Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/O18QSHw6CDfmNha-p8Ha92I2hcA.roa
File: O18QSHw6CDfmNha-p8Ha92I2hcA.roa (raw, json)
Hash identifier: mUvTI/aZRnlvPyh0xogPgc6SUYKEjBmReTAcIbEgnSI=
Subject key identifier: 3B:5F:10:48:7C:3A:08:37:E6:36:16:BE:A7:C1:DA:F7:62:36:85:C0
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A3A7E3900DCF5194A3ACF0672005D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/O18QSHw6CDfmNha-p8Ha92I2hcA.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39018
IP address blocks: 185.119.253.0/24 maxlen: 32
185.177.81.0/24 maxlen: 32
185.182.50.0/24 maxlen: 32
185.193.38.0/24 maxlen: 32
185.236.82.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3a:7e:39:00:dc:f5:19:4a:3a:cf:06:72:00:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5f10487c3a0837e63616bea7c1daf7623685c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:38:e4:ec:69:d6:54:f6:7a:28:12:46:53:
23:83:a8:ab:66:24:4a:9e:3d:94:b9:21:0e:49:ad:
35:34:e7:6c:5b:87:76:fa:98:88:57:b9:70:9e:8e:
61:44:38:ca:be:8c:b7:db:d5:cb:b2:98:22:36:f6:
2c:f0:e0:8c:ff:50:49:12:ea:6f:33:a3:af:09:c7:
78:4e:8d:bf:b4:7f:47:b1:25:f3:3a:38:37:ac:a1:
5f:17:2f:b1:ad:1a:a8:d0:1e:41:cf:02:75:68:78:
58:c4:4b:3b:ad:77:0d:0e:b4:ab:1d:19:c5:bd:47:
2a:50:4b:cd:6c:49:46:51:7d:89:66:1f:a6:4d:58:
5d:68:16:f0:ad:a0:37:0e:2b:69:d2:d9:c9:85:dc:
8f:d3:f4:48:c2:b2:d8:66:39:c6:3c:50:91:0e:80:
3f:df:e5:ed:02:5f:79:8c:c0:fe:95:7b:e7:a0:28:
75:15:ff:1d:e2:86:08:6a:0a:2a:4b:0a:6a:44:e2:
60:04:ee:1e:ff:3c:bb:0e:7c:c7:fc:84:3d:09:ff:
20:05:d1:89:0d:fe:1c:1e:92:e4:14:d7:42:cf:43:
5a:23:ef:71:dc:76:a3:2b:1a:02:c5:da:3a:3b:e4:
c2:70:f0:28:3b:f9:2d:6f:a8:fa:50:37:80:ed:1f:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:10:48:7C:3A:08:37:E6:36:16:BE:A7:C1:DA:F7:62:36:85:C0
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/O18QSHw6CDfmNha-p8Ha92I2hcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.253.0/24
185.177.81.0/24
185.182.50.0/24
185.193.38.0/24
185.236.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:8e:a3:27:f2:1a:d2:66:ec:91:57:43:01:06:9a:4a:ae:66:
7a:68:9a:b7:55:11:fb:98:d8:d2:56:90:59:e3:6e:23:1f:e7:
73:7e:0a:d8:88:3d:b5:7a:a5:ae:a9:b4:f8:f7:6c:df:a6:7b:
4e:51:f6:10:b0:83:62:2e:12:b4:c0:17:2f:d7:a9:0a:6b:68:
0c:93:45:5b:8c:33:b6:be:62:8f:09:ac:99:bd:e6:f2:44:63:
11:b9:6e:57:36:8d:09:f4:16:68:88:3e:36:2f:d8:5e:fe:82:
ac:c9:d7:e5:07:23:7a:ef:08:79:d6:9e:b0:99:ca:db:05:b6:
ce:b4:81:31:fb:d5:2a:45:8e:33:14:c6:23:fe:79:99:4e:f4:
82:e1:85:00:9f:93:33:9e:1a:3b:f3:ba:96:02:e9:c0:7f:16:
5c:8f:78:82:eb:10:64:26:74:5a:85:06:ab:06:97:2f:a9:c2:
0b:db:1e:8b:64:6b:ab:9e:26:71:d7:3d:d5:6c:e0:19:6f:2b:
16:36:9e:86:79:af:7c:f4:ca:cf:74:a1:9b:02:8e:fb:2d:45:
78:a0:25:a2:1a:02:14:c3:fc:69:13:1c:34:55:44:1c:fa:9c:
d0:13:dd:14:a1:22:9a:9e:df:cd:a5:65:45:89:07:3e:e5:2f:
92:85:ed:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:58 2025 by rpki-client