Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/DV42p8se3L2zEopyG9pYChd08dA.roa
File: DV42p8se3L2zEopyG9pYChd08dA.roa (raw, json)
Hash identifier: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=
Subject key identifier: 0D:5E:36:A7:CB:1E:DC:BD:B3:12:8A:72:1B:DA:58:0A:17:74:F1:D0
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 01941F8C09E8D2AADD431C3D151E1515E273
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/DV42p8se3L2zEopyG9pYChd08dA.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201612
IP address blocks: 185.80.188.0/24 maxlen: 24
185.80.189.0/24 maxlen: 24
185.80.190.0/24 maxlen: 24
185.80.191.0/24 maxlen: 24
2a05:7f00:188::/48 maxlen: 48
2a05:7f00:189::/48 maxlen: 48
2a05:7f00:190::/48 maxlen: 48
2a05:7f00:191::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:e8:d2:aa:dd:43:1c:3d:15:1e:15:15:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d5e36a7cb1edcbdb3128a721bda580a1774f1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:e0:29:08:6c:e5:c4:39:ad:70:9a:15:4c:
24:28:31:54:25:25:8b:b2:62:ed:54:3b:90:03:5d:
1f:64:39:0c:79:34:14:8f:d2:1c:5c:c0:ca:0c:59:
79:a9:23:8e:cc:e3:78:75:59:8b:4a:e1:26:b9:2d:
d3:a7:93:85:44:79:38:8d:b5:13:34:b0:93:7e:ef:
86:a5:6c:40:ab:51:9e:14:ce:62:61:16:26:69:05:
ce:dd:f2:02:c2:55:08:cd:dc:5b:ba:fa:94:a6:0b:
5d:63:4e:14:2a:27:13:3d:a3:05:43:df:37:44:d3:
b5:3c:7b:24:86:44:c6:e9:ed:62:36:f8:0e:ef:b5:
d4:32:59:ab:03:7b:20:ab:64:11:40:d7:b3:38:61:
32:9c:76:44:28:19:c5:b8:58:17:98:42:b9:c7:1d:
59:ed:80:53:47:43:85:48:5e:26:eb:4e:5e:9d:45:
7a:8d:73:59:7a:96:af:62:ba:c7:7c:f9:a0:bc:fe:
f1:05:0e:35:78:92:e3:1c:3c:2c:e6:52:e9:2f:d6:
4b:82:0b:4d:ec:89:d5:53:42:2c:c5:9f:42:11:96:
7e:ac:96:73:a5:ec:b1:e0:41:f2:9a:aa:e5:5a:a1:
a4:35:50:af:b3:b7:83:bd:7c:72:63:7d:8e:ba:69:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:36:A7:CB:1E:DC:BD:B3:12:8A:72:1B:DA:58:0A:17:74:F1:D0
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/DV42p8se3L2zEopyG9pYChd08dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.188.0/22
IPv6:
2a05:7f00:188::/47
2a05:7f00:190::/47
Signature Algorithm: sha256WithRSAEncryption
73:6f:b4:61:ac:c2:d0:82:ea:63:d1:25:3b:08:18:37:df:7c:
b2:d6:e7:dd:59:af:4b:c0:f7:d6:f8:8f:a6:94:0b:46:ac:1e:
48:4e:36:86:e5:c4:cc:9c:7c:39:69:85:ea:22:96:97:5c:c8:
07:56:07:ac:9d:c3:c0:c9:df:32:d0:39:26:0e:60:5e:0a:d4:
c1:71:ed:d6:06:16:59:b8:16:22:58:21:b3:64:c9:30:ef:b2:
c1:dd:99:6d:a9:27:e8:7c:e6:0e:b4:f5:28:96:c6:96:30:d4:
26:45:b8:28:76:04:5e:30:76:e6:b5:a9:49:c2:a1:7c:3d:97:
70:48:e9:dc:48:df:de:2a:29:69:13:34:1b:d4:82:ac:9b:9f:
ee:56:da:f7:01:12:0f:6f:43:63:ff:da:51:16:31:1c:49:0e:
73:6b:00:e8:8e:51:8d:7b:92:bd:ba:e6:01:7a:c4:c9:9d:39:
d4:ad:c9:2e:c9:06:65:fb:f7:ad:0e:f9:b4:08:ab:a2:d0:2d:
48:40:9f:47:26:c0:01:73:03:05:0c:2e:b8:e6:fa:fa:06:f2:
c3:50:35:31:2a:cf:ea:be:1c:76:31:67:0e:e1:b5:03:c4:9e:
4d:38:44:ca:ea:f1:f4:8b:ef:ea:83:21:4a:21:45:f5:b2:69:
ec:90:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:50 2025 by rpki-client