Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/2Gw8QOnYAv2wXYmUeczArrriB1Q.roa
File: 2Gw8QOnYAv2wXYmUeczArrriB1Q.roa (raw, json)
Hash identifier: scuEsz0Czk4jUI1o0fHWA1GaytybLeSIsLRXLL6rVAo=
Subject key identifier: D8:6C:3C:40:E9:D8:02:FD:B0:5D:89:94:79:CC:C0:AE:BA:E2:07:54
Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial: 0194266C0FEBDC154155ED40DE8A9EDE0A24
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/2Gw8QOnYAv2wXYmUeczArrriB1Q.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.163.152.0/24 maxlen: 24
185.163.153.0/24 maxlen: 24
185.163.154.0/24 maxlen: 24
185.163.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0f:eb:dc:15:41:55:ed:40:de:8a:9e:de:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d86c3c40e9d802fdb05d899479ccc0aebae20754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:5e:29:c7:ba:27:37:0e:a2:ae:db:50:dc:
66:40:6f:bc:8d:32:05:9f:02:44:32:ac:a2:66:20:
ea:6f:ae:e0:2e:4a:98:21:5b:92:f4:82:3f:47:4c:
28:88:d7:2d:99:11:c7:34:08:68:4a:ac:9e:00:a5:
c4:0b:0f:33:19:59:0a:82:80:f3:1a:16:15:97:ba:
20:c7:c6:9c:b2:0a:3c:84:df:73:33:1f:a5:8c:ac:
1c:2c:82:0e:33:d4:b0:f3:ab:be:64:65:d9:e3:c3:
4e:e0:70:c4:1e:64:d9:2d:b2:00:d8:6a:44:3a:5f:
d5:22:8a:08:a8:8f:de:bb:cc:33:d1:df:a3:1f:b3:
22:c8:4b:92:fc:64:83:ff:ef:1a:87:b3:ac:89:dc:
37:56:b5:37:c9:22:3d:12:d5:73:d2:c8:9b:60:58:
eb:71:82:37:08:4d:55:3b:8f:be:12:73:78:25:6f:
1c:b1:44:16:ea:2b:8d:af:63:5a:ec:f7:88:4e:e6:
5c:1a:95:b8:97:28:43:df:33:3f:df:a2:99:a2:36:
f9:1b:f0:57:9d:59:d4:70:be:ef:77:b9:03:75:d3:
42:45:bc:15:a9:93:4d:23:6d:8f:3d:a8:a0:50:01:
9e:4a:b2:4c:d9:e0:3c:09:8d:91:f8:dc:bb:5d:92:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6C:3C:40:E9:D8:02:FD:B0:5D:89:94:79:CC:C0:AE:BA:E2:07:54
X509v3 Authority Key Identifier:
keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/2Gw8QOnYAv2wXYmUeczArrriB1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:dc:29:ae:35:32:e0:ec:a9:6b:13:1d:2c:e2:65:e4:86:cc:
3b:c2:93:69:bb:fa:ee:2a:f2:ca:b3:bf:f3:97:4b:9e:8a:33:
b1:a4:12:a8:ad:55:a0:90:b2:fb:5e:6e:0f:1e:bd:73:fe:4b:
24:83:81:e5:52:e2:1a:eb:7f:2c:b4:9b:5a:b2:1f:29:fb:6a:
5b:a4:d8:f9:fc:9c:65:1c:e7:aa:c2:e6:87:7f:5b:43:d3:9c:
70:b0:7f:1a:15:14:df:d7:1e:ae:76:84:07:e6:b3:28:a9:7c:
5f:b4:a0:f4:2c:ee:6d:da:a4:d2:15:1b:a0:f7:9d:ca:9d:5e:
76:0c:44:ef:7f:3e:cc:50:f0:23:00:04:04:87:f8:d9:2d:d3:
1a:a2:65:de:38:63:c8:a5:cd:76:42:a2:4a:58:96:a9:8b:df:
d6:44:8b:22:e1:e5:43:87:67:3d:23:17:14:3f:8b:fa:15:76:
a0:88:1b:0b:6b:9a:d3:f8:35:cf:fc:00:b5:ef:bf:9d:82:65:
aa:8e:f7:5d:e4:8f:2f:a5:0e:22:e6:e5:df:05:fb:80:f2:cf:
8e:ea:c3:ac:e5:b5:2c:2c:69:ee:fa:6d:23:cd:36:60:81:0d:
42:32:3a:32:7e:40:d3:3f:18:88:7b:c3:36:0d:29:78:c1:8e:
1f:82:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:02:22 2025 by rpki-client