Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i7XjYzhqkmJGO0QuVJpuUNym19k.roa
File: i7XjYzhqkmJGO0QuVJpuUNym19k.roa (raw, json)
Hash identifier: Gmkf4/dE4Fm36bX6ib0dLbAcNn9Ywnl5VLiAWTPPGpo=
Subject key identifier: 8B:B5:E3:63:38:6A:92:62:46:3B:44:2E:54:9A:6E:50:DC:A6:D7:D9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422203227192CF7356CF0703FE4BAF51A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i7XjYzhqkmJGO0QuVJpuUNym19k.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138195
IP address blocks: 185.214.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:32:27:19:2c:f7:35:6c:f0:70:3f:e4:ba:f5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bb5e363386a9262463b442e549a6e50dca6d7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:c6:1d:fc:38:78:fd:15:9a:c2:4f:2a:d3:
3f:40:ea:9f:ef:48:1b:8b:cb:75:c4:16:b9:76:e3:
ac:f0:f9:f1:28:51:82:30:47:3d:27:4e:fe:ab:64:
41:be:31:39:52:37:48:d2:bb:4f:97:dd:d5:5b:e2:
18:b6:03:2e:e1:90:de:80:f4:31:fd:73:d8:8e:72:
79:23:3c:b7:47:c9:54:00:6e:c0:28:d5:35:6d:e7:
b6:cb:ef:38:be:3e:62:11:8d:e0:9d:c3:20:8b:78:
08:e9:d6:38:2f:ec:79:d3:b8:06:d7:08:59:63:d3:
85:78:24:6b:e8:a2:b9:87:d5:cc:60:a7:74:3f:fa:
67:e8:7d:99:eb:f4:08:4b:2b:6f:99:a6:7e:4e:57:
2b:a0:f6:73:ef:32:da:6c:19:5c:fc:4e:00:91:11:
90:88:13:90:44:b5:c1:9d:9a:4b:4b:94:bb:16:a4:
df:23:9b:e5:74:68:8f:5a:80:2f:ac:47:e6:ea:8d:
f3:70:f4:1b:c6:75:50:47:24:b9:c1:d7:cf:fe:0b:
c6:84:df:f0:ae:a1:a4:90:94:ef:e0:85:0c:1c:15:
43:80:a6:28:06:90:b0:1f:df:75:ae:ee:c0:f0:82:
bb:db:9b:d9:59:d4:42:96:55:f0:af:c1:87:f8:92:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B5:E3:63:38:6A:92:62:46:3B:44:2E:54:9A:6E:50:DC:A6:D7:D9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i7XjYzhqkmJGO0QuVJpuUNym19k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.103.0/24
Signature Algorithm: sha256WithRSAEncryption
66:30:4c:b2:e4:34:33:4b:54:34:3a:72:b7:9c:50:56:3e:70:
96:51:55:64:cc:d1:25:50:8d:6a:13:1d:31:c1:76:9e:fa:87:
05:e3:ee:01:37:1e:5c:bb:53:c6:1b:d8:1a:b9:e8:32:5c:05:
31:b1:31:59:24:46:21:c9:11:3d:8e:62:36:2a:08:c7:6c:7e:
f5:ba:5a:84:33:3e:35:c1:fb:aa:e7:24:66:2d:7d:ce:58:9a:
fa:d2:ef:04:6d:26:77:e7:85:64:d3:e5:78:8b:68:f8:e4:01:
b5:78:ff:1d:0c:cc:04:26:1e:21:3c:0a:b2:17:7b:87:74:d8:
f2:c9:5a:52:ce:e5:1b:dd:0d:7a:52:a1:25:8b:69:bf:39:ed:
c1:bf:36:24:ec:8f:6a:1f:92:19:38:75:67:cd:d4:55:75:81:
bf:5f:dc:80:d5:ba:74:62:ed:86:0a:41:cd:4b:ce:5c:b2:e0:
72:20:4f:17:47:1c:e5:7a:02:11:bd:96:a1:7e:ba:c5:d7:b5:
6f:2a:21:19:3b:58:0f:a1:31:2f:dc:a9:d7:5c:b0:8c:8b:93:
4e:fb:f2:20:66:f3:b1:3e:6f:aa:ca:fe:59:b0:c4:8c:de:d2:
55:3e:4e:30:5f:72:2b:6d:e1:0a:ba:6f:9c:73:96:3c:98:5f:
ab:4f:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:07:33 2025 by rpki-client