Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa
File: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (raw, json)
Hash identifier: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=
Subject key identifier: 5F:33:27:C7:74:3A:95:75:79:04:50:B7:52:59:DE:6B:72:20:00:B1
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 0194258EFEE36FC5C60C607DE64EB3DA6281
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206579
IP address blocks: 185.172.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fe:e3:6f:c5:c6:0c:60:7d:e6:4e:b3:da:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f3327c7743a9575790450b75259de6b722000b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:a7:b4:bc:76:2a:0a:e5:db:dd:56:83:2f:
66:ef:cb:55:3a:7b:55:78:26:a6:4a:6f:d6:0a:34:
55:a0:c5:9e:57:da:21:60:c1:90:ba:f1:d7:c4:33:
ab:72:4a:eb:97:31:3f:a0:45:c5:4c:05:89:6d:55:
57:a2:d3:87:01:af:fc:91:f7:42:53:2a:82:1a:10:
95:95:4e:7e:97:0e:47:8d:27:5f:a6:df:f0:71:32:
37:58:8b:23:90:50:43:0b:dd:41:4f:52:3e:62:92:
a9:e5:b3:e3:83:7b:71:08:e8:91:43:26:bd:6f:95:
01:f7:64:6a:18:7f:f0:c9:3e:68:92:b1:ae:c2:ab:
1a:62:af:3f:9b:5d:1e:4b:05:63:13:ea:e3:51:59:
a5:2b:89:96:d7:2d:5a:41:30:8a:96:7f:31:c6:52:
af:df:19:c1:4d:09:1a:5b:34:2f:a3:b7:27:9d:96:
74:e9:60:7c:d2:97:3e:92:c5:2e:64:5e:51:95:79:
5d:3a:8f:8b:d8:12:f4:84:fa:e9:6c:93:6c:d8:1e:
17:f2:ff:12:3b:dd:e0:c9:5b:00:69:a6:0f:05:fa:
83:7a:1e:41:75:16:eb:5a:36:09:8a:55:15:ef:95:
08:eb:1f:4d:b6:0d:5b:48:e5:ec:2f:da:0b:20:af:
fc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:33:27:C7:74:3A:95:75:79:04:50:B7:52:59:DE:6B:72:20:00:B1
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.208.0/22
Signature Algorithm: sha256WithRSAEncryption
58:94:cc:50:d5:ad:9c:82:d7:23:18:50:57:0b:e9:5a:52:6c:
60:e9:40:b9:a7:5a:45:55:40:06:a2:03:7b:61:42:7a:85:4f:
22:ae:2e:df:94:dc:af:8f:21:b5:1d:c7:bf:bf:df:76:34:d7:
38:e3:ae:ac:71:3d:01:87:c9:3d:28:be:12:2a:43:b0:87:4c:
87:ba:5b:04:ea:ef:83:86:f9:d2:37:33:e6:22:89:a4:b6:43:
3e:a7:92:52:b0:c0:da:2c:5f:e3:63:69:42:f9:3b:25:36:92:
a7:62:8b:62:f3:81:3d:f1:01:8b:6d:8e:76:b3:ff:4b:24:dc:
23:86:04:95:9d:9d:10:6b:14:5d:a1:d8:ad:f7:d1:8c:3f:9e:
1c:4b:61:87:7d:c0:49:47:7f:28:53:b1:52:ec:96:36:ce:9c:
40:ad:bc:8d:b1:cd:a5:32:a8:24:33:45:ee:6b:ba:94:36:76:
a8:b0:75:5f:16:f7:19:d7:6d:51:d8:89:6d:5b:4c:d0:84:cd:
ef:dd:c0:20:d5:a3:8d:a5:0b:d9:c7:a3:9c:ed:77:df:81:84:
4e:d4:b1:c7:b0:0c:78:93:65:b7:ca:18:41:71:ca:01:e4:6c:
79:59:31:dd:af:29:e3:b5:61:a9:49:fb:90:0f:df:2c:b8:b6:
10:8c:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:10:55 2025 by rpki-client