Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/ATNXl5sMuCCQNc30c9l_cm0TcNw.roa
File: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (raw, json)
Hash identifier: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=
Subject key identifier: 01:33:57:97:9B:0C:B8:20:90:35:CD:F4:73:D9:7F:72:6D:13:70:DC
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA68E63B87AF2A370F383B309762B
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/ATNXl5sMuCCQNc30c9l_cm0TcNw.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204504
IP address blocks: 185.227.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a6:8e:63:b8:7a:f2:a3:70:f3:83:b3:09:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=013357979b0cb8209035cdf473d97f726d1370dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:68:5d:75:05:d1:7b:57:c1:b6:89:cf:fd:
66:63:4c:68:e4:83:41:05:ee:15:dd:48:61:83:5c:
ab:72:ad:3a:6f:80:73:33:3e:df:df:3a:90:a0:ec:
ca:73:82:c6:57:3e:f7:3c:0b:df:0b:0d:f0:61:e0:
17:5e:0b:9c:b5:63:6d:b9:76:78:2d:1f:f3:be:ae:
61:8f:7c:66:97:86:63:90:6e:33:c8:b8:7a:1b:9e:
f6:28:ec:9c:f3:60:71:1e:65:93:ef:01:90:9c:d6:
03:d5:80:80:46:7b:20:9a:30:f6:23:dd:ee:27:b7:
3f:b5:2c:92:98:fe:45:57:fc:4a:03:c9:bf:5b:1d:
5e:99:cb:84:e8:70:19:b8:d9:5d:c6:98:eb:8d:f7:
82:2f:85:b1:92:db:4e:32:91:31:97:4c:2b:bc:97:
88:38:9c:f8:45:e4:8d:88:06:7e:e7:a2:a8:b1:04:
f9:43:23:82:b4:a6:7f:ca:a7:46:3b:fd:7b:b9:d2:
26:42:c2:65:f1:71:a1:85:cb:15:d1:17:5b:d7:4d:
21:fe:84:cd:67:34:67:15:c4:f3:56:33:9d:cf:45:
ad:38:86:2d:60:f3:83:c3:89:12:2a:16:3c:fb:76:
14:36:df:76:2b:61:b9:61:b1:43:66:5e:64:a3:01:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:33:57:97:9B:0C:B8:20:90:35:CD:F4:73:D9:7F:72:6D:13:70:DC
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/ATNXl5sMuCCQNc30c9l_cm0TcNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.244.0/22
Signature Algorithm: sha256WithRSAEncryption
42:13:b8:3d:bb:5b:81:a4:ac:eb:60:be:8c:38:ad:2f:1e:5d:
0f:02:0a:29:34:03:86:36:32:bd:c2:69:73:86:d6:d8:b5:1f:
3a:af:ae:50:cd:32:c9:b1:00:8f:1b:6e:ac:97:44:52:d7:48:
2e:22:dd:41:b6:df:76:78:74:3c:31:b9:c6:93:83:c1:6a:b0:
e9:d7:0b:d0:bc:30:e9:af:91:93:74:22:a4:67:24:61:db:0f:
0b:c9:eb:8c:5a:d6:17:c9:68:03:98:a6:34:98:47:e7:a4:98:
7c:2d:7c:7a:f5:ee:b9:4d:06:d2:1e:6a:17:f6:8e:6f:bf:6e:
70:b2:15:4a:ab:87:fb:8f:30:3e:a5:33:cd:2d:14:5d:77:6c:
23:4e:fd:64:34:ef:06:94:bf:21:5e:f8:46:d1:c6:a0:d0:30:
37:bf:83:18:6c:3e:d8:a8:d2:24:41:ea:26:01:6b:25:c2:e8:
89:af:aa:10:8b:c4:f4:5a:3d:ad:ee:f4:84:5c:d5:27:15:7a:
60:8c:9d:04:0d:5c:0c:5e:19:8d:22:13:10:80:d4:d4:85:dd:
43:4c:07:e6:fc:57:30:0d:76:49:71:06:8c:10:eb:c0:bd:62:
a7:d1:3b:83:e7:99:4a:2b:76:3b:06:14:e3:63:23:fc:9e:b2:
6a:01:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:09:08 2025 by rpki-client