Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/0QXy7IDDCinrVTjudZKAfgXRt3U.roa
File: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (raw, json)
Hash identifier: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=
Subject key identifier: D1:05:F2:EC:80:C3:0A:29:EB:55:38:EE:75:92:80:7E:05:D1:B7:75
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 0194266BBCD76466D0E95E97124FFAF07235
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/0QXy7IDDCinrVTjudZKAfgXRt3U.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.214.82.0/24 maxlen: 24
185.214.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bc:d7:64:66:d0:e9:5e:97:12:4f:fa:f0:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d105f2ec80c30a29eb5538ee7592807e05d1b775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:65:9d:d1:d2:02:1b:d7:ec:d4:2a:1d:28:
1a:fd:57:bf:f7:73:22:8a:bc:76:4f:d7:46:d4:16:
59:91:0f:08:1d:17:de:6c:24:dc:d1:a8:88:b1:56:
d8:17:d4:a1:79:c9:cd:00:61:0b:39:a7:3c:8a:6e:
48:d8:66:5f:51:73:f4:b8:7c:71:17:fa:f1:d7:91:
06:fe:22:ee:24:77:2a:43:14:f7:6d:c1:ad:dd:4f:
b2:12:63:a2:a1:4d:61:ef:f1:ab:18:79:82:c1:03:
2e:9c:26:cf:63:4e:bc:33:38:ec:44:24:ee:b9:aa:
b6:80:42:c0:a8:04:56:e1:57:de:9f:26:9d:81:e8:
2a:0a:12:75:56:b2:a4:54:e9:95:c0:08:04:87:66:
d7:87:2e:df:db:80:57:10:2c:e3:ea:06:d8:bc:61:
76:ef:6f:2e:90:72:ae:4f:02:b6:9e:7a:d8:39:07:
3c:9f:fe:55:66:9d:9c:ad:61:a2:80:d5:a1:ec:99:
bc:b5:99:11:d0:ba:24:ad:5f:b9:0d:fc:d5:88:ef:
5d:f6:9f:67:9a:72:74:13:c2:d1:b5:c5:f0:06:74:
b3:3b:2a:23:85:61:76:3b:eb:aa:e2:2a:ff:75:37:
aa:60:e9:cf:b0:9a:bf:5f:48:00:a8:b3:27:7b:5c:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:05:F2:EC:80:C3:0A:29:EB:55:38:EE:75:92:80:7E:05:D1:B7:75
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/0QXy7IDDCinrVTjudZKAfgXRt3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.82.0/23
Signature Algorithm: sha256WithRSAEncryption
38:41:d2:5d:b5:c8:ca:50:eb:af:4c:93:64:5d:56:ab:6a:02:
80:20:10:d8:ee:5d:f8:ab:e9:be:c0:79:fe:52:ed:e5:1f:b8:
a2:06:77:80:d3:a5:9e:18:1a:f3:62:17:0f:84:ac:ca:4b:ad:
3f:e3:a9:18:61:a0:e4:24:10:e4:4e:e1:d0:95:36:0b:60:b0:
cf:d8:fc:5e:d0:bc:0b:06:99:6d:5b:ff:87:7f:d1:e0:3e:21:
8b:b0:41:32:d4:36:45:1c:8d:77:a3:07:e2:58:27:4b:10:fd:
ee:ab:f7:a1:53:8f:06:ff:a6:17:91:34:c1:c5:31:26:25:a5:
8e:5c:28:00:5f:57:89:65:34:10:b3:7d:03:a1:49:5c:89:85:
43:51:2d:5d:53:37:06:8b:dc:d2:07:23:b7:8a:2a:3e:39:d0:
10:52:8e:bc:e4:2a:c4:1c:31:47:10:5d:d2:b2:75:1c:73:3b:
1e:e5:99:b4:13:19:48:f1:a6:6b:8f:ce:5f:63:61:51:28:6c:
a0:de:53:ae:31:a9:c6:b8:52:ac:99:d9:46:9b:98:83:e1:7f:
36:28:94:a4:c9:2e:94:2e:6b:73:d8:2d:b1:ab:53:c1:83:79:
e2:88:cd:da:c9:4b:82:e1:de:66:f9:80:a0:2f:d9:6d:55:2f:
0d:c5:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:18 2025 by rpki-client