Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/aB5cBy65RFAHls1vV8087q2f8aM.roa
File: aB5cBy65RFAHls1vV8087q2f8aM.roa (raw, json)
Hash identifier: 8SgzFwiw3uNLh4r/2nOtnYE1hDmT2PxsFGPqhzFqtAQ=
Subject key identifier: 68:1E:5C:07:2E:B9:44:50:07:96:CD:6F:57:CD:3C:EE:AD:9F:F1:A3
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 019427486B796124E1D4882B555087E8EBE8
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/aB5cBy65RFAHls1vV8087q2f8aM.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 185.229.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6b:79:61:24:e1:d4:88:2b:55:50:87:e8:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681e5c072eb944500796cd6f57cd3ceead9ff1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:4b:d8:ff:13:e1:18:f6:c8:aa:50:b5:0c:
b0:3e:23:11:09:e2:2e:37:cd:1c:c9:b3:9c:50:b2:
c9:31:28:c9:aa:d3:de:90:35:af:81:de:09:28:6c:
c3:e6:fe:28:f0:7e:d6:42:b2:ca:4d:f1:ce:be:a2:
93:e7:9d:69:7c:dd:9b:89:1d:aa:5e:55:74:5a:cf:
75:23:c9:b6:21:21:fe:e7:d4:ec:3e:e3:4e:a0:10:
71:09:27:8e:62:39:c4:11:a4:b8:b1:88:cf:1e:ec:
b6:e3:45:a8:eb:60:26:17:bf:ec:48:32:9a:51:00:
e6:70:07:25:e4:a4:5d:8e:bb:6a:77:34:9c:b1:fd:
9d:9e:7b:c0:b4:84:d3:b3:4e:f0:35:6c:19:1c:e5:
bd:da:d5:1b:b0:1a:a4:c8:5d:12:19:eb:7b:1a:f6:
48:14:3e:4d:11:28:b7:c8:c6:b0:da:df:3b:30:df:
f6:3d:21:e2:d5:99:56:85:30:f2:3e:9b:74:52:44:
16:97:3f:ae:2e:0b:d7:ca:16:46:eb:78:52:10:4b:
c8:4a:90:4a:75:66:96:78:47:39:6f:49:a2:73:cc:
35:2f:cc:76:c0:18:d1:30:cc:67:30:7e:8c:b4:69:
b2:a3:ba:45:9f:3d:08:e4:01:d2:16:60:d9:95:4b:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1E:5C:07:2E:B9:44:50:07:96:CD:6F:57:CD:3C:EE:AD:9F:F1:A3
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/aB5cBy65RFAHls1vV8087q2f8aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a2:8a:84:c0:14:ad:de:4e:44:f0:d3:d3:10:10:a7:43:93:
fc:5c:98:1b:c2:fa:ff:ab:0d:d0:3b:87:9d:bc:a0:c1:12:4c:
75:8e:c2:1d:a6:5d:39:ab:7b:b3:15:84:15:61:8e:47:20:98:
55:3a:30:78:2b:48:5e:6e:3b:60:17:57:0f:7c:cd:51:22:5e:
86:85:ab:3e:1c:6d:4c:e1:fd:4c:cc:6f:56:4f:7d:46:af:a1:
16:48:9e:e1:0b:73:05:e8:6c:5a:84:c8:49:24:29:cb:14:16:
27:e9:6c:29:3b:ba:86:11:b9:0d:94:1e:d9:bd:48:33:45:2b:
17:5e:3e:02:da:f6:d6:a5:b7:6c:f8:1e:ed:99:43:79:3d:e1:
99:eb:e3:5c:39:9e:19:48:d3:1d:e9:4a:c1:9e:17:8c:d2:bf:
38:26:82:1e:c0:ed:ca:c3:83:1e:72:e1:8a:62:5a:13:b0:e5:
a2:dc:72:6a:4c:9e:c0:86:79:d4:4e:5a:bc:43:21:29:cf:fe:
1f:a3:02:8b:0a:c3:d7:e9:f1:bc:5e:8e:fc:ff:9a:c3:62:14:
73:f7:75:9b:0a:81:c9:2d:05:94:39:90:76:18:03:50:1b:7c:
97:4e:a9:fb:9b:92:3d:24:d4:3d:e1:4d:f4:15:d5:d0:0f:0e:
28:a0:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:30 2025 by rpki-client on console.sobornost.net