Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/o_gD51WjTdSOmKxnpsPgpEBLg78.roa
File: o_gD51WjTdSOmKxnpsPgpEBLg78.roa (raw, json)
Hash identifier: H7WMFNZl3PvojqlRR1S79qBLlRCJXsbv7bPNvj5FCYc=
Subject key identifier: A3:F8:03:E7:55:A3:4D:D4:8E:98:AC:67:A6:C3:E0:A4:40:4B:83:BF
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B681F4A8C93791A89BDD0DFCD2A508
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/o_gD51WjTdSOmKxnpsPgpEBLg78.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201776
IP address blocks: 185.116.228.0/23 maxlen: 23
185.116.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:81:f4:a8:c9:37:91:a8:9b:dd:0d:fc:d2:a5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3f803e755a34dd48e98ac67a6c3e0a4404b83bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:e3:82:2f:5e:49:5d:8e:c3:c9:7f:2e:a3:
f1:9b:e2:da:ed:23:10:1a:c6:ff:75:48:87:12:9b:
e3:83:b5:c9:50:b5:a3:42:b3:b9:10:fa:6e:d1:c1:
a9:41:1b:54:4c:9b:4a:29:da:ba:1f:3c:d9:75:0f:
ab:14:e4:e6:08:2e:56:35:e0:a3:82:d2:d0:1e:63:
0b:90:10:8b:59:3c:c8:92:44:a6:ef:8f:93:0a:88:
26:29:83:46:2a:09:22:b2:94:ff:5c:03:af:4b:37:
c2:0e:f0:3c:36:e9:29:34:c6:27:b1:9d:59:36:b5:
c2:03:30:9b:d8:f1:9e:27:8e:45:a9:ad:78:d1:9b:
9e:0f:5c:12:e7:60:ee:76:32:2b:6d:28:a9:c6:fe:
e1:48:ef:7f:78:a0:e0:f0:fd:62:cd:4b:48:83:58:
e4:15:ea:cf:59:85:bd:22:11:c9:e5:e0:41:44:bf:
9e:a6:a7:bb:c3:8c:d1:7a:85:70:b2:83:a2:3c:e7:
bb:62:eb:fd:95:ae:ba:b0:32:ab:92:5d:25:ee:c0:
e8:13:4b:9c:57:81:4a:26:43:b4:f5:f5:99:86:3d:
81:f0:fd:0e:3a:59:fd:65:dd:6a:72:a0:37:06:86:
d6:74:35:e7:60:73:62:58:b8:f0:eb:08:bd:97:07:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:03:E7:55:A3:4D:D4:8E:98:AC:67:A6:C3:E0:A4:40:4B:83:BF
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/o_gD51WjTdSOmKxnpsPgpEBLg78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.228.0/22
Signature Algorithm: sha256WithRSAEncryption
36:38:79:2d:a3:6a:fb:02:7f:a3:65:f0:75:95:aa:f6:28:5c:
5d:7c:8c:34:fa:4e:26:f7:ec:27:bd:c4:73:1c:8a:5c:1e:00:
a9:38:42:eb:a9:9b:41:a2:60:77:6a:9b:63:c9:57:ff:d7:f0:
f0:5b:74:3c:1d:07:be:a1:74:ff:df:7e:26:7a:93:a4:7d:14:
09:ed:fb:46:85:47:91:a8:7e:2d:7d:84:0c:68:d8:da:89:d5:
68:bb:7e:d9:4b:bd:98:99:32:4f:5f:b7:e5:85:08:46:e7:26:
60:ed:a2:ad:e5:0d:46:99:49:71:a3:ce:31:9f:84:df:4a:b3:
2d:d8:fc:d2:cf:5a:05:f2:b4:55:81:a4:bf:e9:f3:6d:3b:78:
04:69:61:ee:fb:37:c3:ef:93:fa:97:74:5f:59:03:8e:16:2e:
94:e5:36:40:68:3e:ce:de:c2:5d:6e:c1:e8:08:ec:fc:1f:44:
5d:06:e1:82:12:29:0d:4d:36:32:cb:cc:76:8e:ce:f8:28:84:
71:48:f5:df:ff:81:c9:cf:d6:e0:51:8f:93:a9:84:64:b8:11:
99:bc:28:d8:ad:36:73:b7:78:5e:a8:67:60:47:8d:25:b4:63:
b1:f2:07:4f:8e:32:91:fd:33:ca:3e:a3:63:17:64:a7:67:f1:
63:db:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:03:26 2025 by rpki-client