Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/xDaTSU1r08U3icbYzh9eT36EBN4.roa
File: xDaTSU1r08U3icbYzh9eT36EBN4.roa (raw, json)
Hash identifier: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=
Subject key identifier: C4:36:93:49:4D:6B:D3:C5:37:89:C6:D8:CE:1F:5E:4F:7E:84:04:DE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 01953D693FFAE296C1BC6AA5222600B8F2ED
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/xDaTSU1r08U3icbYzh9eT36EBN4.roa
Signing time: Tue 25 Feb 2025 14:01:02 +0000
ROA not before: Tue 25 Feb 2025 14:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214015
IP address blocks: 185.131.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:69:3f:fa:e2:96:c1:bc:6a:a5:22:26:00:b8:f2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Feb 25 14:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c43693494d6bd3c53789c6d8ce1f5e4f7e8404de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:af:8a:aa:be:8b:74:1f:c6:3d:94:7d:c4:87:
c7:c9:71:fa:cb:65:3b:af:dd:e5:b8:44:25:1a:72:
00:e4:1d:8b:49:7d:07:d2:ef:64:b5:a0:9d:b9:79:
c3:93:32:ab:d5:8b:71:1b:30:34:ce:64:d1:5b:17:
1f:cf:85:0d:69:7d:5d:82:d9:b7:13:91:ad:98:bd:
0a:52:26:74:58:8d:5a:b6:d6:91:48:24:16:0c:ae:
07:a1:2b:47:17:99:a7:22:af:15:01:73:71:65:66:
d4:d2:42:32:f1:1c:8d:f1:e4:3b:47:f2:fb:71:df:
af:3e:12:77:60:e2:7a:0b:98:57:b8:32:31:79:40:
31:78:1c:e8:1d:d9:a2:80:2f:7d:8d:a0:32:66:9e:
15:50:ba:57:63:43:42:9a:cf:14:73:dc:69:93:49:
1d:d0:c3:0c:6b:a7:46:de:c9:be:63:72:79:4c:c0:
f9:4a:57:68:4a:48:b0:7b:34:34:7f:7c:1f:c6:70:
56:f9:17:35:79:bf:bb:cc:63:f6:e2:f2:50:0d:ca:
ab:41:98:dc:99:38:14:d1:90:a2:d5:75:4c:51:8d:
63:a4:80:a3:b1:3d:50:b0:cf:39:11:eb:cf:34:4a:
ab:83:c3:e7:af:5a:5d:05:90:fa:51:22:a1:e2:76:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:93:49:4D:6B:D3:C5:37:89:C6:D8:CE:1F:5E:4F:7E:84:04:DE
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/xDaTSU1r08U3icbYzh9eT36EBN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.203.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8b:7d:50:4b:d4:d4:1a:7d:09:d6:90:71:61:18:cb:bb:a2:
35:c5:9e:f2:a1:52:9f:55:d6:69:c9:9e:03:18:65:37:43:ec:
08:2d:a8:b1:2a:f9:0b:7c:c2:f4:12:7d:cc:1d:58:91:55:b6:
ff:34:a6:bc:a0:dd:9d:ac:51:03:ec:80:f2:7c:05:50:0a:5b:
80:c1:6b:0d:9b:b5:9f:17:7b:a4:52:ce:40:7b:85:24:20:89:
60:e8:39:5f:82:4b:81:f7:8b:10:64:06:f3:b6:c3:f8:fd:0e:
39:57:b0:43:3f:b4:94:81:3a:ab:1c:3e:7b:6b:11:9a:7f:07:
1d:79:56:24:a7:92:5b:c8:fe:be:55:2c:16:97:0e:39:3d:cc:
bd:1e:e7:2e:47:e1:e3:8a:d7:3a:cc:c0:26:37:2b:8d:86:06:
01:78:7e:6d:e2:c2:ff:2e:81:79:d9:c2:1d:6e:20:d6:a6:c6:
08:d9:3e:83:1e:41:59:8c:2c:4d:e6:d2:72:09:6e:5f:f0:e4:
3b:e6:c6:82:ee:8d:35:5e:3f:9e:6f:4e:cb:e5:4b:08:4f:41:
e4:8a:5c:dd:b3:29:d4:34:ae:a9:c3:72:48:81:c5:6a:bb:08:
db:bc:84:87:e1:67:b4:44:77:a1:18:04:00:40:49:1c:22:42:
41:d1:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net