Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/6UgffgqyRmXA4X4lQkfxVrdwBsA.roa
File: 6UgffgqyRmXA4X4lQkfxVrdwBsA.roa (raw, json)
Hash identifier: evXeFj81thsrgyrUvw1aQVJLYDNLbEIIyY5wmZWNCGU=
Subject key identifier: E9:48:1F:7E:0A:B2:46:65:C0:E1:7E:25:42:47:F1:56:B7:70:06:C0
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 019426D9D4B187FDA74EF4D9E16509798D7A
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/6UgffgqyRmXA4X4lQkfxVrdwBsA.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136796
IP address blocks: 185.192.56.0/22 maxlen: 24
185.192.56.0/24 maxlen: 24
185.192.57.0/24 maxlen: 24
185.192.58.0/24 maxlen: 24
185.192.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d4:b1:87:fd:a7:4e:f4:d9:e1:65:09:79:8d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9481f7e0ab24665c0e17e254247f156b77006c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:74:7b:a5:81:54:bd:fb:1c:69:41:bf:a9:
3e:11:1d:ee:b0:a9:b2:35:d4:65:f4:84:f0:0c:16:
22:2e:43:ed:4a:c6:d9:1a:17:df:a4:a0:9a:58:ed:
c6:31:b1:21:c5:bb:16:a8:11:86:c8:3c:97:73:4a:
65:30:fd:f0:6d:bb:80:4b:8d:ef:14:87:e9:62:c9:
1c:60:6d:0f:35:0e:c9:4a:95:89:4a:33:c2:6a:f5:
35:18:65:b9:56:1a:9f:ea:ef:14:03:4b:03:e2:91:
d7:f9:a0:4d:a0:9b:fe:f3:4c:59:d3:ba:98:35:4e:
bd:23:74:a6:34:69:6f:69:5f:a2:50:c4:91:be:37:
bf:f5:20:6f:81:9f:c4:92:fa:59:de:ff:bd:4e:41:
75:db:a3:9a:52:b2:c6:cd:28:59:23:1f:f2:32:72:
bb:42:02:b3:19:17:b7:06:0b:59:0e:b4:6e:73:cf:
70:16:1f:f7:9a:88:12:2b:79:9d:56:c5:f3:1b:5b:
e1:7f:4b:4f:4b:80:08:c8:48:c7:e3:8d:28:30:fb:
fb:d5:4d:8f:25:96:8a:cb:e3:33:a8:36:dd:a2:73:
f6:a1:95:84:df:8b:31:13:aa:44:c9:55:0f:47:e6:
1e:70:01:f8:d1:de:94:dc:3f:9b:0d:d1:13:36:0d:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:1F:7E:0A:B2:46:65:C0:E1:7E:25:42:47:F1:56:B7:70:06:C0
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/6UgffgqyRmXA4X4lQkfxVrdwBsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:de:b9:61:9a:9c:c2:11:22:d1:02:08:39:94:19:15:d3:29:
58:d4:52:e5:aa:0e:53:08:9a:d9:c6:48:4e:3a:f3:ab:48:2d:
fa:e6:b0:13:73:46:9a:fa:55:52:d8:08:59:56:0d:e5:5d:27:
45:c3:e2:33:d3:d5:24:de:0e:85:18:c4:88:b6:76:f1:6f:25:
44:43:86:19:a5:11:bd:5d:d9:3f:35:55:e7:83:5c:47:ad:64:
80:5c:7b:ef:d9:c6:ce:01:39:5a:4d:80:6f:60:73:02:cc:ba:
bf:54:a3:67:ff:ac:37:ae:67:f3:0f:c1:68:4c:fc:f9:5f:c2:
9f:34:91:95:02:c3:b1:71:0a:e1:a8:f8:27:b9:e4:f8:4f:81:
cd:11:a4:ea:fb:05:ec:f7:7a:7c:bd:a7:8e:3b:3f:e9:06:fd:
4c:33:51:85:ca:1e:81:d2:80:63:f0:8c:7c:18:40:fe:c1:27:
af:8c:01:43:6c:51:d3:2a:45:35:d2:3f:1c:94:5f:c3:bf:1c:
53:01:57:e4:93:c4:ac:29:b8:e8:02:1f:b8:3f:61:aa:ba:d9:
2d:c7:7a:78:b5:e3:96:0a:31:8b:95:93:1a:fa:5d:3d:b1:90:
d6:ef:6d:aa:7a:c3:cc:e7:5d:54:44:dd:1b:7b:bb:ed:07:1d:
23:4d:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:51:52 2025 by rpki-client