Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/O1oreHXoGfE0x_DduepnzXbv1jQ.roa
File: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (raw, json)
Hash identifier: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=
Subject key identifier: 3B:5A:2B:78:75:E8:19:F1:34:C7:F0:DD:B9:EA:67:CD:76:EF:D6:34
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 019420684A1A1D8C67DD3D3FA8331F7977D1
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/O1oreHXoGfE0x_DduepnzXbv1jQ.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200428
IP address blocks: 185.107.188.0/22 maxlen: 22
2a06:4540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4a:1a:1d:8c:67:dd:3d:3f:a8:33:1f:79:77:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5a2b7875e819f134c7f0ddb9ea67cd76efd634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:e2:ba:80:80:ea:69:e9:8b:6b:03:f5:81:
4c:f1:02:fe:31:74:7d:1d:c5:13:db:35:66:35:2f:
13:8e:45:02:72:0a:73:93:69:52:a8:70:f8:dd:a5:
2a:f7:f6:4b:62:a8:d4:4a:7e:f7:e0:9e:bb:5a:41:
58:9b:fb:32:fd:71:5d:38:4c:a1:37:53:56:cc:68:
d6:ca:92:ad:f1:ec:d5:ec:82:4b:01:56:56:30:6c:
e8:ab:26:59:d0:4d:04:9a:0e:15:31:7a:ac:9e:75:
12:d9:80:a9:00:df:eb:64:59:00:5f:76:7c:50:76:
1a:50:ea:2e:0a:c5:76:4b:07:53:fc:6b:ff:36:8f:
d6:e0:c7:10:e2:8b:1d:a3:ad:8a:f6:cb:bf:e4:87:
38:45:5c:e1:33:46:5f:3b:fa:00:c9:f5:21:f9:d8:
51:66:80:34:e0:dd:c7:62:85:46:bd:ba:95:1e:de:
2a:ca:99:1d:79:47:fa:4b:c2:7d:04:22:57:be:3b:
20:99:0a:0f:6d:2c:58:a7:ec:29:3a:9e:a0:ac:88:
78:08:6f:db:99:72:ba:18:eb:59:bc:43:b8:09:63:
e5:d1:10:d0:ad:51:cd:f0:58:b4:66:5d:b8:e9:d2:
f6:81:e9:c1:61:a0:85:1d:41:25:6d:32:42:ca:66:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5A:2B:78:75:E8:19:F1:34:C7:F0:DD:B9:EA:67:CD:76:EF:D6:34
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/O1oreHXoGfE0x_DduepnzXbv1jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.188.0/22
IPv6:
2a06:4540::/29
Signature Algorithm: sha256WithRSAEncryption
6d:05:9b:1b:00:2a:e0:07:9d:ad:2f:fa:d9:d0:c0:b5:d9:e5:
bb:7c:cb:0d:fc:7c:2c:1a:de:85:50:05:b7:34:3c:73:bc:78:
32:5b:89:1e:d8:79:77:8f:32:b1:b5:7c:9e:ac:5a:56:d5:e9:
46:e2:e6:cd:4b:e0:96:3e:c0:b7:0f:6b:38:a8:41:7f:6a:0a:
cd:fe:50:f6:9d:31:4d:53:b0:19:a8:c3:6c:9a:7b:2d:36:af:
07:c6:e5:80:a1:32:ba:b2:29:6b:bb:e7:bf:b4:6f:d1:a6:16:
d0:c9:96:40:2e:c2:ab:ac:27:b4:5b:95:a3:ba:08:24:1f:1b:
a4:3f:19:ec:93:bc:01:41:4a:cc:99:f0:0e:0c:d3:42:34:46:
88:5a:26:5c:c3:43:3b:c9:95:99:21:29:f5:e7:d5:bd:49:b5:
a5:3e:04:8a:96:22:4a:26:95:7b:c1:7d:52:6a:f5:8b:b2:8e:
8d:83:9c:d3:d2:31:8b:98:c3:0b:17:be:bb:97:dc:94:0c:0e:
bb:e4:47:18:d0:a2:c0:ea:eb:a8:2b:87:ef:96:ed:02:7f:5e:
ac:75:0e:bb:a1:e5:38:19:51:51:b4:3d:0c:23:19:c4:bf:48:
6b:33:16:8b:29:2b:18:de:0e:87:c8:fe:67:8a:3e:ee:26:2b:
78:c8:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:58 2025 by rpki-client