Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8d9f9c-29d6-44af-973e-99ca01beab76/1/TXV1oilMh00Ih1mdFJwRNeVq6_k.roa
File: TXV1oilMh00Ih1mdFJwRNeVq6_k.roa (raw, json)
Hash identifier: OhUdUwDISwY88U09fzuJacpiRNuHeW0+qNUio44Qrwk=
Subject key identifier: 4D:75:75:A2:29:4C:87:4D:08:87:59:9D:14:9C:11:35:E5:6A:EB:F9
Certificate issuer: /CN=cda420de08d5d3834a90acbb9fc8727d6fcc9607
Certificate serial: 018282B259F71F528697343E0F6848A179A6
Authority key identifier: CD:A4:20:DE:08:D5:D3:83:4A:90:AC:BB:9F:C8:72:7D:6F:CC:96:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaQg3gjV04NKkKy7n8hyfW_Mlgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8d9f9c-29d6-44af-973e-99ca01beab76/1/TXV1oilMh00Ih1mdFJwRNeVq6_k.roa
Signing time: Tue 09 Aug 2022 13:01:42 +0000
ROA not before: Tue 09 Aug 2022 13:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208626
IP address blocks: 185.170.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:b2:59:f7:1f:52:86:97:34:3e:0f:68:48:a1:79:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda420de08d5d3834a90acbb9fc8727d6fcc9607
Validity
Not Before: Aug 9 13:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d7575a2294c874d0887599d149c1135e56aebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:5b:58:23:cd:01:d7:59:89:f9:f1:9f:11:
ff:cd:f6:54:43:49:ab:37:51:ad:08:10:fb:05:b4:
5a:29:cf:d0:7b:68:cd:4c:e9:18:15:42:01:65:5b:
6d:97:66:d6:85:14:10:76:5c:a3:3c:81:da:88:f3:
68:b6:32:fd:54:81:3a:68:cc:95:c4:85:d6:22:f4:
0b:7b:b3:93:27:cd:6e:a3:78:75:7f:67:e6:23:46:
bb:73:96:0c:9d:90:d0:54:34:d6:84:7f:a5:ee:66:
1f:c0:d4:1e:fd:76:83:69:47:88:f3:9f:87:ee:a7:
12:98:f6:1c:9a:e4:a7:73:84:93:64:76:b8:85:09:
9c:59:e2:a5:b4:d3:c9:21:8d:7b:63:84:d3:85:2e:
f1:fc:1c:d9:b1:ae:2f:61:58:04:fe:f9:e9:16:0b:
a1:f4:43:42:a1:04:7a:04:4e:32:dd:32:3e:67:4b:
eb:1b:c8:b7:3c:c1:48:11:1d:1b:b6:0d:19:a5:cb:
3b:e8:cb:b6:5e:8a:10:50:84:2f:e5:cd:b6:d4:f4:
57:08:de:4d:3a:4a:fc:ea:ed:67:71:96:5c:d0:5d:
35:14:cd:5b:56:c5:d9:15:26:de:0d:01:ee:e5:01:
d8:3e:ee:67:4f:6e:39:6f:85:6e:da:9e:3f:8d:ce:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:75:75:A2:29:4C:87:4D:08:87:59:9D:14:9C:11:35:E5:6A:EB:F9
X509v3 Authority Key Identifier:
keyid:CD:A4:20:DE:08:D5:D3:83:4A:90:AC:BB:9F:C8:72:7D:6F:CC:96:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaQg3gjV04NKkKy7n8hyfW_Mlgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8d9f9c-29d6-44af-973e-99ca01beab76/1/TXV1oilMh00Ih1mdFJwRNeVq6_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8d9f9c-29d6-44af-973e-99ca01beab76/1/zaQg3gjV04NKkKy7n8hyfW_Mlgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.10.0/24
Signature Algorithm: sha256WithRSAEncryption
56:47:ba:a5:50:64:76:3f:48:89:f5:bc:8e:8a:0b:b3:b4:2d:
6d:c2:7f:c2:be:62:62:69:ac:88:2a:63:06:83:a0:00:45:7b:
1b:d8:bf:f9:ab:d4:90:69:06:6e:87:92:c8:51:9a:15:b1:26:
1b:37:70:19:97:1b:47:2d:95:32:24:78:f2:07:95:81:26:18:
51:f5:67:e0:67:c6:c2:50:47:fb:76:71:76:7c:f8:77:97:dd:
0a:6e:8b:04:51:4f:4e:54:f6:7c:34:bd:55:c0:ed:c4:f6:81:
d0:65:75:d9:f5:82:0b:61:e6:b3:c9:f1:c3:7a:65:6e:93:b7:
21:32:b5:ee:e3:9e:fc:70:c0:f6:a1:2f:d7:91:af:fc:49:b8:
48:2a:f4:c2:32:95:dc:17:cb:e4:93:79:60:68:aa:d5:a9:59:
d9:1b:e3:3e:84:d1:e6:92:ae:62:c9:56:a5:b7:00:2a:41:78:
c1:38:67:b5:8d:dd:ea:bc:c2:cc:97:7c:e0:2e:66:75:8c:aa:
08:b5:a5:17:1e:e4:44:6a:77:b8:db:ef:90:3d:4d:cd:dc:0e:
a2:08:2b:3d:5f:eb:64:a4:35:95:5b:f5:c5:ce:92:74:e5:33:
61:f0:3f:0a:c4:88:8f:d9:e8:ae:23:ca:ae:28:b9:af:57:b7:
8c:92:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:56 2025 by rpki-client