Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/dbjj9DTmvwYYLgzQuhe8mOlQQqE.roa
File: dbjj9DTmvwYYLgzQuhe8mOlQQqE.roa (raw, json)
Hash identifier: h1+6osQK5g9zq/k6UT2BsA/+4TTUQ857BT5et9zHnTM=
Subject key identifier: 75:B8:E3:F4:34:E6:BF:06:18:2E:0C:D0:BA:17:BC:98:E9:50:42:A1
Certificate issuer: /CN=123972ae729848b3995cef1a029b1c66da777e5f
Certificate serial: 018CC3B66EF72F678C7FD8FE83D78053D2B7
Authority key identifier: 12:39:72:AE:72:98:48:B3:99:5C:EF:1A:02:9B:1C:66:DA:77:7E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjlyrnKYSLOZXO8aApscZtp3fl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/dbjj9DTmvwYYLgzQuhe8mOlQQqE.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56851
IP address blocks: 176.105.232.0/24 maxlen: 24
185.91.72.0/24 maxlen: 24
185.91.75.0/24 maxlen: 24
185.91.73.0/24 maxlen: 24
185.91.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6e:f7:2f:67:8c:7f:d8:fe:83:d7:80:53:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123972ae729848b3995cef1a029b1c66da777e5f
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75b8e3f434e6bf06182e0cd0ba17bc98e95042a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:7c:8a:e2:68:b0:31:6f:13:a0:cf:7f:5d:
a7:71:84:05:69:6f:8c:2f:81:1f:0a:56:20:ea:b2:
43:4d:93:24:d9:ba:fe:b4:d3:ce:d7:88:c6:2c:4a:
f4:7e:3a:ba:3b:df:a0:73:12:70:12:6d:e4:03:71:
88:7e:5f:1e:62:07:83:55:de:50:ce:e8:a2:4d:af:
4b:7d:ea:17:ee:ea:39:c8:f0:d5:73:88:5f:9e:9c:
e4:55:7a:c5:7d:08:ba:a6:25:94:27:42:ba:74:2b:
9f:ee:da:8e:24:bb:fb:60:10:9c:b1:36:46:0b:68:
6d:96:03:7e:78:5e:75:c6:d8:e8:38:ed:92:fe:d6:
51:17:51:08:2a:18:e7:5f:8b:3d:7d:be:59:f0:99:
8e:78:76:d2:33:15:6b:02:b8:5c:09:7e:eb:08:97:
09:d4:30:ae:7f:69:f4:f4:c5:f3:07:3f:c9:ad:d2:
fc:55:bb:b5:eb:de:0d:3e:c9:0a:1c:a5:9f:b9:50:
8e:f3:95:d0:44:ee:4d:c8:ea:c8:40:d2:81:76:d6:
43:e5:66:e6:f0:9d:cc:a2:4b:94:7e:de:72:a9:25:
4f:3c:59:46:d9:0f:93:a0:73:68:62:46:dc:34:67:
99:05:4d:ab:e6:af:82:1b:46:b9:ce:de:55:42:28:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B8:E3:F4:34:E6:BF:06:18:2E:0C:D0:BA:17:BC:98:E9:50:42:A1
X509v3 Authority Key Identifier:
keyid:12:39:72:AE:72:98:48:B3:99:5C:EF:1A:02:9B:1C:66:DA:77:7E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjlyrnKYSLOZXO8aApscZtp3fl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/dbjj9DTmvwYYLgzQuhe8mOlQQqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/EjlyrnKYSLOZXO8aApscZtp3fl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.232.0/24
185.91.72.0/22
Signature Algorithm: sha256WithRSAEncryption
71:18:05:c2:84:f1:47:99:bd:76:59:6b:41:a5:18:7d:2a:16:
a2:93:40:aa:71:5f:f0:f3:22:ed:b7:78:d4:4b:ed:76:f9:2f:
0b:00:a1:af:8b:99:67:4c:c2:cb:a8:e9:f0:67:5e:60:32:5a:
dd:33:31:e5:61:bb:a0:fc:51:90:52:29:f4:9f:d1:a2:97:45:
64:e2:54:20:d4:99:86:dd:77:33:21:8f:36:ea:33:27:68:95:
6c:ca:aa:36:f9:5f:b9:c5:48:02:6b:f2:40:a2:0b:38:78:87:
0a:b1:50:c0:cd:6e:b5:70:ce:8e:44:a2:fe:a8:b6:ef:be:1f:
54:87:01:e6:0d:6c:56:bc:2b:dd:9c:d4:4a:f0:c1:b1:08:7a:
f9:96:54:36:df:e2:83:69:8e:b3:4f:96:dc:18:0f:dd:aa:2b:
17:4e:55:dd:1e:b6:d9:fc:f0:1f:69:cb:2e:c8:bf:12:1f:97:
23:be:f3:cd:5d:5d:94:0f:d1:5d:2a:e1:06:ca:58:b9:34:5c:
a0:13:f4:a7:0f:48:cc:87:bc:58:54:3e:48:50:9b:73:89:33:
d6:1d:6d:bd:ac:17:61:1a:5a:b7:4c:44:f0:a6:57:94:ab:8b:
6f:ef:14:c2:d8:97:b7:4b:42:9f:b4:9d:6a:11:b9:00:1f:66:
96:e9:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:04:45 2025 by rpki-client