Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/4BKswGj5cl44GOA-Vz7ydN531Yk.roa
File: 4BKswGj5cl44GOA-Vz7ydN531Yk.roa (raw, json)
Hash identifier: nvkdU2CDN5Jn+ksk8EzSoRyKjfU8PqqTrAkaK0w1+7w=
Subject key identifier: E0:12:AC:C0:68:F9:72:5E:38:18:E0:3E:57:3E:F2:74:DE:77:D5:89
Certificate issuer: /CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Certificate serial: 018318A66DD89A4FF1CFDA1A8964CC13D8AD
Authority key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/4BKswGj5cl44GOA-Vz7ydN531Yk.roa
Signing time: Wed 07 Sep 2022 15:51:43 +0000
ROA not before: Wed 07 Sep 2022 15:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.151.176.0/24 maxlen: 24
185.126.233.0/24 maxlen: 24
185.126.232.0/24 maxlen: 24
185.126.232.0/23 maxlen: 23
185.126.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:a6:6d:d8:9a:4f:f1:cf:da:1a:89:64:cc:13:d8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Validity
Not Before: Sep 7 15:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e012acc068f9725e3818e03e573ef274de77d589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:c3:16:92:56:f9:25:54:ec:1b:fa:52:d8:
d5:ad:1a:17:d9:e9:c7:92:25:ae:49:34:37:99:24:
06:76:56:42:01:2b:68:5f:39:62:0a:1c:3d:fa:d1:
bd:9d:8b:ba:02:c3:d6:6d:21:f9:99:98:0c:81:d3:
72:7d:92:40:fe:6e:16:72:76:b5:8d:a4:f3:cf:51:
7b:1d:92:f0:61:b1:50:2a:da:9a:7b:0d:00:0f:f2:
d2:54:a8:26:d9:37:e2:f4:17:2a:e9:18:6a:25:db:
8c:48:75:d8:32:d8:79:fd:ab:30:79:ba:87:68:1a:
c1:aa:08:87:08:aa:6c:45:e8:b2:33:1a:ff:a7:68:
13:f4:c8:59:5a:6d:6a:8a:6f:22:73:0b:3d:83:5f:
27:b9:c5:d1:df:4c:42:cc:da:41:2b:00:1a:9a:4b:
16:17:4e:f6:67:22:b0:50:54:99:92:55:1d:09:59:
43:46:e8:40:5b:2b:29:9d:27:d9:f1:13:54:ce:08:
c4:be:be:3f:2d:42:2a:ae:df:50:66:58:64:8c:27:
5a:b4:09:b9:ee:b5:9c:04:8c:f9:8f:3e:e0:74:44:
52:18:45:c8:b5:0d:21:92:1c:29:2a:e4:f7:9a:a3:
38:eb:21:30:18:a5:11:65:bc:d2:cf:3f:aa:02:ff:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:AC:C0:68:F9:72:5E:38:18:E0:3E:57:3E:F2:74:DE:77:D5:89
X509v3 Authority Key Identifier:
keyid:6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/4BKswGj5cl44GOA-Vz7ydN531Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.232.0-185.126.234.255
185.151.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e9:56:ca:c3:68:e4:fd:63:82:aa:2b:3f:73:c4:48:29:1f:
a7:b0:6b:b7:97:70:31:e3:2e:78:5d:7a:06:73:f2:e5:8a:4e:
f7:30:8c:21:c6:0d:39:17:93:46:be:ac:c7:03:73:0e:99:75:
ec:ce:aa:54:a2:3a:e9:6e:69:f4:3b:4e:df:aa:f3:90:88:9f:
4d:62:ef:b0:28:1d:34:2f:ea:4e:95:5a:17:e7:ed:b6:f8:b2:
48:7d:20:75:4d:8e:b4:39:4a:09:5b:95:aa:af:61:27:84:25:
9d:34:a3:e7:97:df:c8:a1:69:76:b4:7c:e7:82:25:4b:d4:8d:
d7:b9:37:10:cb:16:ad:1d:9f:34:95:81:a1:b3:2a:f2:7a:40:
a7:62:97:b7:98:72:5d:b0:f8:84:7b:c7:2c:7f:d1:ad:bf:1b:
b0:3b:4b:93:9e:f9:6a:20:b2:c2:8d:b3:86:98:db:15:e8:f2:
ff:1e:17:85:e7:d6:88:88:81:49:9c:87:ea:4e:c5:bb:c5:97:
48:d8:16:4b:33:70:49:a4:6c:03:d0:ae:f0:72:bb:e0:60:0e:
08:ea:b6:a7:42:1f:5d:bc:e8:79:fa:20:00:1b:b9:6a:73:5d:
a6:e8:ce:fe:3c:de:f8:1b:1f:80:31:e0:ec:39:d4:32:9a:ed:
91:7b:8c:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:01 2025 by rpki-client