Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/gbEdvQz4q0AdyM98MXiZjERkDX4.roa
File: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (raw, json)
Hash identifier: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=
Subject key identifier: 81:B1:1D:BD:0C:F8:AB:40:1D:C8:CF:7C:31:78:99:8C:44:64:0D:7E
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 019420685F34043474C9CBC6A2315D421C24
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/gbEdvQz4q0AdyM98MXiZjERkDX4.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9208
IP address blocks: 185.205.232.0/22 maxlen: 24
212.166.0.0/18 maxlen: 24
2a01:5a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5f:34:04:34:74:c9:cb:c6:a2:31:5d:42:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81b11dbd0cf8ab401dc8cf7c3178998c44640d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:53:f6:2a:d2:aa:51:f3:53:55:d3:db:33:
a4:f0:04:95:86:85:a1:be:0a:75:4b:a8:a7:9a:0f:
9c:ba:a5:78:82:1b:9a:f2:d1:d3:51:ec:38:45:51:
4d:c7:8e:46:69:a8:da:f8:87:b3:23:21:3c:85:63:
ca:fa:bf:db:70:a0:ec:41:cd:fb:fc:d4:66:31:2c:
80:26:0d:06:bf:e2:62:59:53:f8:68:42:55:ce:b4:
0a:a5:11:d1:5e:f7:91:d5:80:0b:18:72:89:b6:56:
57:5c:fc:5c:34:d5:5b:39:c3:7c:f5:b8:33:f3:9d:
47:e3:2a:fb:68:94:66:76:91:de:83:8b:78:f0:42:
85:79:67:31:8a:f1:cf:7c:a0:8a:6b:f1:25:fc:e1:
38:87:69:44:55:5f:6b:ad:88:ad:42:50:fd:3c:27:
c5:2d:87:48:0c:07:25:50:72:0b:b5:44:b2:6a:c3:
1b:0b:60:2f:60:8f:3f:e8:ed:5a:0b:bb:8f:c6:99:
fb:90:2e:ee:1d:b4:e8:95:3b:d7:b7:63:87:d1:bc:
79:d9:32:5a:e6:d4:9c:32:73:5f:c4:a2:8c:21:ce:
26:8c:b3:4a:95:61:72:ec:9f:5c:71:64:1a:0b:3f:
b9:b9:83:0e:4e:48:00:d1:da:05:5d:bd:fd:1e:53:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B1:1D:BD:0C:F8:AB:40:1D:C8:CF:7C:31:78:99:8C:44:64:0D:7E
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/gbEdvQz4q0AdyM98MXiZjERkDX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.232.0/22
212.166.0.0/18
IPv6:
2a01:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
11:fb:a7:6d:31:b1:c0:0b:a1:a6:05:9c:e1:f8:6c:7b:46:f7:
d9:d3:2b:bd:61:55:5f:3c:fa:2b:c9:a8:bc:13:fd:a3:78:26:
12:ca:79:fd:dd:7d:70:5f:a9:d7:58:2a:c8:92:a7:69:d3:fa:
24:5d:8c:b2:ff:36:50:52:df:b7:b9:cc:e7:b7:5b:d4:62:4f:
ae:e1:ba:48:60:d5:fd:ec:93:e0:98:98:96:62:51:47:2f:97:
9f:7d:53:d7:58:1e:20:6e:7e:00:ee:be:50:83:4c:91:4a:38:
07:db:76:2e:ab:4f:b0:5e:a6:fe:39:c7:ae:59:48:5d:82:a7:
30:31:a5:da:aa:72:1a:78:a0:5e:4f:e9:fe:71:a7:0d:be:c1:
58:4a:04:57:c2:d5:cf:5a:bd:e8:83:f1:8d:10:28:60:66:10:
c3:5f:f8:30:46:9b:0c:a8:f0:40:f5:d8:51:90:ce:b0:4f:e9:
df:db:22:2b:a8:45:94:02:27:fe:b1:1f:ed:d5:db:a8:c6:ff:
d6:49:4f:fe:b8:fb:45:cc:df:c0:65:9e:a5:1b:85:35:1f:73:
f9:85:77:0f:93:18:cf:dc:1b:38:dd:fc:62:05:b8:40:b7:94:
58:e4:8a:40:a0:42:85:f1:48:24:08:c2:bd:2d:c9:6d:a0:01:
b5:00:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net