Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa
File: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (raw, json)
Hash identifier: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=
Subject key identifier: E7:68:29:5E:32:3C:29:DE:D3:BF:E6:26:69:19:5C:7E:C3:38:44:09
Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial: 019427B49DF00F3D121562915EB6E290D5C5
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa
Signing time: Thu 02 Jan 2025 15:48:55 +0000
ROA not before: Thu 02 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25264
IP address blocks: 185.105.184.0/22 maxlen: 22
185.105.184.0/24 maxlen: 24
185.105.185.0/24 maxlen: 24
185.105.186.0/24 maxlen: 24
185.105.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:9d:f0:0f:3d:12:15:62:91:5e:b6:e2:90:d5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Validity
Not Before: Jan 2 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e768295e323c29ded3bfe62669195c7ec3384409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:39:5b:d2:08:c9:eb:6b:6f:c7:5c:46:b8:
79:86:d7:09:4a:fa:38:94:0d:84:74:26:76:42:3b:
54:c8:d7:03:de:dc:ae:08:dd:57:ab:f6:2d:7a:9d:
f4:1a:fc:8b:20:ed:75:1c:20:31:cd:be:57:2f:f4:
ff:4c:20:67:4c:7c:b2:6c:94:1d:40:82:16:1b:b3:
f5:f4:57:4c:5b:85:f0:3f:38:78:06:26:01:a8:dc:
f7:82:df:e4:e2:7b:d0:1a:ce:39:96:16:6b:54:89:
bc:af:d3:ce:17:b4:99:1e:6b:05:4e:6c:e4:6c:02:
78:7f:6e:7f:07:71:f6:19:6d:31:0d:91:7f:42:e7:
4e:c1:7d:48:e6:15:bd:c2:41:59:10:cc:63:ab:c0:
06:fa:23:5d:56:da:24:d4:a9:3d:0f:fd:f1:cd:2d:
64:a1:a9:6e:8e:59:8b:6b:6c:30:64:be:0c:b7:47:
5f:18:c4:32:19:3e:20:f1:72:8b:81:56:82:ff:62:
4e:36:7c:06:f3:30:f5:20:a1:b5:a8:e8:8d:c9:c6:
4a:26:95:74:e0:ab:60:58:f5:a1:cf:5a:3f:82:f7:
95:8c:19:99:d5:5e:8c:13:52:c6:11:4e:88:07:b3:
09:81:d5:d8:4f:f8:d2:b1:24:be:7a:d3:91:5a:83:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:68:29:5E:32:3C:29:DE:D3:BF:E6:26:69:19:5C:7E:C3:38:44:09
X509v3 Authority Key Identifier:
keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:92:de:ee:4c:9b:70:7d:56:66:67:95:29:f1:af:0b:ba:08:
34:47:ff:4f:7e:5e:d2:6a:d4:67:f3:fc:b3:ca:5d:90:d3:5f:
ec:bc:36:bc:55:61:d0:80:90:43:9e:76:45:da:84:63:ac:ac:
bb:8b:97:dd:01:f7:67:c9:24:b8:64:35:b5:f7:fc:ae:d4:b5:
af:e1:6e:54:78:3a:38:7a:a8:84:d1:f1:4a:58:a5:cc:0c:6c:
97:e2:7f:7e:64:c8:3f:05:3f:ea:a4:1e:e6:35:c1:fe:32:5c:
03:33:10:2f:49:69:85:9c:88:f1:c9:54:c6:27:2c:f9:fa:15:
ed:8e:a7:d9:00:f8:7f:f6:cb:b5:d7:91:43:f1:f8:57:3f:80:
79:7b:ce:f6:1f:02:70:3b:7f:ff:d7:3d:af:5e:e6:1f:4d:83:
c8:30:8a:8d:5c:83:bc:c5:6f:ca:27:fe:e1:62:9c:4f:1c:a5:
8b:d1:95:48:93:31:c4:40:fb:8e:36:8b:49:e4:87:02:68:3c:
12:61:af:66:65:7c:ea:bf:cb:05:bf:cb:75:ef:9c:5f:fd:a7:
ca:c1:f5:8e:84:d2:1d:0d:66:0f:48:4f:b8:eb:5d:2d:ef:10:
10:2a:7d:e2:7c:8c:8e:36:23:ef:27:46:a7:c9:09:b4:e9:ae:
ac:2e:c0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:52 2025 by rpki-client