Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/xqruQTCgxIM4PNAxf9wXVycyPyQ.roa
File: xqruQTCgxIM4PNAxf9wXVycyPyQ.roa (raw, json)
Hash identifier: hdKTf9nYGB8AkPxxLnuI6L7FG/INFNDmxrZRzLc1Xt0=
Subject key identifier: C6:AA:EE:41:30:A0:C4:83:38:3C:D0:31:7F:DC:17:57:27:32:3F:24
Certificate issuer: /CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Certificate serial: 0194258E47C6603D0E46EDF7E56F4360405E
Authority key identifier: 8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/xqruQTCgxIM4PNAxf9wXVycyPyQ.roa
Signing time: Thu 02 Jan 2025 05:47:48 +0000
ROA not before: Thu 02 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214100
IP address blocks: 185.209.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:47:c6:60:3d:0e:46:ed:f7:e5:6f:43:60:40:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Validity
Not Before: Jan 2 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6aaee4130a0c483383cd0317fdc175727323f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f3:90:f7:a1:98:d1:0b:ea:25:3d:59:c4:44:
3e:d4:12:c5:6a:46:32:4b:c7:5b:ac:07:9f:88:84:
ba:8b:08:5b:47:63:d1:94:c7:c0:13:f1:53:af:77:
59:d7:18:e2:27:e8:93:9b:19:bf:b8:28:58:fa:40:
27:18:e4:46:38:ad:44:36:18:12:59:e0:af:8e:d4:
e3:57:34:ef:8f:17:9f:a8:d3:75:a3:bc:74:cb:69:
7e:78:5d:6d:52:ec:62:aa:45:3e:dc:c4:44:74:69:
14:64:73:0e:5d:a5:3b:9d:21:6b:ce:df:9a:01:93:
5d:fd:d8:fa:fb:31:47:d8:a7:09:43:d2:ad:f8:ec:
d8:42:7b:19:1d:77:82:f3:14:8c:26:31:2e:66:3b:
29:38:14:b5:e3:a5:cd:25:c2:83:0b:df:e8:f9:74:
76:1c:42:1a:55:01:d0:ee:de:aa:b8:88:31:54:25:
50:c2:30:2d:f7:d1:3b:22:6a:5c:5a:9d:7b:5b:fd:
d2:61:6e:94:c4:d3:2e:ab:45:c8:cf:94:e8:f3:ed:
99:9c:20:18:c2:3d:da:e3:9f:c7:0a:7e:c8:5d:3d:
a9:38:1c:c5:eb:ed:39:f9:9d:fe:ac:2e:85:fe:31:
d9:95:01:ea:c3:d1:02:62:8e:86:af:08:a2:93:83:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AA:EE:41:30:A0:C4:83:38:3C:D0:31:7F:DC:17:57:27:32:3F:24
X509v3 Authority Key Identifier:
keyid:8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/xqruQTCgxIM4PNAxf9wXVycyPyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:30:3a:3c:fe:75:0c:94:88:93:9a:5d:90:f3:42:ba:17:e5:
7a:0e:83:94:5d:51:76:76:e9:8b:5f:da:b2:e9:a9:b2:29:6c:
37:9a:86:3e:d9:98:60:04:2e:76:cc:61:70:39:e9:55:cc:1c:
00:63:08:66:c4:2b:dc:0a:72:1c:fa:be:69:73:af:38:cb:6a:
e8:66:a0:40:fa:c7:16:66:86:3f:1e:f1:a0:7b:d2:fe:a2:cc:
57:f8:61:4c:3c:55:11:ab:3f:12:7b:33:5c:00:f9:e0:1d:c5:
c9:5a:ad:7f:36:fb:97:4a:2b:94:29:0b:a0:20:82:0c:49:44:
ed:92:f8:0d:33:07:83:8a:ae:5f:8b:35:2e:dc:0c:e7:6a:29:
8c:33:5a:a5:18:bf:1a:46:c1:c7:38:0e:c1:fd:8e:1c:9e:f4:
b7:96:6c:10:08:4d:05:48:04:85:20:3f:4f:cd:d7:3c:b0:29:
0b:6b:37:22:70:41:85:d4:2a:1b:cf:b5:e1:14:a7:d6:b7:3e:
e3:8c:22:58:59:e0:59:74:9c:5a:5d:0e:c8:f8:28:34:72:7d:
e3:3b:6d:cf:4d:c1:30:95:99:02:37:30:50:60:14:91:09:41:
59:58:5b:f3:cd:50:db:92:ed:9b:ae:5e:92:9d:6b:96:9c:79:
14:03:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net