Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/1-mIPKSkYpNmtmyhyy0uPMVsgS5g.roa
File: 1-mIPKSkYpNmtmyhyy0uPMVsgS5g.roa (raw, json)
Hash identifier: b/OsREBlmDZGABmcrKbSYERpj4mDG9P/9Adhd+if/0s=
Subject key identifier: FA:62:0F:29:29:18:A4:D9:AD:9B:28:72:CB:4B:8F:31:5B:20:4B:98
Certificate issuer: /CN=c96640eaef031cb24beb365ec0dabeb26173c421
Certificate serial: 019427B58AC10A7BA9B3A8BEB88E0FE94FF9
Authority key identifier: C9:66:40:EA:EF:03:1C:B2:4B:EB:36:5E:C0:DA:BE:B2:61:73:C4:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWZA6u8DHLJL6zZewNq-smFzxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/1-mIPKSkYpNmtmyhyy0uPMVsgS5g.roa
Signing time: Thu 02 Jan 2025 15:49:56 +0000
ROA not before: Thu 02 Jan 2025 15:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51191
IP address blocks: 185.108.216.0/22 maxlen: 22
2a06:4b00::/29 maxlen: 29
2a06:4b01:3300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8a:c1:0a:7b:a9:b3:a8:be:b8:8e:0f:e9:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96640eaef031cb24beb365ec0dabeb26173c421
Validity
Not Before: Jan 2 15:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa620f292918a4d9ad9b2872cb4b8f315b204b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:69:1f:9f:8b:c5:5f:00:34:2f:0b:22:f0:
fd:a9:0f:e2:af:40:c3:63:9c:9c:21:2b:af:b2:16:
60:94:b6:5b:47:c4:ca:68:63:89:7b:cc:61:14:04:
12:29:bb:c9:ef:e0:4b:89:26:6f:5f:90:4f:f7:19:
40:a7:42:fc:db:0f:87:f3:0e:10:cc:04:8e:34:01:
df:11:65:a3:d8:41:4e:b2:0c:fe:cb:6f:94:58:54:
be:c2:64:43:92:b9:ca:c8:cd:cc:11:bc:ef:40:85:
83:24:87:35:7d:a8:84:30:ae:f9:85:6c:b1:59:81:
87:ef:dc:88:16:d1:21:8e:ca:d5:cc:68:f0:fa:84:
aa:8e:0a:06:82:c7:d9:34:4e:fc:7c:b5:4d:99:2a:
c7:45:8a:3d:de:f7:9d:06:a1:a9:e9:9d:eb:4a:d5:
ce:b1:81:ef:aa:e9:16:4e:72:0a:81:72:2b:9f:3a:
90:46:7e:8f:a5:5d:57:eb:f6:fa:46:6e:9e:d5:7c:
47:77:83:7d:83:8d:d4:99:b2:e4:82:17:e7:8e:be:
22:51:f0:7c:bf:12:2c:53:bf:ee:76:c7:06:2d:1a:
fa:9c:31:78:55:5c:8b:54:f1:ab:c7:2e:c3:74:44:
74:bf:28:76:39:62:09:5f:69:ae:64:85:aa:b4:91:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:62:0F:29:29:18:A4:D9:AD:9B:28:72:CB:4B:8F:31:5B:20:4B:98
X509v3 Authority Key Identifier:
keyid:C9:66:40:EA:EF:03:1C:B2:4B:EB:36:5E:C0:DA:BE:B2:61:73:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWZA6u8DHLJL6zZewNq-smFzxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/1-mIPKSkYpNmtmyhyy0uPMVsgS5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/yWZA6u8DHLJL6zZewNq-smFzxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.216.0/22
IPv6:
2a06:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
4c:c5:8e:41:af:02:ee:7a:b5:4e:d7:78:5f:07:50:25:c7:a3:
18:9d:ba:75:dc:f9:02:ef:ec:e4:df:66:d8:05:95:1e:5d:77:
f2:53:59:2d:c2:e5:99:05:a9:a5:2d:37:57:55:0a:23:4a:ec:
44:48:59:22:c3:40:14:20:78:54:b9:10:f2:2e:81:43:12:68:
70:d6:58:c5:23:38:5c:61:b0:a1:d2:ea:87:19:3b:d8:fd:fc:
aa:05:af:c5:88:55:73:6b:65:ba:8c:a1:c5:07:0e:56:fb:74:
fc:68:7f:19:2d:d2:eb:bd:2e:cc:14:c5:45:90:9d:bb:77:7a:
6a:31:64:8f:e1:98:b6:4b:dc:b5:9e:56:0c:4c:e8:4a:40:b6:
f1:90:8b:2a:4e:5f:41:29:60:5b:fa:8a:84:7c:78:36:e3:a3:
63:2b:ab:c3:59:6f:9c:fe:09:f2:c8:e5:b1:b2:3f:21:97:7d:
f7:b8:4e:23:a1:f7:b9:e5:33:08:77:fa:6e:2a:44:00:df:ea:
38:d4:5a:e2:9a:88:d1:20:88:c8:e3:c7:00:87:a9:f7:f3:5a:
0e:01:33:6e:ec:dd:6f:6e:8f:c5:10:e4:b6:40:91:78:6f:2b:
d3:45:fa:7b:aa:87:d4:78:b7:9b:d2:19:1a:26:18:62:be:8c:
eb:5f:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:43:52 2025 by rpki-client