Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/pd9eLWlj0tJ6KWrjmAyPtfsFjzk.roa
File: pd9eLWlj0tJ6KWrjmAyPtfsFjzk.roa (raw, json)
Hash identifier: gIYC00l2Tl3PQ7ILRVNnOFR1nyKzWXMmBglZVoamRbI=
Subject key identifier: A5:DF:5E:2D:69:63:D2:D2:7A:29:6A:E3:98:0C:8F:B5:FB:05:8F:39
Certificate issuer: /CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Certificate serial: 0185B165A9D057BEE93F603EF9859416BB72
Authority key identifier: BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/pd9eLWlj0tJ6KWrjmAyPtfsFjzk.roa
Signing time: Sat 14 Jan 2023 17:48:27 +0000
ROA not before: Sat 14 Jan 2023 17:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 194.169.120.0/24 maxlen: 24
185.235.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b1:65:a9:d0:57:be:e9:3f:60:3e:f9:85:94:16:bb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Validity
Not Before: Jan 14 17:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5df5e2d6963d2d27a296ae3980c8fb5fb058f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:cd:ba:3e:dd:4a:36:e5:9c:d8:ec:2a:c4:
2e:96:e7:9f:78:45:f3:a5:9e:72:ca:8a:fd:f6:2b:
43:1d:e7:69:de:56:4d:98:10:bb:03:55:3f:4f:ef:
67:64:bd:b0:11:3f:ff:9f:80:32:ba:ff:1d:24:f8:
fa:7d:52:a0:4f:08:62:88:51:6e:76:14:74:8d:17:
de:8c:e9:2f:ba:d8:16:d6:b4:21:9e:3e:bb:61:3f:
1a:24:cc:2e:4c:92:3e:08:2c:f6:fd:32:44:82:69:
51:a6:40:9a:23:f8:8c:5c:7c:07:99:e7:dd:2e:8c:
7d:2e:a1:82:f3:ba:29:7a:fe:1e:f9:eb:96:5c:05:
6d:81:e6:88:4f:03:ee:63:bf:2d:23:61:59:4e:dc:
4f:16:03:fb:e4:b1:25:dd:55:de:f4:d7:a4:f3:1b:
97:ec:83:9b:5a:7f:42:db:54:8e:40:5b:f9:0f:dd:
a7:b3:cc:fd:bf:8b:5b:ea:de:28:05:fe:77:d6:d4:
18:7f:c3:ef:68:c0:fa:c6:ce:24:1d:f4:25:62:98:
07:c3:28:9d:b7:8c:1e:70:56:ef:1a:1d:0e:d0:07:
05:2d:65:e1:ee:92:f2:10:a2:43:f2:b7:c8:e9:0f:
ba:48:99:c6:95:8e:2f:78:81:cb:68:45:c2:b8:60:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DF:5E:2D:69:63:D2:D2:7A:29:6A:E3:98:0C:8F:B5:FB:05:8F:39
X509v3 Authority Key Identifier:
keyid:BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/pd9eLWlj0tJ6KWrjmAyPtfsFjzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/uzdtDJvvawmPpjFAvMQNg9dr1Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:54:77:6d:84:6f:07:3b:06:bb:a9:69:ff:ce:bb:d9:86:a9:
13:f0:66:e2:db:1b:f2:95:44:ce:f0:17:20:34:95:1f:3c:91:
f4:41:c1:a7:42:85:33:8f:05:b2:15:f6:8b:76:ab:6b:f0:5c:
5d:61:64:f0:50:a0:35:aa:bb:ae:0e:b2:46:0b:7e:24:f4:3a:
67:b1:31:fb:c6:4a:49:a8:5e:06:76:72:c9:75:fa:b3:de:25:
41:8d:9d:49:c4:3a:8b:47:6c:b9:1b:8b:2a:96:bb:4b:bf:3e:
55:2c:39:5b:e6:e2:d2:df:2b:d5:ca:57:68:0d:bf:fe:1a:aa:
3f:76:65:07:2a:30:e1:27:7a:54:73:35:97:58:01:73:1a:f7:
bc:56:33:d6:cd:bb:8e:bf:f8:10:22:cb:aa:e2:a9:dc:f3:ff:
67:2a:37:ad:23:84:fe:99:0f:d5:ac:2d:a2:04:86:71:41:a0:
0d:11:e7:66:90:62:15:c6:d3:08:f2:c3:75:77:6d:1f:0c:42:
c8:af:e3:a0:6c:f7:b6:42:fb:3e:3d:ec:bc:e4:3f:c9:21:b3:
dc:77:02:3a:1c:00:ff:e0:c6:31:b8:32:d5:0f:aa:23:aa:30:
34:1e:fc:55:3d:c1:cd:af:d1:24:48:24:bb:72:76:a8:29:a5:
d1:94:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:43 2025 by rpki-client