Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/xGTdi1K0EVfuV_aO5ftGrwIBj2I.roa
File: xGTdi1K0EVfuV_aO5ftGrwIBj2I.roa (raw, json)
Hash identifier: /BPQ/irp4q+q6/qEGmmeoqvCaXIxO3a8/5cCKzlmHAY=
Subject key identifier: C4:64:DD:8B:52:B4:11:57:EE:57:F6:8E:E5:FB:46:AF:02:01:8F:62
Certificate issuer: /CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Certificate serial: 0C88E938
Authority key identifier: 2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/xGTdi1K0EVfuV_aO5ftGrwIBj2I.roa
Signing time: Fri 24 Jun 2022 12:58:31 +0000
ROA not before: Fri 24 Jun 2022 12:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60729
IP address blocks: 185.220.101.0/24 maxlen: 24
185.220.102.0/24 maxlen: 24
2a0b:f4c1:2::/48 maxlen: 48
2a0b:f4c1::/40 maxlen: 48
2a0b:f4c2::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210299192 (0xc88e938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Validity
Not Before: Jun 24 12:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c464dd8b52b41157ee57f68ee5fb46af02018f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:28:f2:73:8a:e1:d6:af:c6:48:53:21:02:
2d:be:ad:ba:b6:72:de:06:47:1c:af:cc:c0:ee:86:
0b:72:60:69:2d:75:e5:07:2d:d9:8a:d2:64:07:a6:
3e:7a:ac:8c:c8:48:3b:fe:24:3f:a0:df:10:9f:75:
3e:b7:41:7a:ea:43:cb:b7:c0:ff:0f:a8:8f:b5:2d:
cd:fe:58:7f:7a:23:ea:53:fb:af:c0:41:6f:35:9b:
1b:34:a9:eb:09:8f:6f:6a:90:bc:db:07:39:d0:9b:
a5:f1:e7:93:63:77:38:91:3d:b8:45:29:3b:41:83:
5d:ae:29:22:76:d9:57:94:54:b7:e6:58:dc:4f:b3:
1d:98:22:c4:f1:52:cd:27:4d:0a:e2:68:bc:2f:6e:
fb:06:81:c2:4e:27:cb:8a:16:e4:f7:f7:8d:68:40:
01:7e:d5:ea:66:a3:3f:72:e2:9b:c9:03:43:1d:e1:
57:8e:f6:27:1b:68:b5:dc:12:5a:ec:1d:0b:92:81:
69:56:2c:78:01:e7:da:80:fd:08:8d:4c:01:ca:dc:
b9:94:8e:83:6f:d9:09:a4:6c:a2:61:47:27:23:b9:
7a:30:e7:bb:b1:a6:8c:92:3e:53:48:0d:73:7d:08:
8e:47:31:a8:70:17:fc:21:61:5b:69:5b:c8:ee:d4:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:DD:8B:52:B4:11:57:EE:57:F6:8E:E5:FB:46:AF:02:01:8F:62
X509v3 Authority Key Identifier:
keyid:2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/xGTdi1K0EVfuV_aO5ftGrwIBj2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.101.0-185.220.102.255
IPv6:
2a0b:f4c1::/40
2a0b:f4c2::/40
Signature Algorithm: sha256WithRSAEncryption
9c:c0:93:f9:07:36:5d:64:38:be:5c:d8:60:90:be:05:a3:39:
00:98:a9:ec:fe:e0:c9:70:f1:86:13:5a:ca:15:4c:86:52:56:
31:20:65:6f:5e:6f:e9:95:c3:64:fc:21:db:db:bf:c1:d5:23:
2d:20:1c:6e:44:16:bd:9c:81:b3:3c:ee:22:de:52:94:78:a0:
17:b9:ff:97:5d:b0:db:7c:f5:2b:bb:12:02:86:00:c2:ee:66:
38:0f:4a:84:a1:0a:aa:8e:4f:3e:90:50:5a:69:ef:e0:3f:c7:
9b:2c:42:c9:b8:c5:91:59:48:cc:86:74:a4:c3:e7:8c:50:dc:
4e:b6:af:9a:ef:72:41:17:d1:36:0b:fd:63:b2:7b:bd:96:ee:
46:77:c3:1a:e4:56:2e:83:ec:fe:52:a6:63:46:9a:29:6d:5d:
e0:a2:8b:e3:27:d8:68:e3:18:fe:18:22:b0:ca:96:81:9b:5a:
d5:13:d7:93:1e:03:9e:37:72:cf:fd:ac:7b:7a:e5:4b:f7:12:
01:35:3b:84:b4:4a:54:f1:f2:35:8f:14:bc:4a:1f:ab:1f:49:
25:38:e9:37:b8:cd:ee:44:87:83:cf:05:fe:42:2a:33:3d:a9:
5f:fe:27:f1:3b:a2:ee:91:1c:33:e1:22:71:96:03:55:f0:7e:
aa:14:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:19 2025 by rpki-client