Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa
File: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (raw, json)
Hash identifier: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=
Subject key identifier: 02:E5:E8:D3:9C:9B:BF:C8:9C:1C:75:AA:0F:25:3C:B0:34:A7:67:56
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 01942521FDF9C6C1A0BAB0465139D71D43F5
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44772
IP address blocks: 185.129.56.0/22 maxlen: 32
195.28.14.0/23 maxlen: 32
2a04:8c00::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fd:f9:c6:c1:a0:ba:b0:46:51:39:d7:1d:43:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e5e8d39c9bbfc89c1c75aa0f253cb034a76756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:3d:4b:33:ca:90:e0:48:e7:0b:a9:92:26:
08:ca:0a:d3:01:5a:6f:83:d5:b8:b8:bb:2d:3e:fd:
c6:25:8d:2b:72:5f:78:de:5e:cb:f5:1f:1d:41:d2:
5c:96:14:c5:f3:9f:62:26:0f:31:af:3f:ee:58:d6:
9c:d5:b9:38:97:9c:67:1d:10:a6:ec:6f:48:64:bd:
f7:d5:5f:8a:1c:c6:27:0e:5f:c2:a3:54:67:16:aa:
25:95:be:28:f0:cf:80:ab:b4:4d:7a:e7:31:09:9e:
96:12:88:09:8a:d5:5d:b8:e8:f5:e6:77:d4:8c:58:
f7:de:42:06:7d:07:bb:da:fb:b2:15:41:5f:f0:0b:
6f:d1:cb:1a:d4:cd:f5:83:3d:03:0c:ac:cf:e9:21:
b7:04:22:c9:7f:df:9a:eb:3e:77:22:1f:1f:94:b4:
71:7b:69:9e:5c:0d:01:9f:b8:34:7d:2c:a5:9c:07:
f3:dc:4c:a0:29:59:f9:34:75:72:81:6e:b0:01:4a:
3e:ce:a1:06:34:5b:13:69:85:27:24:b8:48:3a:9f:
35:48:be:97:8d:6a:6e:e2:06:a3:dd:34:a5:7f:86:
2e:66:e2:0e:eb:de:ca:65:b1:34:bd:69:47:d8:a0:
ab:81:a8:98:46:2d:88:12:9a:f9:a0:e6:70:73:16:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:E8:D3:9C:9B:BF:C8:9C:1C:75:AA:0F:25:3C:B0:34:A7:67:56
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.56.0/22
195.28.14.0/23
IPv6:
2a04:8c00::/29
Signature Algorithm: sha256WithRSAEncryption
28:37:cb:e5:5d:19:6d:bb:e7:24:dc:ab:01:5a:4f:ab:1e:ad:
4d:e5:08:f2:5b:0b:f2:41:cf:7a:0c:ac:a2:e5:32:e4:0f:12:
8b:08:5c:04:1e:24:33:04:41:7e:e6:f6:57:12:4f:f8:09:9e:
19:57:72:ac:c3:7b:c2:e5:18:f6:6a:89:2e:44:41:f2:f0:64:
8f:87:0e:5f:32:c1:66:b2:67:d8:39:2f:3d:f2:8a:65:21:09:
b0:b3:63:d1:09:ef:00:8f:c7:7e:53:2a:eb:f4:64:06:fc:d5:
12:5f:f6:fb:38:43:e8:16:86:3e:d2:e0:d4:87:c5:72:d3:a7:
0c:2d:4e:7c:b8:bd:8d:56:23:53:17:7d:ea:aa:79:7d:61:f5:
0e:a2:e3:bb:20:b4:f4:73:32:cd:57:d4:46:05:ef:c4:ec:41:
6d:b3:e6:93:31:99:ec:cf:89:75:85:4d:46:c3:44:58:2d:82:
ad:99:f3:bd:fa:2c:54:47:3b:3f:09:a0:90:c7:0b:c0:92:03:
fe:a0:d3:34:e1:4e:14:1a:23:85:5e:b5:5f:cf:16:1f:f6:e7:
ce:c5:1b:09:0d:3d:37:af:d0:7f:c8:da:4c:30:ef:be:b2:ba:
d9:c9:0f:fc:3e:ab:4e:3c:8b:4e:37:b5:0f:23:9f:52:7a:65:
7a:ba:32:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:00 2025 by rpki-client