Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/4DbS8Jbbo3QULWfMItqI5Uq0IJw.roa
File: 4DbS8Jbbo3QULWfMItqI5Uq0IJw.roa (raw, json)
Hash identifier: 43Ch5IZ/LgnAEC6DGTD92afiVR9qhs3AaA98NV1NioI=
Subject key identifier: E0:36:D2:F0:96:DB:A3:74:14:2D:67:CC:22:DA:88:E5:4A:B4:20:9C
Certificate issuer: /CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Certificate serial: 018AC1D2E02CAF62D1618270005EE552464F
Authority key identifier: CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/4DbS8Jbbo3QULWfMItqI5Uq0IJw.roa
Signing time: Sat 23 Sep 2023 11:35:37 +0000
ROA not before: Sat 23 Sep 2023 11:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203916
IP address blocks: 185.135.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:d2:e0:2c:af:62:d1:61:82:70:00:5e:e5:52:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Validity
Not Before: Sep 23 11:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e036d2f096dba374142d67cc22da88e54ab4209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:59:a1:c6:d0:62:da:76:dd:57:10:93:f0:
d7:d6:4f:0c:c7:c9:44:dd:ad:6a:11:f7:37:31:3f:
3b:e3:b9:47:db:43:6d:af:59:ca:54:a0:19:fa:f1:
24:36:19:83:ef:06:5f:d2:81:92:00:da:23:0a:06:
87:d0:71:ab:a4:fd:8d:88:4d:28:98:c6:93:8f:98:
f7:8e:c7:2d:2c:52:3a:cf:cb:65:84:a4:8f:da:bb:
ec:9d:8c:ea:66:bd:7e:23:76:5a:27:35:f3:f8:5c:
b3:d3:bb:5a:f5:c6:0e:e2:f2:eb:0d:ca:4f:62:0a:
7f:00:fa:b1:32:58:6c:ce:4e:20:a4:ec:a9:ea:44:
2b:ae:f6:49:dd:7f:13:3b:38:80:ce:af:9b:00:10:
ef:8f:ef:56:9e:f5:9f:58:04:9c:68:76:aa:6a:a3:
9e:24:48:ab:fd:20:3a:3d:f0:04:80:38:50:3f:1c:
ce:88:51:d5:2c:46:41:3f:71:c9:f1:00:8a:5f:16:
d0:7d:af:29:07:55:1f:be:6c:2b:59:52:e0:f5:3b:
ad:a9:d6:d6:95:cd:b0:28:55:37:43:43:63:0b:9d:
71:f3:2f:73:3a:7a:74:3a:99:b4:93:44:0e:2c:87:
18:f1:3e:e0:86:fb:2d:fa:5e:2e:0f:bf:5c:45:47:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:D2:F0:96:DB:A3:74:14:2D:67:CC:22:DA:88:E5:4A:B4:20:9C
X509v3 Authority Key Identifier:
keyid:CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/4DbS8Jbbo3QULWfMItqI5Uq0IJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.47.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e7:eb:35:79:9e:d0:a1:49:25:9a:1a:7d:e8:ac:82:21:de:
32:c4:48:ef:71:b5:39:de:e0:04:f4:17:3d:e8:3a:74:f9:31:
c1:55:73:74:60:5f:55:2e:70:45:23:c8:3a:48:90:95:59:30:
b1:25:31:47:ea:5f:1f:87:a0:6f:ce:30:15:a2:b3:4b:98:64:
53:ea:75:b6:14:bf:ac:90:c2:cf:05:9c:61:b4:a9:3e:eb:34:
e6:78:75:f1:d4:6a:d9:7a:ed:13:df:a6:40:86:6c:b3:22:2f:
5a:ae:f5:07:50:33:e7:49:69:68:69:ff:c5:6c:60:39:70:d8:
b2:62:94:40:b8:b2:b2:71:85:5d:21:d9:4b:20:de:2f:16:8a:
66:2b:85:4a:44:80:2c:52:e6:93:e6:78:ad:e3:35:8c:bd:aa:
c4:32:3c:87:76:79:83:e1:c7:42:d7:d1:a8:57:e1:b0:f7:68:
a2:b8:c0:63:06:e9:78:ab:4a:34:c4:57:66:11:96:22:16:97:
ea:dc:32:8a:1a:c6:a8:1a:ce:52:5a:fd:da:35:92:88:a1:26:
fa:a8:e6:11:1f:10:f9:20:be:60:cc:87:30:9b:6b:cd:6d:03:
6e:ff:f2:63:66:61:83:e4:1c:ca:84:d7:99:3e:ac:0a:a0:a4:
94:62:dc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:50:52 2025 by rpki-client