Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/2-DqXrEAiNHH7m-rz4o7UIJfEvg.roa
File: 2-DqXrEAiNHH7m-rz4o7UIJfEvg.roa (raw, json)
Hash identifier: qMXr8KAp/Yww1YdrAxrZJSntrxYXRiYbn2HaonIoH3g=
Subject key identifier: DB:E0:EA:5E:B1:00:88:D1:C7:EE:6F:AB:CF:8A:3B:50:82:5F:12:F8
Certificate issuer: /CN=cc76201a5e51665e8057d26c456debb032730cb7
Certificate serial: 0185720C6B6910EC52265DC6B63CE3A99123
Authority key identifier: CC:76:20:1A:5E:51:66:5E:80:57:D2:6C:45:6D:EB:B0:32:73:0C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHYgGl5RZl6AV9JsRW3rsDJzDLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/2-DqXrEAiNHH7m-rz4o7UIJfEvg.roa
Signing time: Mon 02 Jan 2023 10:34:54 +0000
ROA not before: Mon 02 Jan 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44285
IP address blocks: 185.173.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:6b:69:10:ec:52:26:5d:c6:b6:3c:e3:a9:91:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc76201a5e51665e8057d26c456debb032730cb7
Validity
Not Before: Jan 2 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbe0ea5eb10088d1c7ee6fabcf8a3b50825f12f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:79:3c:97:41:b3:72:aa:41:25:7f:d2:d9:
6a:0e:e6:22:89:92:0b:4c:e2:e8:72:7f:87:39:52:
f3:07:10:d4:43:bf:22:44:80:f6:5c:82:c0:9c:ba:
0b:42:5e:a8:6b:d2:9d:57:c3:63:b1:dd:9b:4e:31:
cb:c7:83:19:63:1b:38:2b:b4:11:6d:3c:a2:08:77:
88:ba:88:96:ac:b6:f7:f2:dc:bf:d3:d8:aa:fb:13:
ef:3c:0a:c4:63:b2:1e:51:30:4a:cd:8f:66:64:f3:
67:4d:8b:03:56:79:a7:6d:49:10:6d:05:1d:19:02:
66:3e:ca:46:83:57:59:71:7a:db:c3:fa:4a:a8:bd:
3a:da:3c:6c:9f:34:7f:68:f1:4e:07:6b:6a:39:df:
4a:29:ae:48:4b:0a:e6:58:e3:8f:d9:c7:e5:8e:0a:
25:5a:c9:93:b0:84:98:1c:46:cf:6d:89:72:c7:91:
a4:89:ba:41:26:63:7b:93:10:e5:d9:3d:cc:87:d2:
79:ee:27:5e:a5:61:c5:79:56:02:5e:0a:d3:e8:10:
50:c3:d3:60:b7:f2:2d:3f:b7:f8:a5:37:71:6f:55:
d1:6a:23:0c:3c:38:e7:b7:69:44:bd:65:83:55:88:
af:9d:c2:23:10:19:35:af:e5:ee:c3:e6:03:65:1a:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:EA:5E:B1:00:88:D1:C7:EE:6F:AB:CF:8A:3B:50:82:5F:12:F8
X509v3 Authority Key Identifier:
keyid:CC:76:20:1A:5E:51:66:5E:80:57:D2:6C:45:6D:EB:B0:32:73:0C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHYgGl5RZl6AV9JsRW3rsDJzDLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/2-DqXrEAiNHH7m-rz4o7UIJfEvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/zHYgGl5RZl6AV9JsRW3rsDJzDLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.130.0/24
Signature Algorithm: sha256WithRSAEncryption
49:12:93:ae:b3:ac:92:97:53:0b:7b:6e:0b:34:65:a6:6a:b9:
22:da:b8:cf:cf:6d:ed:09:64:13:79:15:ca:3c:25:37:e0:01:
04:0c:9c:e3:3c:27:7f:3b:8b:b3:12:42:20:70:ce:39:3b:dc:
9c:f3:a9:49:b1:f1:e7:d0:37:5a:bd:cb:90:36:b3:90:71:72:
ac:5e:15:34:be:5e:ac:0e:f8:0e:de:09:ba:0d:e0:6c:ac:57:
ec:88:77:8a:b9:e6:8d:c0:23:50:83:fe:82:8c:ff:88:2a:b4:
31:e2:5d:6e:f7:d2:43:5f:3e:71:e2:9e:01:de:f7:c3:94:48:
0f:cb:62:84:be:3f:97:24:35:9f:59:00:2a:50:62:da:7c:57:
8a:48:48:29:a5:81:62:90:19:ec:63:95:36:b1:39:41:2d:ac:
cd:92:75:c8:02:ad:73:cd:8f:8c:4b:e9:5d:56:83:ef:61:b2:
9d:90:1d:52:2f:fb:b7:3f:8a:7d:77:0e:c4:9a:9f:0b:00:ef:
39:52:51:b1:8e:e9:f0:95:10:54:62:55:c8:72:d1:6c:5f:9c:
d2:d6:36:28:0a:ba:4d:bc:6e:cb:eb:fa:2e:37:80:08:c4:e6:
ca:7d:91:fa:08:78:0a:64:80:2d:3c:2e:95:0f:19:34:07:2c:
aa:cf:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:51 2025 by rpki-client