:1a:93:35:a2:de:bf:1d:57:b9:56:b6:77:dd:b5:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:94:60:0B:4B:90:13:FE:4E:C1:A1:97:50:06:90:C8:95:93:6A:54
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/U5RgC0uQE_5OwaGXUAaQyJWTalQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.180.0/22
185.227.217.0-185.227.218.255
185.240.165.0-185.240.167.255
194.30.161.0/24
194.30.165.0/24
194.30.183.0/24
194.31.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:71:7f:6d:c3:66:cf:f9:98:06:f4:3f:74:b2:15:00:44:78:
8d:a6:20:84:6e:a9:28:ee:6e:9f:fc:bc:df:68:57:c3:45:92:
d6:4f:1b:fc:2d:59:7d:05:1d:ec:a2:1a:cd:3e:60:32:cd:eb:
93:99:2b:be:59:4f:0e:5f:3e:10:f1:fe:74:25:a5:91:ad:7d:
4d:ba:af:7c:6c:b6:aa:39:da:ed:e8:47:d5:b2:59:49:70:71:
9d:5f:88:c8:fe:08:56:0c:5a:a8:5b:53:c9:20:31:91:3d:a4:
70:44:8f:fc:9d:62:75:94:48:52:8f:a1:a1:58:81:16:59:52:
b8:20:62:c0:e5:93:93:81:b9:ed:f9:1c:ae:22:2f:4e:47:32:
ed:de:d6:71:f4:2f:db:0d:fc:be:e9:f2:4b:92:e5:b4:8a:35:
f3:ea:0b:d3:ca:98:7e:8c:a7:3d:20:18:ae:b5:4b:d2:8b:71:
b7:fe:79:b6:22:e5:3d:1b:4f:de:8c:55:3f:3c:5d:05:87:45:
42:3e:aa:4e:fe:19:fd:40:35:9f:37:9e:04:73:cc:02:95:76:
90:90:a4:f0:af:31:59:83:c3:14:09:22:52:e9:c3:f3:27:98:
b5:f9:ad:55:cc:3c:d0:be:8b:fe:d5:87:17:a7:f1:29:23:74:
1c:1f:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:06 2025 by rpki-client