Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/6jY1AHZPxvo0YCuKb31hIEOcYjw.roa
File: 6jY1AHZPxvo0YCuKb31hIEOcYjw.roa (raw, json)
Hash identifier: 3chBIe6lnA6TxM6gBEnZGHGJyI8lnkBBAPUW2zHZE8Q=
Subject key identifier: EA:36:35:00:76:4F:C6:FA:34:60:2B:8A:6F:7D:61:20:43:9C:62:3C
Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial: 01857169EB5A5A951AA5A48612DC0ECB758A
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/6jY1AHZPxvo0YCuKb31hIEOcYjw.roa
Signing time: Mon 02 Jan 2023 07:37:24 +0000
ROA not before: Mon 02 Jan 2023 07:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60458
IP address blocks: 185.144.54.0/24 maxlen: 24
185.144.55.0/24 maxlen: 24
185.144.52.0/24 maxlen: 24
185.144.53.0/24 maxlen: 24
185.164.100.0/22 maxlen: 22
185.254.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:eb:5a:5a:95:1a:a5:a4:86:12:dc:0e:cb:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
Validity
Not Before: Jan 2 07:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea363500764fc6fa34602b8a6f7d6120439c623c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:76:ab:03:d2:65:7a:2f:b9:56:53:e3:46:
70:34:7f:93:af:1d:9b:8e:c0:58:c9:44:7d:d4:cf:
c3:11:96:e3:2f:e3:d3:a9:41:0a:ab:4d:09:f3:85:
bb:0f:b0:ee:98:b5:74:6a:65:2b:de:cb:3c:ad:59:
27:9b:15:c8:e9:5d:a6:2c:9d:77:c9:6d:0f:69:45:
2a:e2:bf:ef:8b:aa:81:0f:a6:c7:bd:d9:4b:28:d9:
31:c4:ca:b0:a7:ce:2f:bb:55:c8:48:96:ed:09:d9:
3e:ee:d8:68:06:ba:2c:f1:2c:1d:7a:c5:e8:a6:a1:
94:7e:db:b7:9e:60:fc:6f:e0:66:79:52:27:34:e0:
07:08:33:2d:51:d7:7b:f6:e9:07:ef:62:75:02:ea:
a2:6a:1d:f9:fe:68:5a:97:fc:3e:85:c3:b7:b1:3a:
83:09:47:11:d4:d7:a3:dd:18:f7:26:ab:86:11:07:
d9:55:06:db:c3:fd:cf:5a:ff:e0:3f:da:b9:ce:1a:
e5:c2:0c:4c:3f:f4:55:66:33:3a:ed:89:8f:fe:db:
fa:6c:a6:75:e9:76:24:8d:86:d4:c5:af:c1:fe:d5:
1e:7f:2b:c7:e9:fa:48:70:97:b9:52:86:ff:51:f3:
de:01:1d:b5:ad:da:27:d9:27:5a:d3:aa:36:75:ca:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:35:00:76:4F:C6:FA:34:60:2B:8A:6F:7D:61:20:43:9C:62:3C
X509v3 Authority Key Identifier:
keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/6jY1AHZPxvo0YCuKb31hIEOcYjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.52.0/22
185.164.100.0/22
185.254.24.0/22
Signature Algorithm: sha256WithRSAEncryption
82:de:68:7b:37:d9:01:35:66:51:57:71:cb:bc:10:18:76:8d:
51:2a:cc:78:e7:1d:f7:64:41:09:ae:88:22:b9:bc:9c:56:fd:
3b:5c:a3:a1:65:47:51:bf:ee:22:14:26:e4:cb:a5:34:2f:ac:
c6:5c:04:1c:dc:01:93:51:c5:ae:53:42:55:98:ba:ad:bf:33:
0a:f1:75:ab:a4:fd:b4:69:55:23:91:3c:cc:15:02:95:b1:e9:
81:bf:bc:93:93:d2:27:42:7e:d6:70:54:cc:48:9b:c9:be:21:
76:da:33:6e:0c:63:99:5e:6f:37:bd:68:22:68:b1:d6:1b:89:
16:1d:d3:da:4f:53:cf:1d:9b:ac:97:62:ec:c9:9d:36:1a:77:
d8:64:c4:1b:1a:49:95:09:53:da:e1:bd:a7:9a:42:ae:96:04:
f7:0d:d8:58:ea:31:df:ec:5a:78:98:76:59:68:0d:87:17:21:
2d:b8:d3:57:54:21:df:28:a4:25:ef:1b:e4:e9:81:91:35:0f:
7f:9c:e5:a8:24:51:ab:af:e3:e7:bb:bc:22:53:96:99:80:00:
eb:69:ab:d3:fd:c9:48:2a:e1:57:9d:d5:a1:86:76:b8:c5:48:
63:0e:c2:44:fc:fd:e3:ff:67:69:ce:a0:3e:5b:6d:65:23:db:
cb:a6:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:32 2025 by rpki-client