Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j85dqwsVPz2aEmjC5_VH3na9-ug.roa
File: j85dqwsVPz2aEmjC5_VH3na9-ug.roa (raw, json)
Hash identifier: mFdLbUWH9OnMJq2kN03tZ+aGbZdOgwHDTl0MxLdI+cc=
Subject key identifier: 8F:CE:5D:AB:0B:15:3F:3D:9A:12:68:C2:E7:F5:47:DE:76:BD:FA:E8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0195280BE53FACC8704E0735A9C8339E24A7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j85dqwsVPz2aEmjC5_VH3na9-ug.roa
Signing time: Fri 21 Feb 2025 10:27:02 +0000
ROA not before: Fri 21 Feb 2025 10:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215015
IP address blocks: 185.223.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:0b:e5:3f:ac:c8:70:4e:07:35:a9:c8:33:9e:24:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 21 10:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fce5dab0b153f3d9a1268c2e7f547de76bdfae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:f4:c0:b8:59:7c:8f:cb:c1:2c:6f:22:4b:
17:c5:d4:45:80:d2:08:fe:6d:a2:9a:fb:71:ce:87:
cf:28:8b:9e:8e:87:f0:22:55:3f:f8:c5:d8:1e:d3:
28:64:e7:33:b7:cb:29:42:18:4e:bd:85:11:bf:71:
a9:00:b6:ed:fa:5d:0d:e4:91:23:ba:08:c4:39:7e:
9d:fd:81:9a:f5:07:18:d4:73:52:45:6f:0a:ec:35:
da:c8:14:38:74:45:3d:6b:6e:b0:a1:aa:43:95:81:
17:08:4c:9d:33:a6:84:c6:94:a6:5c:5a:2f:f1:32:
cb:64:41:41:c2:ff:11:a9:88:02:60:83:c7:93:37:
27:0b:3a:59:0e:22:5b:64:26:50:bb:db:97:ea:55:
47:24:4e:61:e0:23:5e:f4:97:a9:c0:c2:6f:71:8c:
04:8c:d5:58:1e:95:28:78:3b:b0:3a:7f:0b:83:eb:
ff:5e:4d:37:dd:97:21:0c:a5:56:c6:4f:c7:a7:ec:
80:96:33:a6:3b:7c:ba:26:ef:72:91:4b:91:fa:a8:
a8:c8:42:fc:db:f4:f1:c8:ba:a2:9a:15:1e:23:c7:
50:38:87:a5:16:dc:f2:76:4c:5e:50:5a:3d:1d:6c:
91:17:a0:18:eb:80:9a:d6:9c:10:0d:1f:b1:09:ef:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CE:5D:AB:0B:15:3F:3D:9A:12:68:C2:E7:F5:47:DE:76:BD:FA:E8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j85dqwsVPz2aEmjC5_VH3na9-ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:29:8b:17:4f:23:4c:45:70:3c:a5:a2:d6:59:50:ea:c4:99:
ce:16:49:4c:a5:2d:c3:f9:74:18:53:4f:2f:a1:9c:8f:39:8c:
44:88:6d:ca:9a:83:09:7b:0d:ad:06:b5:3d:46:bc:41:7d:0b:
d1:52:04:5a:23:66:9d:f8:77:b5:1d:e6:e1:d4:95:04:8a:bc:
4c:07:75:9e:55:47:ee:1b:a8:78:f8:9f:7d:66:ab:57:15:ed:
70:ad:98:f1:32:54:a3:d5:a9:e0:d5:6f:7f:50:f8:37:d5:c6:
bc:a7:3f:e5:4c:ad:f6:4f:f4:3c:ae:96:b0:d5:af:57:e1:31:
10:c4:55:91:76:be:c8:f2:43:59:1f:64:ba:2f:b1:96:bb:95:
8b:36:1b:32:7b:5f:c9:95:db:92:3d:49:d1:8e:ed:42:77:0b:
1b:f1:da:12:ca:77:c2:94:db:e3:aa:54:35:c9:96:b3:30:f9:
fd:41:fe:c7:5c:f4:dd:98:12:f8:84:07:81:7d:6a:cf:93:fe:
d4:a3:8e:0b:63:e9:92:0e:14:b7:81:e3:9a:da:00:00:49:62:
22:69:07:b9:78:6e:bc:e6:1d:43:ea:0a:30:d8:d3:96:bf:cc:
9e:fb:ad:07:a4:cc:36:43:d1:cd:3a:1e:f6:8d:30:a8:45:97:
bd:ab:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:33 2025 by rpki-client