Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pIYxwtb-QUY6DPHk6OhNGrZcpT4.roa
File: pIYxwtb-QUY6DPHk6OhNGrZcpT4.roa (raw, json)
Hash identifier: VS2l2Kz1l1BCDvD3sVfPf8+qZ8+HUiVDdA+dLppI8Ao=
Subject key identifier: A4:86:31:C2:D6:FE:41:46:3A:0C:F1:E4:E8:E8:4D:1A:B6:5C:A5:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194D1200F4FF43E218FBE2E55D8D8710C5C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pIYxwtb-QUY6DPHk6OhNGrZcpT4.roa
Signing time: Tue 04 Feb 2025 13:22:06 +0000
ROA not before: Tue 04 Feb 2025 13:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 185.223.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:20:0f:4f:f4:3e:21:8f:be:2e:55:d8:d8:71:0c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 4 13:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a48631c2d6fe41463a0cf1e4e8e84d1ab65ca53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:d1:c8:93:c5:4c:69:a8:70:c4:65:c1:32:
a8:de:d5:74:bc:a3:3f:33:9e:ce:49:ed:7a:ba:7f:
d5:0e:8a:cc:b7:ae:32:f2:85:c8:2d:29:ea:71:22:
19:be:2e:70:8b:2f:34:67:c6:f1:af:20:6e:bb:75:
1b:77:1d:6f:bc:bd:7d:30:91:d2:e8:93:3c:42:b0:
28:23:a0:07:2a:e0:7b:9b:7f:95:58:6f:45:79:0f:
d5:5d:9b:c4:e3:fc:21:0c:67:bb:55:e9:ec:6c:82:
87:9f:a6:e1:b2:3c:22:a1:68:db:f2:06:9c:0b:a5:
b9:37:f9:ef:3c:8b:65:ab:de:2d:22:d8:ee:bd:e7:
d0:a3:e6:cd:80:f3:37:e2:49:24:d6:e3:b9:9b:3e:
9a:91:f0:86:34:4a:ff:85:81:65:d2:cd:d6:ea:06:
66:3c:d2:c0:86:fe:d1:4d:aa:0a:aa:76:72:bd:59:
39:af:18:7e:78:de:0e:b8:6a:54:49:4f:6e:8f:d0:
4e:0b:a7:34:08:9b:14:77:3a:9e:46:b0:e7:7d:18:
a0:72:8b:f6:cb:57:63:26:fc:ee:06:e4:ff:e9:7d:
89:2a:b2:d4:c1:54:c2:a8:e5:8c:1f:a7:9d:cb:43:
aa:76:9d:23:60:d5:92:0a:13:36:8f:ad:13:86:9b:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:31:C2:D6:FE:41:46:3A:0C:F1:E4:E8:E8:4D:1A:B6:5C:A5:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pIYxwtb-QUY6DPHk6OhNGrZcpT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:99:e4:0d:99:0d:3d:05:0c:01:86:db:5c:04:46:ed:a6:57:
52:6f:06:b9:a5:57:be:44:1d:a1:e0:01:87:90:c5:0b:3f:76:
50:c0:49:a0:8a:c7:52:12:00:72:40:55:ae:2b:f6:07:c3:e0:
29:23:cb:8a:36:2a:20:69:04:1a:7d:d5:11:57:a8:2a:bb:05:
5a:1e:e3:fc:43:b8:c4:3c:33:d5:2a:fc:90:59:f7:7a:91:a8:
44:c2:1f:a3:c2:26:87:64:51:e0:16:8d:77:33:a1:89:8d:58:
2e:2f:4b:91:d7:fd:ad:fb:e5:ed:be:b7:2c:42:f6:75:08:43:
7b:7d:f6:01:4a:ed:ea:dd:f0:b7:bb:92:97:0b:8f:aa:df:cb:
f7:c5:a1:07:86:6a:01:51:6d:c7:a9:5a:d7:07:4e:1c:47:77:
c3:cb:18:08:12:44:92:ae:ae:6e:73:50:d6:49:16:b7:e7:23:
88:f6:94:9b:d2:a4:6f:29:5f:02:8e:6e:80:f8:a6:01:94:49:
d9:0e:0a:82:9f:6b:83:12:c6:ba:6d:46:c1:f8:7e:a0:43:78:
2a:e5:ea:93:ed:14:dc:30:1a:0e:71:b7:72:d6:91:03:cd:2c:
0d:ea:f2:d2:66:15:a3:6a:14:7c:0f:2b:50:84:ce:53:2d:b1:
28:6e:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:21 2025 by rpki-client