Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aco-D-ic5A2VcTI5m2fCOamUNrQ.roa
File: aco-D-ic5A2VcTI5m2fCOamUNrQ.roa (raw, json)
Hash identifier: mY+b+t2vVGs+GwlQRXdWjNgmJiw1uXJUn6ESIOG5g00=
Subject key identifier: 69:CA:3E:0F:E8:9C:E4:0D:95:71:32:39:9B:67:C2:39:A9:94:36:B4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422203C959FB37D50496C6B9CD4F4EB5F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aco-D-ic5A2VcTI5m2fCOamUNrQ.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203758
IP address blocks: 185.36.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3c:95:9f:b3:7d:50:49:6c:6b:9c:d4:f4:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ca3e0fe89ce40d957132399b67c239a99436b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:69:e3:07:4b:a2:18:c8:71:7d:05:19:83:
90:2c:ea:d2:2b:91:cf:7c:b4:aa:e5:a1:61:dd:be:
c5:9d:7b:b1:f4:06:7e:b0:e3:a7:87:cf:18:d3:48:
75:7f:24:12:5a:d8:03:f9:d0:85:6a:93:ce:4c:8b:
2a:96:21:fe:36:b9:8b:28:c3:50:cd:c6:f9:b5:f5:
1e:df:9f:4b:97:25:70:b5:04:49:40:8a:d4:0c:8c:
9b:d0:27:ef:ae:96:f7:e0:be:b8:be:fe:3e:df:e4:
1b:d0:45:d6:5d:d7:8b:39:48:f7:99:ad:b9:ef:4f:
0e:d7:07:74:42:3f:ea:45:e8:64:09:ce:08:a7:b9:
bb:76:fc:9d:93:c7:14:52:09:20:23:ae:3d:69:2f:
48:83:38:c9:4a:56:fa:d8:bf:ee:e1:4e:3d:c2:c1:
d2:ca:e6:f0:6b:70:ee:c3:42:10:75:40:ff:f7:1e:
77:2f:1e:db:8a:3b:40:fe:0e:77:e2:6b:5f:ca:34:
eb:94:29:73:3c:e1:38:d4:2d:03:48:39:d6:bc:cb:
1b:d3:3d:29:33:55:ae:61:1a:18:1c:6f:7b:2e:93:
c0:d4:d7:58:eb:b2:67:c0:41:3d:23:a9:3f:bf:a9:
54:46:00:c1:51:92:4f:54:a1:0e:19:43:22:73:62:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:3E:0F:E8:9C:E4:0D:95:71:32:39:9B:67:C2:39:A9:94:36:B4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aco-D-ic5A2VcTI5m2fCOamUNrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.205.0/24
Signature Algorithm: sha256WithRSAEncryption
36:21:6a:20:c3:38:79:6c:bd:fa:73:e6:fb:8b:f8:84:bd:a7:
f0:03:b8:5e:8b:36:1b:09:3a:ab:6d:e9:7b:8a:b2:d3:f4:0f:
b3:74:1b:25:c1:09:e9:de:0b:33:f9:25:96:98:a0:3f:9d:48:
47:7c:1b:2b:d2:88:39:04:34:ab:7f:76:c8:1e:33:36:79:18:
ed:b9:7d:eb:1e:5f:87:15:bb:b2:4b:1c:5c:80:09:01:a3:6f:
dd:f6:fd:df:27:a6:d4:05:08:79:82:a9:77:fc:3e:77:ba:7f:
56:bb:0e:99:74:ec:6c:04:54:5e:dc:a6:ef:f1:d8:47:fa:74:
92:97:7c:48:07:c4:1b:56:47:bd:b7:75:f7:fe:82:02:b3:62:
91:f9:3c:70:0d:61:2b:fb:ce:46:cc:6f:2a:ff:46:25:75:4c:
de:cc:51:d0:4b:97:d7:f8:29:b7:be:84:6b:fd:97:fb:ad:4e:
e7:2b:d9:b2:9f:c4:20:88:4b:e0:03:2c:06:79:47:a5:7a:89:
bd:cc:e9:e0:4f:e6:f5:ff:08:12:61:f6:92:d9:d4:73:3b:14:
26:e1:98:ed:cf:e5:60:63:41:2e:9b:92:f5:a1:72:59:ba:df:
1e:6f:69:0e:55:b1:ae:ba:fe:7d:3b:b6:93:c8:f1:a9:ca:74:
42:ce:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:51 2025 by rpki-client