Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/rGfdr756R5fC-L5KExb4TDe2AiU.roa
File: rGfdr756R5fC-L5KExb4TDe2AiU.roa (raw, json)
Hash identifier: 0pA9T2WOS5lidpDpCE8oBEOCaFYY8cP9PqllXsuIgTw=
Subject key identifier: AC:67:DD:AF:BE:7A:47:97:C2:F8:BE:4A:13:16:F8:4C:37:B6:02:25
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 01961063AD1B4112F25EC95639F71FB4F833
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/rGfdr756R5fC-L5KExb4TDe2AiU.roa
Signing time: Mon 07 Apr 2025 13:14:49 +0000
ROA not before: Mon 07 Apr 2025 13:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 185.189.182.0/24 maxlen: 24
185.189.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:63:ad:1b:41:12:f2:5e:c9:56:39:f7:1f:b4:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Apr 7 13:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac67ddafbe7a4797c2f8be4a1316f84c37b60225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:98:de:a4:b5:30:ad:28:d1:4f:1c:5c:2f:
a2:77:08:b0:7f:23:ad:0b:0b:1b:5d:8a:47:0a:ce:
b2:7a:62:c4:9f:75:2f:dd:d9:5c:35:e0:12:a8:8e:
ff:80:db:a4:6a:ac:45:35:15:e5:c0:38:79:fd:7d:
c5:57:3c:35:a1:8c:89:5e:78:c9:55:a0:9f:a9:75:
12:bf:7c:eb:45:b8:85:d4:74:ad:46:cc:df:0c:5c:
a5:c5:36:75:68:4b:51:81:19:d0:52:7b:9a:9d:78:
74:14:48:8b:b6:ab:40:ff:88:ee:05:71:9c:60:23:
48:e6:f6:06:e0:86:99:f3:94:85:57:13:28:6a:7e:
d0:5d:d2:81:b8:99:40:b1:41:11:18:33:81:b2:9f:
19:71:43:2d:0b:2e:64:4f:88:eb:07:34:51:de:7d:
0a:8b:0f:a2:5a:3c:ea:c2:38:b0:6e:bd:2b:4f:be:
56:72:25:71:66:bc:02:52:b3:6d:35:ca:53:bd:6e:
5c:f6:82:3b:e3:b5:e7:f8:78:30:b5:d2:8c:cf:80:
08:8d:7e:6b:96:ec:4d:c0:ad:34:a9:31:56:2d:24:
59:7e:ec:99:26:50:58:cc:18:85:4e:6c:26:ac:6d:
07:fa:3b:9d:1b:2e:2c:2b:51:b8:61:bb:36:74:00:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:DD:AF:BE:7A:47:97:C2:F8:BE:4A:13:16:F8:4C:37:B6:02:25
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/rGfdr756R5fC-L5KExb4TDe2AiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.182.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:05:88:59:fd:0a:b1:82:80:3b:29:37:0a:f7:a2:22:af:0d:
73:7a:5d:69:ed:69:cc:41:02:9f:95:7f:84:4a:28:19:d6:10:
a9:f5:51:9a:07:d1:22:59:c8:53:3e:31:2a:4b:0f:de:31:11:
a9:05:c4:f2:21:a9:ff:a2:74:bf:ed:cc:82:88:55:eb:47:61:
54:25:ac:c3:04:17:18:18:d7:1d:fa:d1:fc:48:8b:58:c3:47:
48:fe:58:8f:3f:91:ae:78:ca:0f:49:28:ae:0a:de:cf:8b:9b:
97:cd:74:86:2c:d3:c9:1e:6a:ba:41:11:d7:89:3a:7c:d4:b8:
76:33:7d:2e:f1:77:68:4c:33:5f:4b:28:cf:46:69:70:d9:7e:
73:34:81:e8:64:69:b2:94:11:d5:5b:ec:9f:0e:4b:18:5a:5b:
a0:ba:fe:ea:db:a2:fd:97:62:f3:1d:08:ce:c9:16:0a:cd:dd:
4b:d5:07:c8:6f:00:a3:86:45:28:b2:bc:5d:d5:8d:0f:4f:26:
7e:f0:f5:b2:c1:c4:10:ae:14:0d:b5:6c:52:3a:a5:40:09:59:
78:63:22:ca:d8:92:8d:1f:d4:07:4d:31:11:b9:62:46:38:a1:
90:29:45:59:3f:7c:18:8d:b6:25:3d:f5:03:de:9c:92:68:06:
6f:80:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net