Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2npz59Y0Ibjf2gtu1MOPu4qITAQ.roa
File: 2npz59Y0Ibjf2gtu1MOPu4qITAQ.roa (raw, json)
Hash identifier: V/pz5fgi5g6KqRdPgOWYqKEuhqWz8jDNPpsR8HLU58s=
Subject key identifier: DA:7A:73:E7:D6:34:21:B8:DF:DA:0B:6E:D4:C3:8F:BB:8A:88:4C:04
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D721186E0A4302AF23CA2DF25C5731
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2npz59Y0Ibjf2gtu1MOPu4qITAQ.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204173
IP address blocks: 185.106.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:21:18:6e:0a:43:02:af:23:ca:2d:f2:5c:57:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da7a73e7d63421b8dfda0b6ed4c38fbb8a884c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:e3:32:51:18:cb:e0:f7:1f:ab:d5:fb:01:
3f:b7:45:c8:fa:b3:28:9c:fc:db:08:95:32:64:89:
b7:73:77:a1:83:d1:3d:e2:cc:bd:5e:d4:f7:66:dc:
fa:9e:06:fd:e6:0f:72:49:02:17:09:c5:25:02:2e:
20:e6:16:7b:36:0d:9c:7b:e8:17:f3:fa:7f:6a:a5:
75:51:ea:07:cb:64:59:27:02:16:e7:72:37:26:b9:
cd:9f:8e:d6:95:ab:62:a6:d3:ba:39:66:fe:e3:11:
c0:34:a0:e1:7d:cc:5e:a5:14:a6:98:0e:0b:d9:7b:
96:4f:3e:e1:15:3c:2e:74:ae:6e:9e:21:64:54:49:
49:8d:36:91:5f:25:db:74:f4:96:77:79:e5:35:23:
76:0a:01:c1:b1:fc:ef:f7:02:7d:9d:b5:13:63:20:
dc:f5:c1:53:5f:f9:98:f5:bb:f4:26:46:50:16:34:
eb:46:87:69:c0:ea:dd:73:df:96:ee:ff:27:27:41:
dd:db:99:97:da:1e:2d:06:a8:68:75:d3:cf:12:0b:
8e:93:46:75:43:3d:01:0c:75:7a:23:53:de:42:2e:
03:b1:3e:48:78:76:51:42:56:e5:a3:fd:cf:9f:6d:
40:ad:ad:15:98:20:9a:b6:ae:6b:d1:62:97:bb:95:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7A:73:E7:D6:34:21:B8:DF:DA:0B:6E:D4:C3:8F:BB:8A:88:4C:04
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2npz59Y0Ibjf2gtu1MOPu4qITAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:87:ab:ed:57:33:ac:88:1e:49:75:dc:dd:7a:dd:44:e8:38:
35:99:ef:5d:8a:07:3e:3a:f5:ea:2e:46:b2:aa:e8:72:97:c8:
8b:ea:38:98:84:df:35:2a:bb:45:0c:4c:45:be:7f:6a:8e:5f:
1f:81:74:11:76:c4:8e:50:98:1d:3b:67:3f:c5:be:eb:3c:b0:
a4:9d:87:09:95:6d:f8:40:68:2d:0b:f4:42:a3:10:5a:58:b5:
92:3d:a0:b2:2a:eb:48:64:68:e4:91:c7:1d:a1:9f:5a:51:db:
30:bd:34:c6:fd:42:02:99:b9:14:c0:ea:51:8e:7a:b3:37:e2:
e9:ed:11:2c:e3:c3:03:a1:a9:84:6b:24:55:29:fb:5f:cd:42:
9c:1c:92:5d:fe:ad:96:ed:b6:61:46:88:63:fa:6d:82:ae:f4:
19:ad:9e:73:d1:7f:9b:a3:8d:2a:ca:3d:66:2a:3e:bc:08:5e:
a9:79:18:0f:95:35:b6:d4:ac:10:69:e4:ac:c7:27:92:9f:cc:
3e:41:86:8a:ab:55:81:e8:90:d7:5b:59:84:a1:ae:96:43:93:
03:97:42:15:c7:8c:05:ac:fa:ec:ee:da:66:30:0a:de:6f:4e:
9d:2a:b1:f2:06:c0:51:ae:a5:58:c9:c2:9d:c7:75:ea:da:90:
ce:ca:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:16 2025 by rpki-client