Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gMAusR_cgkSumXKCyqUYXLEW_rE.roa
File: gMAusR_cgkSumXKCyqUYXLEW_rE.roa (raw, json)
Hash identifier: fCLnoU+6I/jWuWG9NP0HtPIOGgDs+5xdpmDtCRvLmVA=
Subject key identifier: 80:C0:2E:B1:1F:DC:82:44:AE:99:72:82:CA:A5:18:5C:B1:16:FE:B1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220249C691D2F032B7FDD2A86DB5A3D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gMAusR_cgkSumXKCyqUYXLEW_rE.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 185.223.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:24:9c:69:1d:2f:03:2b:7f:dd:2a:86:db:5a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80c02eb11fdc8244ae997282caa5185cb116feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:17:35:a3:c3:bc:4e:f8:e8:5c:16:df:a1:
c4:e6:a5:b7:2f:a7:1e:eb:9b:76:ec:de:12:ce:8a:
78:c4:cb:8d:dd:19:13:c2:a8:2a:fd:e7:71:eb:ba:
dd:00:d7:83:7d:af:e1:b5:03:25:e3:da:df:48:27:
9c:77:fc:be:be:fd:a3:2a:c7:d9:d9:7c:77:30:21:
4a:8e:d3:84:8a:f3:5a:47:0c:ca:e1:3d:f4:3e:3b:
b6:2f:ea:ec:f9:56:fa:0f:86:38:83:4f:3d:f0:cf:
50:ab:66:5a:24:8a:f8:2a:d6:58:6f:a6:1e:04:62:
bd:2a:2f:02:ed:ec:36:58:39:6f:d9:ae:cf:2d:5b:
cc:42:a7:69:1c:35:50:c2:9f:cd:4f:a0:9b:ed:42:
55:d5:d3:ef:eb:c3:30:cf:4a:0a:5e:94:ec:1e:38:
be:35:09:41:04:98:53:2c:4f:1c:59:0c:4b:be:9a:
4f:49:1e:be:8d:f1:13:86:9b:f1:c9:12:d5:87:d4:
95:61:1f:9f:24:8b:cf:7a:96:ea:d1:cc:bd:c4:58:
7c:46:d5:8c:d6:ad:28:ca:cd:21:a8:88:dd:cf:82:
e4:db:2b:de:98:0a:8d:5e:41:41:d9:9e:f7:0e:47:
87:f1:ba:39:e0:22:d0:8c:d5:49:b5:a5:99:27:ec:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:2E:B1:1F:DC:82:44:AE:99:72:82:CA:A5:18:5C:B1:16:FE:B1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gMAusR_cgkSumXKCyqUYXLEW_rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:da:7e:3f:ef:aa:0a:65:4c:d4:f7:69:cc:59:e6:30:5e:31:
69:b4:64:54:1e:f2:3c:af:90:32:75:52:40:83:7a:22:95:03:
ae:c0:db:4d:5c:38:09:64:d8:89:47:a4:38:55:da:c2:8c:e0:
8a:05:93:47:74:90:3e:7f:cb:70:c5:d4:cb:96:50:ba:72:df:
1c:69:c9:58:71:0a:3a:10:f1:ac:f3:69:f6:75:59:b8:7c:bc:
47:86:60:f3:5b:de:84:e6:23:6c:59:a8:da:7a:fb:fb:0b:0a:
8e:03:78:a1:87:61:cf:15:f3:f1:14:98:d2:b4:80:44:48:8d:
5c:6a:91:21:e8:78:45:cb:e1:8a:f2:4b:f5:6f:30:7d:7e:ca:
c3:0b:e7:69:7b:87:08:2a:a9:a1:96:e5:bc:cd:f8:38:31:54:
38:cc:94:fb:24:a7:81:79:00:fc:ed:f1:8e:cc:9d:a1:56:f1:
03:97:d3:35:8d:2f:36:8e:43:df:5a:bc:4f:a1:a9:3d:2a:d6:
ed:4e:37:02:10:52:35:d7:5b:89:9d:06:0f:a9:b6:0f:1e:19:
17:64:5b:ba:6d:24:b0:82:26:ec:65:04:d3:39:01:24:54:2b:
a2:3b:ab:23:36:e4:da:9f:11:74:8d:c1:11:ca:84:fe:81:92:
77:2e:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:47 2025 by rpki-client