Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa
File: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (raw, json)
Hash identifier: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=
Subject key identifier: C5:63:A9:65:F4:6B:EE:D8:6E:0F:A7:14:B4:AB:CF:74:8F:BF:54:14
Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial: 019421B1CEBA0277B7E663D9E38C42FEE8F4
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49709
IP address blocks: 185.172.180.0/22 maxlen: 24
185.193.0.0/22 maxlen: 24
2a0b:1d00::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ce:ba:02:77:b7:e6:63:d9:e3:8c:42:fe:e8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c563a965f46beed86e0fa714b4abcf748fbf5414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:b4:ae:79:5e:6e:4d:a7:4f:bb:64:e9:b2:
f5:9c:aa:fc:ac:39:43:7f:0d:86:e8:c0:a1:a7:8f:
cc:87:d1:a3:f3:91:fb:b5:b3:f8:0c:b1:2b:10:dd:
a6:94:0e:11:be:b0:c7:ac:a2:ec:07:de:3d:7c:99:
fd:8f:3f:1a:a3:20:03:0e:27:34:00:f5:0f:54:8c:
3e:ff:83:02:7d:06:c1:c8:90:40:9c:4c:32:17:63:
09:95:28:44:ea:51:38:93:fa:9c:6d:37:3f:c6:bd:
ba:5c:ea:34:5b:84:12:a5:f3:f5:1f:15:5c:6f:a3:
db:ea:5a:cd:3b:aa:fa:a8:5d:5b:b0:5e:a5:f6:cd:
4d:ac:bb:3e:84:2b:bf:a7:0f:d7:76:a5:01:b9:b9:
94:ee:eb:14:81:a9:0c:09:9c:9c:8a:fc:c8:7a:c1:
77:fe:25:cc:d9:91:64:57:d8:ee:90:88:68:22:ca:
20:1b:4c:be:93:e8:0c:1a:e2:79:a4:d2:a0:ac:9e:
f3:4f:cc:cc:31:cf:e0:d3:f7:48:78:c3:37:34:04:
68:76:14:a6:d7:4c:ec:5d:6f:a3:b0:8a:22:4b:a9:
94:54:ca:3c:bb:b7:b4:2e:ea:16:ff:d8:b6:93:8a:
45:5a:7c:e6:85:f9:ca:4b:bc:2e:86:96:5c:3c:7a:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:A9:65:F4:6B:EE:D8:6E:0F:A7:14:B4:AB:CF:74:8F:BF:54:14
X509v3 Authority Key Identifier:
keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.180.0/22
185.193.0.0/22
IPv6:
2a0b:1d00::/29
Signature Algorithm: sha256WithRSAEncryption
8a:1a:d2:d8:26:21:67:4c:35:3f:b6:f2:f3:15:37:fb:a4:ca:
f5:79:57:0e:5e:b4:8a:bc:73:d9:ca:73:5c:43:b8:a4:aa:4e:
fe:18:9f:a5:18:65:27:e6:4a:e4:cb:cf:06:ee:f0:7c:80:1b:
a4:f7:72:bb:60:d9:88:04:f3:f3:4d:2e:98:8e:f9:4f:7e:6c:
e3:7a:3b:bc:2a:44:75:dd:7f:1f:0e:3c:48:99:55:51:9b:fe:
5a:16:e3:3f:d7:f7:97:bb:40:e3:1a:c1:36:3c:d8:be:f6:5b:
11:ef:50:42:4a:16:ef:4b:4a:9a:fc:16:79:c9:ab:51:9f:d3:
7e:86:e1:db:c0:48:b5:c8:a2:73:a4:4d:d5:d3:17:c2:2e:39:
0d:df:c8:b8:aa:8a:a2:a4:40:d4:41:0c:0a:ba:63:16:28:d0:
5e:ab:aa:d7:c5:48:9e:1d:73:8c:52:73:ff:db:ac:f2:9c:32:
8a:c0:b4:e5:39:f9:cf:93:cd:96:45:fb:35:c3:a8:ca:f8:72:
1b:a3:34:8f:93:37:74:c3:e9:50:9c:f6:eb:99:4f:a2:d3:e7:
06:06:8a:ce:00:43:b7:2f:dd:99:cf:ec:8d:cf:c3:12:ae:34:
13:3d:ff:ee:e6:6a:d1:c3:1c:7b:1a:b2:59:18:90:08:a9:cf:
9d:93:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net