Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa
File: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (raw, json)
Hash identifier: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=
Subject key identifier: C5:F3:05:E4:CB:78:8C:11:62:99:1A:0F:8C:33:93:AC:E6:19:6F:F7
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 019420D655BA069377E0C0B6BDEDCAE04077
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.244.64.0/24 maxlen: 24
185.244.65.0/24 maxlen: 24
185.244.66.0/24 maxlen: 24
185.244.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:55:ba:06:93:77:e0:c0:b6:bd:ed:ca:e0:40:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5f305e4cb788c1162991a0f8c3393ace6196ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:1c:ac:b3:ef:ed:02:0d:9e:2f:32:6d:8c:
01:98:96:a2:9f:27:89:38:21:b3:ac:92:86:3a:25:
25:cf:fe:1b:22:bb:ac:c9:16:1b:17:27:97:d1:87:
09:60:5e:06:80:84:b5:97:6a:0d:7c:7c:42:83:d7:
20:61:59:77:d2:58:c5:83:f2:60:8f:10:3a:e5:04:
2e:f3:86:ad:7c:c9:c0:bb:db:60:d4:3a:11:ab:15:
90:17:af:ad:49:fc:12:2c:4e:a4:0f:43:76:f3:1a:
a7:12:09:7a:5f:4f:9b:3a:16:8c:a6:ca:14:f9:49:
1b:6f:7a:35:10:7f:c5:1f:8d:f6:26:b6:ab:40:eb:
e4:d7:69:65:ee:7c:ed:f1:55:d9:b8:2d:ca:76:56:
73:15:83:55:46:72:1f:d2:e5:37:43:68:f5:e6:eb:
8d:ec:e3:07:bd:5b:28:69:6e:17:0b:e7:7e:75:81:
6d:a4:fa:e7:9b:c2:9e:fd:c2:57:cf:74:bf:75:5b:
77:ba:bf:cf:2c:e4:2a:08:8c:30:fa:be:d4:05:0d:
ec:82:a8:b6:b5:2d:d0:b2:b2:ea:2a:b7:42:61:74:
c7:34:34:d0:84:63:ec:3e:cb:78:2e:ad:d7:4e:e9:
d6:0f:17:8f:a4:09:7b:36:d8:88:f2:53:59:97:da:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:05:E4:CB:78:8C:11:62:99:1A:0F:8C:33:93:AC:E6:19:6F:F7
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.64.0/22
Signature Algorithm: sha256WithRSAEncryption
06:42:83:28:70:8a:c5:56:27:b4:ca:7a:01:06:7a:ed:6d:7e:
72:92:56:ab:7d:d7:e4:42:9c:90:8c:3f:a4:25:ef:af:ca:02:
de:c5:46:79:ac:ac:9d:ed:7f:3b:16:5a:9c:53:5e:0c:da:ad:
7f:46:11:6e:0f:29:68:29:b2:8e:cb:9a:e3:92:66:d1:93:90:
da:e0:c8:95:3b:28:97:7b:57:3d:f2:db:20:fc:ed:44:0c:78:
e7:cb:96:aa:fe:aa:f8:fe:af:eb:7f:94:f7:3c:83:55:a3:a1:
78:d4:5e:f7:8e:25:b1:a4:3e:b6:a6:bc:56:a1:cf:7e:69:45:
a3:da:96:af:26:e2:f0:ce:9b:5c:16:e2:08:48:8e:14:9a:29:
f2:16:79:ed:30:e7:75:af:2a:90:89:b9:9c:a7:21:09:6d:d2:
3a:80:ef:5d:4f:fe:26:a4:5c:fb:f2:a1:21:b2:36:cb:ef:dd:
20:59:8c:18:fc:21:97:bd:2f:d7:c0:cf:22:54:64:b3:98:4b:
2a:28:43:07:d3:74:7e:76:11:4c:fd:6f:1c:b0:d6:ef:92:6f:
d2:b4:f6:05:f2:2d:29:da:af:03:78:8c:f6:50:cd:07:60:90:
35:98:cc:d2:df:67:54:82:03:df:c7:3d:b1:50:2b:22:f2:9f:
7f:1f:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:50:32 2025 by rpki-client