Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/0Xf6-vilfia24A7NEN-1UNpf3TQ.roa
File: 0Xf6-vilfia24A7NEN-1UNpf3TQ.roa (raw, json)
Hash identifier: hlCPws79TRjoG/wJl4XIBqwLzlhcryMiUyk2ApIcBwY=
Subject key identifier: D1:77:FA:FA:F8:A5:7E:26:B6:E0:0E:CD:10:DF:B5:50:DA:5F:DD:34
Certificate issuer: /CN=09660852bd09ad2213da02bd15bbf1837695734c
Certificate serial: 01856FE7067DB287C91DC0FF1160B4B96F10
Authority key identifier: 09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/0Xf6-vilfia24A7NEN-1UNpf3TQ.roa
Signing time: Mon 02 Jan 2023 00:34:49 +0000
ROA not before: Mon 02 Jan 2023 00:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201446
IP address blocks: 185.23.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:06:7d:b2:87:c9:1d:c0:ff:11:60:b4:b9:6f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09660852bd09ad2213da02bd15bbf1837695734c
Validity
Not Before: Jan 2 00:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d177fafaf8a57e26b6e00ecd10dfb550da5fdd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:43:82:5d:89:a2:44:ee:99:00:aa:a3:dc:
0e:dc:8f:54:0e:a6:f6:cb:bb:f0:21:a9:17:db:8f:
99:b9:21:38:54:78:00:c2:1e:6a:5e:a0:0c:d0:b4:
47:8c:f7:38:b1:0a:73:3a:c2:bb:b8:27:ed:86:f3:
b1:2f:46:b4:3f:6b:b1:0b:1c:a8:96:13:1d:25:98:
79:79:e5:74:11:54:de:ae:76:f6:30:fc:1b:91:3b:
8a:cc:6a:88:22:a4:a9:42:17:a9:fa:9a:72:8e:98:
e9:65:80:dd:38:98:8f:15:0b:c1:f0:3c:01:41:9b:
b7:56:6a:24:de:5a:2d:c6:b7:fc:42:d1:38:a0:66:
a2:0f:fc:ce:ae:e6:f9:f6:8a:c1:6c:2a:87:fe:10:
e4:fa:9a:13:0c:b7:74:73:22:d3:7a:1c:8f:80:7a:
de:51:ea:32:a4:39:39:a8:6e:98:2a:21:80:f4:2f:
05:15:8d:a9:78:59:cf:1d:cd:03:eb:f5:1d:3f:00:
12:c4:ea:b3:f9:06:b4:04:e2:2f:77:0f:ed:b9:6e:
a4:94:c8:bf:3a:b8:20:dd:2d:67:1c:a1:eb:6c:44:
48:af:38:d3:cc:b7:15:06:18:e1:08:5d:d6:f8:80:
48:e2:92:b2:e3:85:72:9b:f8:f3:7f:f9:65:cb:4b:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:FA:FA:F8:A5:7E:26:B6:E0:0E:CD:10:DF:B5:50:DA:5F:DD:34
X509v3 Authority Key Identifier:
keyid:09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/0Xf6-vilfia24A7NEN-1UNpf3TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:09:4f:89:d3:55:d5:a9:6e:fa:c6:d0:d7:32:96:6b:d7:ea:
4d:7a:a9:bf:45:97:02:dc:a4:b4:cc:f2:07:de:a5:d1:19:68:
71:6a:8b:43:6b:52:0e:ab:86:7e:d4:76:5d:54:dc:08:5b:00:
cf:8d:6d:ab:93:49:71:d9:93:33:75:8c:0d:b1:44:77:c1:8d:
25:32:65:df:57:63:9b:46:69:ff:72:ca:ad:84:ae:7a:93:64:
37:24:25:3a:bd:c6:9c:d9:ab:d7:b4:fc:fb:a1:81:8b:9a:36:
0a:d0:95:aa:95:75:fd:45:c9:6c:13:12:92:6e:12:0b:8e:f0:
10:80:9f:e0:96:32:0a:9a:1d:fd:c6:8e:d8:f4:84:85:ae:24:
66:2f:5a:2a:de:05:fd:eb:b8:08:74:b8:94:a4:f8:1f:76:2c:
1d:ed:71:a2:76:d3:8b:12:e8:db:7f:f7:e8:f9:c0:cb:bd:19:
be:f0:9b:19:6e:7d:d3:4b:28:7d:13:be:e2:40:a1:f2:5a:46:
00:5d:b7:39:8d:67:4a:b1:72:af:6d:23:96:cc:56:cb:f1:c9:
28:1e:f4:f4:6d:e4:52:d3:26:34:d2:b1:e7:8f:9d:aa:54:a7:
1e:d5:2d:d5:9c:c6:b5:29:92:b2:10:65:d4:cc:e3:39:a2:c9:
98:b3:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:16 2025 by rpki-client