Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/7GvnjZkaTKYt_jckJ7QhvvmShKo.roa
File: 7GvnjZkaTKYt_jckJ7QhvvmShKo.roa (raw, json)
Hash identifier: Sepxt1DXw0QW0zxLs0S82T6rnD6/x7cfYfZk5B6/niA=
Subject key identifier: EC:6B:E7:8D:99:1A:4C:A6:2D:FE:37:24:27:B4:21:BE:F9:92:84:AA
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 0370FF8E
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/7GvnjZkaTKYt_jckJ7QhvvmShKo.roa
Signing time: Sat 01 Jan 2022 14:05:27 +0000
ROA not before: Sat 01 Jan 2022 14:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.117.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57737102 (0x370ff8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Jan 1 14:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec6be78d991a4ca62dfe372427b421bef99284aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:ab:e2:26:b2:8b:b9:a9:a3:76:0a:d5:27:
84:43:b1:3c:d7:b0:92:3d:00:24:aa:e6:52:13:59:
00:ce:73:6c:00:89:0c:66:34:f0:d5:f4:85:e6:68:
c9:07:64:16:d1:8e:54:04:e4:e0:69:61:e6:12:ef:
ad:44:26:ca:ef:96:db:8a:b6:82:ed:c4:e3:74:e4:
e9:73:2d:f7:d0:94:bc:b2:67:25:78:17:71:bd:19:
50:b8:08:c9:ba:bb:9c:e9:98:9f:13:a8:73:1c:7d:
dc:eb:19:1b:51:9c:f8:bd:f6:19:b2:4f:9d:2d:05:
c0:d3:b2:ff:ae:b7:36:92:28:77:54:d1:1c:ad:e2:
30:e6:4e:76:58:ad:b3:d6:8e:1b:4e:bf:02:57:8f:
01:f8:9e:cd:e1:e0:5d:5b:58:90:38:8b:ab:c3:3a:
8e:be:50:56:be:a5:da:5a:ed:4f:98:8f:67:3a:c6:
73:ca:90:c6:84:11:55:1b:ed:68:af:bd:b8:48:ad:
e1:8e:be:bd:4c:ce:a1:ea:7d:b5:af:94:0f:6b:f4:
82:10:5c:4b:ee:2b:e1:1c:5c:5b:c1:80:e1:4c:91:
ef:c0:e8:f5:f3:c0:b5:e0:83:47:3e:42:b1:67:d8:
91:68:67:7b:6a:37:ad:0b:a6:e3:07:1e:08:49:49:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:E7:8D:99:1A:4C:A6:2D:FE:37:24:27:B4:21:BE:F9:92:84:AA
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/7GvnjZkaTKYt_jckJ7QhvvmShKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:07:c9:51:2a:f2:92:0e:eb:6d:1d:a0:44:6f:c9:07:35:d9:
fd:97:34:c6:86:03:e8:15:df:99:e7:32:01:cb:c6:55:43:ef:
47:80:95:23:15:19:e6:49:6b:f1:bd:c8:e0:fe:48:a5:de:4c:
b5:a1:e6:cb:66:67:f2:e1:97:db:a5:0c:91:de:c1:2b:04:9c:
a6:af:5a:7a:75:07:59:9a:90:2c:7f:07:f2:e3:c0:90:4a:c3:
73:d6:22:d8:0c:05:54:ff:43:29:eb:09:6d:f9:f6:d9:77:22:
65:96:25:56:82:06:08:f4:a6:bc:49:33:21:74:df:e5:f0:5f:
6f:51:b1:6b:c0:29:f2:ec:34:4f:f0:0b:fa:76:75:4c:53:c7:
60:16:df:a8:a2:e1:71:e9:a7:a9:b9:7a:d0:01:82:b9:dd:dd:
ac:2b:9b:d8:b4:f8:5a:57:cb:dd:50:bf:7c:29:2e:27:fc:ea:
fb:88:92:3b:80:54:62:14:a6:d2:e5:52:f2:ae:60:a0:04:aa:
95:a5:9b:e3:23:88:d5:5c:89:c7:2e:66:a6:a3:5f:e1:3e:f9:
16:e4:65:df:5d:1e:e0:53:49:6d:6c:61:28:7a:b3:a7:58:32:
62:b0:55:33:71:2b:be:ad:aa:6b:d7:f6:16:68:6f:95:43:f6:
10:18:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:20 2025 by rpki-client