Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/12ToQcSPt7mcdwlwu8cks0_4omc.roa
File: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (raw, json)
Hash identifier: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=
Subject key identifier: D7:64:E8:41:C4:8F:B7:B9:9C:77:09:70:BB:C7:24:B3:4F:F8:A2:67
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01941F8C9969617B8C08D3609D4BE72E991A
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/12ToQcSPt7mcdwlwu8cks0_4omc.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204004
IP address blocks: 185.107.16.0/24 maxlen: 24
185.107.17.0/24 maxlen: 24
185.107.18.0/24 maxlen: 24
185.107.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:69:61:7b:8c:08:d3:60:9d:4b:e7:2e:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d764e841c48fb7b99c770970bbc724b34ff8a267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:be:88:70:5b:92:73:40:fa:f7:bb:6b:36:
b9:ae:a9:f8:3b:1f:66:0e:65:7c:6d:61:83:b3:b5:
28:6e:9c:56:1f:58:21:01:ed:cd:5c:3c:20:8a:5b:
ba:40:f5:45:3a:e5:4b:51:50:de:6f:73:e6:ed:90:
5a:6c:98:5b:43:e2:49:61:05:c3:eb:91:6e:45:0a:
63:b2:2e:11:d7:46:1e:0d:1e:e3:d2:92:64:32:6f:
08:e9:3d:42:21:77:1a:01:74:dd:61:2b:d8:6d:8e:
a9:4b:af:4b:72:a1:16:0f:4a:76:bb:75:13:cc:5f:
1b:97:44:76:cc:13:ec:9a:d3:03:9b:5f:e0:84:5a:
0c:d0:93:cc:94:3d:4e:b1:84:e2:dc:2b:86:f7:e4:
a3:5c:3c:aa:58:4a:9b:d1:d1:a4:25:0a:d3:15:23:
cb:de:86:17:f5:87:77:e2:f2:c6:64:a1:d1:d2:8d:
f9:21:8b:bb:72:72:ba:ac:55:48:e6:06:21:d2:d7:
01:bd:88:75:81:89:3c:c4:88:c7:70:85:5a:3b:90:
60:21:aa:40:45:66:b4:b5:21:fb:97:45:8f:b3:84:
34:e2:67:70:e8:98:41:7b:70:ef:92:16:2a:64:ab:
94:dd:d1:c4:3e:07:0f:ff:ea:2a:23:42:63:bb:0f:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:64:E8:41:C4:8F:B7:B9:9C:77:09:70:BB:C7:24:B3:4F:F8:A2:67
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/12ToQcSPt7mcdwlwu8cks0_4omc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:33:88:12:c0:b8:da:3f:54:0e:bb:50:e4:1c:57:e7:25:0c:
89:d6:44:44:7f:b5:11:a8:51:95:b0:66:f6:29:ed:9a:9d:0a:
16:b9:a0:02:b8:ff:da:38:3f:e3:94:f4:91:f0:20:6f:11:4f:
30:05:ba:a9:b3:8d:51:6c:72:66:00:24:8b:dc:bb:e1:13:4c:
2d:30:1a:ad:fb:e1:58:58:1a:c7:22:ed:ae:a7:f5:97:74:6a:
b3:71:de:9a:0c:48:27:0d:80:b3:1b:20:64:41:7b:5d:7d:91:
c1:59:9b:95:30:f3:f5:93:f4:57:2f:ee:b5:fc:2c:9f:43:77:
9e:ec:36:8e:b5:b4:39:41:ef:21:ec:70:17:18:ff:b4:9b:6e:
6b:6b:77:d6:44:aa:55:41:93:31:9a:e2:6a:8f:3e:f8:df:a1:
c1:13:01:bb:44:10:c0:03:09:86:9b:e1:cc:4a:8b:98:95:a8:
69:5d:a1:75:7b:01:be:91:c6:f4:32:c1:96:e4:c4:5b:33:8f:
10:53:f0:bf:68:3c:d8:27:11:4a:a3:c3:65:74:75:5b:60:c9:
b8:b6:fe:d9:e9:c6:51:14:0a:f2:14:31:82:bf:af:31:23:ab:
ac:1b:f9:7b:27:38:5e:45:e6:10:0d:23:14:34:02:80:e8:b8:
79:4d:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:51 2025 by rpki-client