Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa
File: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (raw, json)
Hash identifier: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=
Subject key identifier: 45:57:D4:C5:A2:B0:54:EC:47:15:1B:49:D4:CD:32:4E:C2:F8:59:75
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 019423D6E004BB69BB9846524A8E875DD56C
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30761
IP address blocks: 185.73.252.0/24 maxlen: 24
185.73.253.0/24 maxlen: 24
185.73.254.0/24 maxlen: 24
193.22.7.0/24 maxlen: 24
2a05:4780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e0:04:bb:69:bb:98:46:52:4a:8e:87:5d:d5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4557d4c5a2b054ec47151b49d4cd324ec2f85975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:7b:82:a2:57:63:b3:69:90:74:72:a5:8d:
d6:4d:29:26:81:6b:d0:7c:95:87:05:28:32:50:c1:
12:a5:66:23:1a:76:bb:96:5c:1e:92:90:a2:ee:60:
9b:46:3d:70:7b:5f:c4:49:8c:93:da:c3:0b:61:fa:
e6:00:d0:6b:75:64:88:33:8a:61:fe:d4:47:57:15:
2b:60:fb:a3:44:07:e4:d1:a9:3c:0d:58:bb:d7:d5:
05:73:da:ea:3e:2f:4e:80:63:b4:bd:4d:d5:0f:6a:
01:46:35:8e:01:f3:4d:24:08:55:c9:93:b1:e8:75:
50:a3:75:d1:fa:65:ab:27:aa:c2:dc:a7:38:ff:eb:
88:28:3a:b6:99:f7:83:27:e3:7d:41:d3:d0:c2:f9:
28:44:72:40:8f:d4:8e:2c:a8:ac:ef:03:c5:3a:b5:
33:2b:d6:78:17:85:6b:6d:34:64:e8:d7:2a:26:2f:
8e:a1:b6:7b:1b:51:22:7d:45:b8:55:c6:df:4b:2a:
d5:c1:d7:48:f7:54:ee:3b:88:c9:3f:4f:17:91:2f:
fa:1f:79:f5:0c:d2:34:fa:50:a7:43:e7:9f:e4:c8:
19:f9:2c:c4:2e:64:89:51:73:e9:37:0e:20:0d:8e:
eb:73:5e:f5:cf:74:36:5c:b7:e3:75:03:2a:43:fb:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:57:D4:C5:A2:B0:54:EC:47:15:1B:49:D4:CD:32:4E:C2:F8:59:75
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.252.0-185.73.254.255
193.22.7.0/24
IPv6:
2a05:4780::/29
Signature Algorithm: sha256WithRSAEncryption
44:f6:06:9e:bf:5c:9a:96:0a:36:c1:66:d4:f2:d8:16:ea:8d:
7b:e8:18:e0:9d:4d:a2:c8:bb:79:e4:43:63:4d:26:dc:ef:2c:
38:c6:da:c4:dc:49:d1:c7:e1:82:b2:80:c3:67:f9:ef:fd:ea:
7e:2f:ec:a8:d4:88:7a:5f:4d:9e:e9:42:55:97:03:5c:73:ca:
31:18:bf:c0:e1:da:1c:7e:93:6d:e8:33:ce:24:88:28:59:b3:
e5:21:e3:bd:d3:6d:ca:70:2c:41:fc:01:9b:8e:99:7b:ee:35:
fd:7e:63:8b:ce:65:66:63:15:77:10:97:31:cb:cb:4e:75:21:
1b:52:5d:1c:6c:fc:82:b5:0f:58:51:4b:33:51:d2:0d:52:9d:
4a:3c:f9:da:71:6f:54:5b:4f:2d:0e:ee:e1:11:13:29:a1:9f:
4e:c4:b2:56:68:6d:41:3a:ad:73:05:0b:f0:45:bd:35:c2:05:
ec:03:aa:ee:c9:a4:dd:8c:93:59:8a:d5:22:7d:3f:5a:31:5b:
63:2e:13:7d:c0:c3:ad:64:fc:99:c3:bb:1f:e8:a7:bc:6a:7e:
61:ea:23:48:b3:64:97:15:7d:2b:97:be:d5:7a:95:c6:9d:73:
4f:ad:60:6e:a9:3a:d2:84:44:31:df:c1:4b:81:08:e0:a1:8b:
9e:d7:69:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:50 2025 by rpki-client