Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f7883c-258b-48c8-9f15-ef51dc36ec31/1/aFHYYpR3qvbx_WSFpN-A2BTMn9I.roa
File: aFHYYpR3qvbx_WSFpN-A2BTMn9I.roa (raw, json)
Hash identifier: HzxRmLYalfbu6G9rWAb1Uc5xWcTDb76gQX+DpNu2bCw=
Subject key identifier: 68:51:D8:62:94:77:AA:F6:F1:FD:64:85:A4:DF:80:D8:14:CC:9F:D2
Certificate issuer: /CN=8f1a10954b15e41a5a53d2b877d6b793c9b10c29
Certificate serial: 06FCF939
Authority key identifier: 8F:1A:10:95:4B:15:E4:1A:5A:53:D2:B8:77:D6:B7:93:C9:B1:0C:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxoQlUsV5BpaU9K4d9a3k8mxDCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f7883c-258b-48c8-9f15-ef51dc36ec31/1/aFHYYpR3qvbx_WSFpN-A2BTMn9I.roa
Signing time: Sat 01 Jan 2022 07:03:37 +0000
ROA not before: Sat 01 Jan 2022 07:03:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 185.182.190.0/24 maxlen: 24
185.182.191.0/24 maxlen: 24
185.182.188.0/24 maxlen: 24
185.182.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117242169 (0x6fcf939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a10954b15e41a5a53d2b877d6b793c9b10c29
Validity
Not Before: Jan 1 07:03:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6851d8629477aaf6f1fd6485a4df80d814cc9fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:8e:18:a7:ae:8e:08:a7:d9:2e:53:70:05:
e5:9b:71:f7:38:79:6d:64:2d:22:3c:ec:12:23:7f:
33:e7:3d:3b:75:41:56:dc:92:88:d2:99:48:eb:4f:
7b:6c:04:b3:46:31:04:c1:21:79:3f:30:8f:1b:9f:
b6:0c:ba:40:d2:6e:37:46:86:af:f2:11:4a:e6:7d:
16:ab:fa:0d:ea:e7:c5:31:df:39:0d:d7:d4:e7:d5:
02:38:ff:49:ed:19:0c:dd:23:db:b9:26:7a:3a:a4:
4c:1d:91:40:7c:f0:dd:bc:f5:ce:e4:19:2e:7e:10:
fb:eb:c6:83:3f:af:52:d8:da:85:cd:8f:1e:19:2e:
e2:7c:ba:2b:cf:ba:22:6d:03:df:8b:a7:e0:69:55:
dd:37:b9:03:1c:76:3d:81:37:8c:4b:71:54:1a:d2:
4b:d6:9b:1c:d7:7d:a1:ab:6e:9c:1a:10:9f:ca:2a:
f6:54:fa:df:14:fa:5e:2c:23:fe:b6:1f:1c:3a:2d:
fe:d6:45:62:89:58:2c:6c:d8:c1:e3:e2:48:43:2b:
99:70:0b:8e:4b:38:b0:16:8e:d3:21:49:17:99:a7:
95:ef:20:95:55:70:dc:7c:18:e7:c0:91:e7:77:8d:
86:6a:f1:26:4a:f6:96:15:e8:19:8f:69:83:30:32:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:D8:62:94:77:AA:F6:F1:FD:64:85:A4:DF:80:D8:14:CC:9F:D2
X509v3 Authority Key Identifier:
keyid:8F:1A:10:95:4B:15:E4:1A:5A:53:D2:B8:77:D6:B7:93:C9:B1:0C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxoQlUsV5BpaU9K4d9a3k8mxDCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7883c-258b-48c8-9f15-ef51dc36ec31/1/aFHYYpR3qvbx_WSFpN-A2BTMn9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7883c-258b-48c8-9f15-ef51dc36ec31/1/jxoQlUsV5BpaU9K4d9a3k8mxDCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.188.0/22
Signature Algorithm: sha256WithRSAEncryption
22:92:3d:19:16:3f:33:33:34:07:20:4f:c4:21:11:30:d0:a5:
5c:8a:60:71:d1:cc:fe:a9:53:b3:00:0b:0a:7d:2f:df:85:21:
01:eb:52:b6:e4:ce:af:87:d9:8c:fa:0c:6e:f3:9c:4e:f3:2c:
4b:85:65:94:1c:81:dc:1f:95:0c:7b:09:f0:d6:f6:c5:1f:cd:
16:42:7f:e3:d0:64:f3:ac:5d:3e:55:60:67:78:d4:8b:f7:25:
86:e6:72:78:51:50:46:2c:91:d1:95:44:71:b3:d4:fa:7a:27:
17:29:d2:eb:f9:fa:c9:6b:4d:b5:47:4c:d0:78:76:82:e3:dc:
84:b2:44:07:d6:1b:81:dd:32:50:cc:0d:b5:65:4f:f0:33:43:
b5:29:ff:71:99:a0:39:d0:c3:4c:62:bd:21:60:67:8c:3b:1c:
7a:4e:00:1a:7b:07:40:0d:8f:cc:ee:ac:6e:82:34:72:a4:ee:
81:3f:b3:fc:8a:7a:87:34:30:03:54:cd:01:37:b0:8d:31:ac:
90:a8:a2:4f:a5:ca:77:06:30:86:60:74:2d:43:bd:42:d8:04:
89:15:20:4b:83:b2:4a:6a:91:4e:9a:e3:6d:2b:f2:05:3f:75:
46:f4:dd:56:a3:11:4d:8a:63:07:40:26:2c:62:e3:b9:42:ee:
20:df:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:53 2025 by rpki-client