Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/DSsF2EpdJres9UlSYZ8ho9OJx-0.roa
File: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (raw, json)
Hash identifier: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=
Subject key identifier: 0D:2B:05:D8:4A:5D:26:B7:AC:F5:49:52:61:9F:21:A3:D3:89:C7:ED
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 01942745B9EE52EE045EDD9F6347896F8812
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/DSsF2EpdJres9UlSYZ8ho9OJx-0.roa
Signing time: Thu 02 Jan 2025 13:47:48 +0000
ROA not before: Thu 02 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398772
IP address blocks: 185.168.156.0/24 maxlen: 24
185.174.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:b9:ee:52:ee:04:5e:dd:9f:63:47:89:6f:88:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Jan 2 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2b05d84a5d26b7acf54952619f21a3d389c7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:3c:53:dc:f1:9c:f8:f1:53:ff:8e:8f:bf:
72:d9:7f:7a:6b:0e:7a:50:ef:47:be:76:f3:92:d2:
56:d2:ea:58:76:43:0e:65:9c:01:c6:a6:65:85:fd:
a5:7c:a5:e8:6d:49:da:aa:be:83:01:88:7f:82:d5:
c2:a3:a5:ef:0f:13:37:eb:3d:67:f3:47:f7:94:d8:
b9:f4:7c:b4:a2:27:da:ee:a6:e4:24:08:63:79:4e:
20:ec:ba:7a:83:db:bb:4d:3e:00:63:a6:67:f3:32:
be:c3:58:32:45:db:2c:b1:d3:b5:ea:a4:3b:e0:2a:
13:b3:e3:3c:23:8c:89:cf:d7:5e:32:41:fb:c5:4e:
37:0b:53:5a:86:0a:05:d3:59:47:ba:a0:6e:2c:4f:
a0:ed:26:95:26:86:25:59:f7:a9:4a:25:25:22:3a:
99:fb:ce:4c:38:3c:10:19:31:ca:45:0b:b3:e8:55:
0c:68:be:d2:2b:85:0e:0f:25:a3:a0:3b:9e:2c:2e:
d9:07:bf:76:5b:9b:d0:86:52:99:26:fd:80:fc:de:
ce:04:ef:00:9b:f8:b4:67:cf:fb:ec:fc:10:9f:c1:
47:e3:c2:23:d5:14:41:bd:f9:6c:b7:ea:cd:f5:ec:
4b:90:1b:9c:9f:bf:25:e5:dc:42:51:7e:5b:0d:dd:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:05:D8:4A:5D:26:B7:AC:F5:49:52:61:9F:21:A3:D3:89:C7:ED
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/DSsF2EpdJres9UlSYZ8ho9OJx-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.156.0/24
185.174.88.0/23
Signature Algorithm: sha256WithRSAEncryption
42:95:87:63:fc:ea:23:94:8b:c2:d6:c5:17:2d:97:25:99:80:
7f:fa:a3:13:a4:95:56:dc:b2:3d:45:f8:6e:7a:c2:4e:fb:a1:
6b:62:41:03:a7:56:00:50:29:c8:32:05:00:22:45:73:92:43:
3f:2e:a8:b7:b9:61:65:93:08:b9:69:79:ca:f8:07:d6:c9:3a:
b2:20:4b:c9:bb:ad:d6:11:be:36:f2:4f:8f:52:62:af:76:03:
94:a9:ec:91:3d:25:2f:97:98:d1:60:4b:be:2b:b4:e2:1a:06:
b2:a1:41:20:9a:18:d6:fb:42:b1:33:b3:d9:d4:ac:c2:84:b3:
62:d8:d0:49:69:d2:01:13:c8:f0:c8:e8:0c:fc:c3:4f:70:65:
e4:17:a2:75:14:28:13:ad:a3:2c:20:b0:85:b2:b0:1a:d9:f2:
e0:07:59:5b:ed:bd:9e:9e:fb:a1:f7:0c:84:21:0e:f0:88:d4:
ef:ac:83:58:ea:2b:48:58:39:22:0e:f6:e2:31:28:4f:a5:f0:
70:9b:95:83:bb:b8:7c:40:39:b8:77:ba:c0:24:96:55:21:30:
d2:66:94:2b:de:59:0f:2c:20:73:2d:bd:1e:e7:d0:17:ff:d3:
68:e6:4f:21:58:37:44:19:2c:dc:5d:8b:06:4d:6d:42:cd:0d:
1b:7d:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:12 2025 by rpki-client