Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa
File: rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa (raw, json)
Hash identifier: b1uXDovLrtEkVyA+DIE0O5ACHvWcfbWlFzT0S+Ih5Jw=
Subject key identifier: AC:AF:C2:B3:B0:F3:EA:25:17:FC:CA:0A:0F:E5:E8:72:77:E8:D5:1E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 01942520A0EEF25245F5E3D82B6703DBB961
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa
Signing time: Thu 02 Jan 2025 03:48:02 +0000
ROA not before: Thu 02 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 185.218.120.0/24 maxlen: 24
185.218.121.0/24 maxlen: 24
185.218.122.0/24 maxlen: 24
185.218.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a0:ee:f2:52:45:f5:e3:d8:2b:67:03:db:b9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Jan 2 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acafc2b3b0f3ea2517fcca0a0fe5e87277e8d51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:39:c7:b6:e3:55:e8:fb:a9:40:1a:86:6b:e1:
f9:68:62:6c:6a:22:dd:72:30:24:32:eb:18:23:74:
42:38:1b:b7:8f:55:cb:40:00:a3:53:09:00:61:a2:
e7:e1:d4:25:00:f8:c2:bd:8a:88:04:e4:f8:f5:fe:
5b:de:c1:99:cd:70:4f:55:3c:51:2e:bd:21:21:0a:
ae:dd:43:de:5e:27:0c:d0:d6:e2:7a:21:c9:af:ec:
c4:fa:a6:4f:c1:a2:08:1d:88:a9:d5:b2:65:9b:e3:
3d:e6:1b:7b:08:c2:12:0b:be:df:44:8c:fa:b6:15:
33:fe:11:3f:23:7a:fd:91:c2:e9:c2:a5:41:03:45:
92:00:ec:bf:04:5c:fc:96:68:bf:00:27:85:6c:63:
04:af:8e:c2:a8:eb:26:66:80:1b:be:75:b9:b7:f6:
f8:1c:11:ec:51:0f:22:7d:7f:d0:72:c1:71:df:1d:
89:d3:f7:49:47:37:56:e8:b6:55:74:c2:e3:7d:69:
6f:d0:37:62:0a:de:4c:eb:17:76:f2:e8:72:57:fa:
f0:bc:fa:97:88:29:2b:78:2b:19:e2:8d:94:8e:d9:
eb:b9:50:d3:cb:eb:69:c0:e9:16:8d:99:20:dd:0d:
25:4c:7f:85:07:37:c7:49:86:c3:f1:86:e9:82:1e:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AF:C2:B3:B0:F3:EA:25:17:FC:CA:0A:0F:E5:E8:72:77:E8:D5:1E
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:a3:d8:85:10:11:6f:f2:52:b3:1c:09:0e:fc:a2:e0:9c:8b:
1f:c4:65:f6:96:d4:35:9d:b5:30:23:29:e1:70:98:11:46:74:
eb:45:1c:20:49:a9:b2:2b:ae:25:56:12:f7:ac:12:5c:37:5c:
82:c7:bd:aa:f0:af:f1:ac:13:67:cf:90:61:f1:62:71:11:26:
1c:3e:0d:1a:98:83:e6:58:60:be:06:a3:ef:b6:19:1c:9a:61:
83:9e:cc:85:5d:71:e3:c3:bb:b0:93:79:61:f4:93:ad:15:e2:
66:6b:a7:b4:68:5a:c5:03:bf:12:66:27:a5:66:2f:a5:0e:b2:
a6:c9:6d:42:9c:d5:d5:8e:bb:65:01:75:da:34:61:6b:ec:2f:
8c:19:5b:2b:aa:1c:5f:89:96:43:4d:40:f2:26:fe:b2:e4:81:
c6:bd:86:6c:e1:8f:f9:a3:97:7b:b5:3e:bc:df:fa:5e:56:d4:
e8:f9:51:d4:be:d3:ae:1a:04:aa:92:8b:64:a3:47:02:5c:86:
6f:26:2a:42:c5:01:75:15:5a:bf:1f:50:ca:98:de:d4:c3:57:
28:b8:14:d8:fb:c9:c4:a7:c2:39:c9:af:0f:44:e4:a0:be:3b:
fb:62:34:14:e4:8d:2c:18:57:9c:ac:f3:67:01:b6:dd:66:76:
fc:7c:60:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:42 2025 by rpki-client