Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/caOwr36UZOt6FGZCpF_zoa5FR6E.roa
File: caOwr36UZOt6FGZCpF_zoa5FR6E.roa (raw, json)
Hash identifier: vUxpI3+/ZpXJa6vFZAUMQ7Pt4Tu6Gpd4C4Yvy/95Zyo=
Subject key identifier: 71:A3:B0:AF:7E:94:64:EB:7A:14:66:42:A4:5F:F3:A1:AE:45:47:A1
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 01856F0B6B52A160950BFE11758791948B2D
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/caOwr36UZOt6FGZCpF_zoa5FR6E.roa
Signing time: Sun 01 Jan 2023 20:34:57 +0000
ROA not before: Sun 01 Jan 2023 20:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203851
IP address blocks: 185.87.212.0/24 maxlen: 24
185.87.213.0/24 maxlen: 24
185.87.215.0/24 maxlen: 24
185.87.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6b:52:a1:60:95:0b:fe:11:75:87:91:94:8b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Jan 1 20:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71a3b0af7e9464eb7a146642a45ff3a1ae4547a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ed:5d:bd:03:cc:e0:11:f4:01:0d:5c:23:f9:
77:40:33:eb:36:62:81:de:aa:14:2f:d9:06:22:ec:
bd:41:62:04:70:44:1a:a9:b3:30:46:da:14:20:d8:
92:5a:e3:77:d8:11:b5:d5:ff:8e:cf:71:99:01:a2:
1c:66:e5:25:6f:d7:c6:bc:ec:97:37:d7:cf:bc:77:
7c:17:05:7b:1e:16:b4:22:37:45:aa:c9:79:77:97:
06:37:13:c0:b3:c8:15:9c:a2:92:75:f1:35:58:d3:
11:0b:28:82:19:ff:3c:19:01:c1:39:a8:3d:7c:3a:
ee:67:8f:18:15:c8:8e:f2:8a:9d:60:63:a8:e5:d2:
23:92:65:f1:73:88:36:db:9e:ff:ae:2a:93:b2:d5:
4e:42:b4:32:67:98:ab:64:f8:c8:4b:fa:fa:33:22:
32:a3:cd:5a:83:56:03:a9:56:e5:20:26:8e:8f:92:
7c:d7:e9:23:1e:b0:ba:55:ba:13:44:28:47:07:09:
39:dd:1a:1d:3a:17:12:05:d5:59:1c:99:d6:fe:4d:
77:4a:20:b8:ec:2b:d9:9a:9f:20:92:9e:9d:80:b1:
fc:85:e5:47:86:e9:00:38:36:df:c5:09:2f:05:da:
4d:93:a4:6c:70:d0:9e:59:02:cc:bc:29:26:67:d1:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:B0:AF:7E:94:64:EB:7A:14:66:42:A4:5F:F3:A1:AE:45:47:A1
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/caOwr36UZOt6FGZCpF_zoa5FR6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:09:b0:43:5b:fc:4d:da:da:f3:07:26:57:e3:18:d0:ee:08:
e2:ca:ec:82:3c:c0:17:43:a5:d4:23:e0:5f:a8:d7:3c:0d:85:
b7:bf:5a:d8:0e:dd:2a:10:7a:e7:b5:bd:0d:cf:fd:86:ce:0b:
da:bd:07:05:d0:83:d7:65:59:42:15:2c:ec:40:aa:14:53:07:
6e:fd:b8:5f:57:06:e7:64:7c:2c:dd:99:67:dd:24:e2:d3:bc:
5e:97:a3:27:26:00:d1:fe:3f:75:75:74:26:36:59:c3:27:d9:
1f:af:03:2b:a8:3a:ee:a4:11:61:d9:2f:3f:d1:93:c7:85:9d:
3f:17:02:04:cf:43:38:88:ce:19:d4:2c:57:09:f6:53:92:42:
b5:58:63:b8:08:d9:b9:ee:a5:dd:6a:15:81:21:d6:d8:0b:ae:
50:39:61:25:07:7e:f8:f8:e9:c0:08:33:46:c2:0f:2e:3a:9f:
81:98:44:d9:ab:98:98:7c:7c:85:06:81:c4:f7:ff:bb:a6:d5:
ab:1c:c4:a3:cf:8c:7b:af:bb:41:6f:90:1b:9b:71:db:f6:64:
4a:57:97:f8:9b:a4:93:f1:83:95:b0:ec:ca:29:6b:3d:02:d5:
89:69:7a:fb:e0:03:28:49:16:52:65:0d:5b:c3:77:1b:2c:86:
fd:8b:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:10 2025 by rpki-client