Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/jt6omo8NoUEHo4Ag7eTxaxFiZfk.roa
File: jt6omo8NoUEHo4Ag7eTxaxFiZfk.roa (raw, json)
Hash identifier: ZCrx5J4CQ2lOKU2IROfJrKbU4hD/mbER5Kmt2hAjOSg=
Subject key identifier: 8E:DE:A8:9A:8F:0D:A1:41:07:A3:80:20:ED:E4:F1:6B:11:62:65:F9
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 03912186
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/jt6omo8NoUEHo4Ag7eTxaxFiZfk.roa
Signing time: Sat 01 Jan 2022 04:55:01 +0000
ROA not before: Sat 01 Jan 2022 04:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 185.135.221.0/24 maxlen: 24
185.135.223.0/24 maxlen: 24
185.135.220.0/24 maxlen: 24
185.135.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59842950 (0x3912186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jan 1 04:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8edea89a8f0da14107a38020ede4f16b116265f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:6b:fc:39:07:5e:ac:5b:79:3a:a7:b7:d6:
23:45:0a:39:8f:ed:16:9d:bb:82:f6:cd:c1:e0:ad:
5b:94:bf:af:58:eb:6e:f7:cf:df:e1:5e:bd:69:5b:
70:af:a3:ab:ba:8f:10:44:bb:8f:03:e6:8d:72:df:
1a:4b:49:43:3c:74:62:d4:1a:82:7c:39:ec:6d:f8:
db:b0:b8:eb:64:4d:b7:59:3e:9b:c2:49:a3:50:5a:
fb:67:9a:7d:dc:07:32:7f:b9:39:1e:c3:aa:a6:b6:
10:3b:d2:47:c6:ca:1d:52:47:6e:8c:65:18:3f:73:
c2:15:44:29:c5:53:b7:23:f6:04:3b:5d:6d:c6:5e:
98:dc:47:24:e6:7a:41:f0:3a:4b:74:f6:f9:46:b8:
b5:1d:e9:91:62:d3:e7:2d:0f:0f:75:af:22:5f:ee:
d4:63:e0:e5:c7:e7:50:cb:46:42:88:79:fb:22:f8:
8f:dd:76:24:7b:de:45:6f:5d:1d:5c:6f:79:85:22:
76:2e:ea:67:25:6a:89:83:ed:b1:9e:7d:0e:e8:f8:
bd:2f:ec:c7:16:9e:a5:99:df:ac:3b:5b:3c:61:98:
2a:bb:e0:72:a8:9c:f0:d9:6c:54:6e:48:83:0d:3f:
2a:82:03:93:2d:80:92:8e:b1:70:33:10:48:37:0c:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DE:A8:9A:8F:0D:A1:41:07:A3:80:20:ED:E4:F1:6B:11:62:65:F9
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/jt6omo8NoUEHo4Ag7eTxaxFiZfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
63:6f:10:5f:4b:f1:b8:d9:c8:f0:b9:39:97:06:7a:a1:1e:25:
32:a1:5f:dd:5c:d8:b9:f9:a9:34:0d:86:61:37:9e:58:c0:d7:
33:aa:69:40:4d:c8:46:52:25:db:de:be:53:25:d5:6e:d7:89:
45:a1:f8:3a:19:b5:69:28:24:55:e3:ae:b0:4c:25:ca:69:8f:
d3:9b:67:04:c0:b2:88:18:6d:e7:ba:62:f3:b7:44:16:34:71:
e5:76:7a:b8:b1:dd:e9:1e:dc:38:2d:23:c1:02:aa:a0:60:0c:
bf:5d:73:d8:73:fb:65:ee:9e:67:ab:aa:c1:29:86:c3:fb:94:
ac:1e:5b:62:95:a5:51:fb:2a:18:4d:35:f1:19:30:23:d0:7e:
b6:af:f4:72:2e:8e:9b:86:f0:4a:eb:2a:2e:05:6a:85:0c:58:
e9:38:5b:f5:92:61:6f:d7:3b:fc:60:d7:01:b1:ea:1b:5b:4c:
6b:25:e5:b6:1a:d7:6c:60:20:17:c3:38:40:2f:1f:3b:1e:b5:
e4:6e:c2:b0:98:5f:32:52:7f:29:7b:1f:1b:dc:db:3a:70:48:
ad:77:99:06:73:85:59:6b:0c:a8:2b:c9:78:e5:94:36:55:9a:
a9:d2:47:c0:06:2f:3f:e2:06:79:d7:f1:bf:05:c3:3e:26:ce:
cf:ee:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:35 2025 by rpki-client