Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/Ru0qtmOoZpxSzy6a3aTe8HbsT1w.roa
File: Ru0qtmOoZpxSzy6a3aTe8HbsT1w.roa (raw, json)
Hash identifier: XGecmy0/ysceHBYOLn0aPMO3tBKtUHzbK3OuzB+tGcw=
Subject key identifier: 46:ED:2A:B6:63:A8:66:9C:52:CF:2E:9A:DD:A4:DE:F0:76:EC:4F:5C
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 0184D739035A3B8A99818D9A9693496CCD89
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/Ru0qtmOoZpxSzy6a3aTe8HbsT1w.roa
Signing time: Sat 03 Dec 2022 09:02:28 +0000
ROA not before: Sat 03 Dec 2022 09:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136258
IP address blocks: 185.237.185.0/24 maxlen: 24
185.255.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:39:03:5a:3b:8a:99:81:8d:9a:96:93:49:6c:cd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Dec 3 09:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46ed2ab663a8669c52cf2e9adda4def076ec4f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:a3:fb:f2:66:43:fd:1a:78:37:a8:d2:89:
25:5c:99:e5:69:ff:ec:b7:ab:c7:9e:78:d6:54:2f:
0f:84:a3:cc:d9:7b:10:c9:ab:fe:ad:ba:20:ac:7b:
e8:95:82:4c:ca:2f:7e:30:d2:1c:f4:5b:13:7e:86:
11:94:11:af:f4:c4:45:6f:8d:ad:b4:7f:5f:0c:4c:
9d:b6:18:0a:03:0d:99:36:a5:60:1e:9e:24:d9:7b:
2f:00:30:22:8d:67:0e:64:c2:34:98:b9:66:de:e3:
1a:f9:1d:cd:97:aa:67:40:50:fb:54:41:c7:f4:16:
3c:1b:24:40:19:40:e6:da:3d:b3:99:80:b6:dc:3e:
14:41:87:ce:31:93:65:40:de:9b:a2:be:85:69:37:
08:41:39:73:3b:99:21:a4:99:7a:11:fc:58:19:1f:
53:a2:ec:ba:7d:6c:eb:ad:60:0c:97:1a:15:7a:23:
a0:29:e8:0a:26:9a:3c:21:1b:11:bb:c2:0d:ff:e9:
97:20:e6:c7:a7:53:6e:54:0e:16:31:07:3d:c3:7f:
e7:cb:82:20:2d:c7:26:55:d9:4a:0a:f3:96:ae:7b:
f6:84:e6:03:2e:ad:2a:e9:b6:27:34:74:41:bd:29:
af:3d:8a:4d:21:b6:01:91:f3:d3:9a:06:06:61:86:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:ED:2A:B6:63:A8:66:9C:52:CF:2E:9A:DD:A4:DE:F0:76:EC:4F:5C
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/Ru0qtmOoZpxSzy6a3aTe8HbsT1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.185.0/24
185.255.123.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c9:6b:7d:8d:59:bb:98:8c:cb:47:3d:51:10:fa:6a:bd:33:
b0:cf:50:7c:25:54:a7:9a:2d:82:78:d3:18:31:ea:ee:0a:2c:
78:c8:8f:29:b2:a0:12:df:8b:00:e1:b2:ad:e7:0c:e4:6f:33:
a5:3f:53:2f:1c:72:3b:35:58:4a:86:49:21:03:b3:86:c4:b3:
07:9d:75:f2:7d:51:d9:d4:c6:ee:d2:70:0a:6a:9d:18:9e:b6:
ef:a4:b0:8e:78:66:71:b3:db:63:8b:e2:36:24:b4:e1:a1:ba:
91:a1:ec:4d:49:47:fb:3b:46:8c:68:42:03:bf:88:eb:70:fd:
c6:96:b2:2a:94:86:6d:b4:99:ec:89:3c:54:36:9f:b1:b5:20:
28:87:84:ae:4a:12:e8:e7:fa:2b:47:b5:ec:7a:a3:12:45:0b:
75:6c:10:91:de:74:c6:3e:88:9a:ff:27:51:7c:2a:c7:78:83:
15:75:b1:f8:4c:85:72:9b:d2:f8:fa:94:3e:81:be:aa:44:72:
fa:fc:7c:87:de:aa:41:35:b3:dc:65:0d:6d:6a:a0:e2:06:11:
98:c6:19:c3:d5:f0:97:6c:d8:72:14:e1:74:f5:e0:96:a0:d2:
6b:9a:e1:3a:86:9f:40:6e:93:63:70:ce:8a:86:dc:62:71:4a:
1e:a9:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:32 2025 by rpki-client