Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/05RxvRBbBF0K0L7oHhPtWLGcLm4.roa
File: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (raw, json)
Hash identifier: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=
Subject key identifier: D3:94:71:BD:10:5B:04:5D:0A:D0:BE:E8:1E:13:ED:58:B1:9C:2E:6E
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019420D60EE26E9C9B7D238B0A046DE0D86B
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/05RxvRBbBF0K0L7oHhPtWLGcLm4.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205550
IP address blocks: 185.120.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0e:e2:6e:9c:9b:7d:23:8b:0a:04:6d:e0:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d39471bd105b045d0ad0bee81e13ed58b19c2e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:aa:82:85:74:f6:48:ef:4f:61:e9:5b:61:
96:07:d1:e5:e5:47:be:6c:d0:d5:c5:94:0e:e3:29:
d6:84:21:fb:d1:4d:7a:71:5c:73:14:cf:94:23:6a:
81:19:42:13:51:4d:dd:c4:e4:85:aa:41:d1:7d:e6:
0b:8d:08:7f:2a:93:aa:b4:3b:42:30:c3:43:04:73:
70:80:b1:d9:59:df:53:0c:36:80:e4:a1:74:be:f2:
8f:c3:96:13:4a:55:84:65:2d:da:95:73:0e:70:5f:
c5:8c:b4:cc:2b:00:e6:b3:b6:c6:dd:25:34:53:66:
b2:1c:fd:29:94:13:3a:a1:73:70:d3:19:38:7e:92:
6e:00:8b:08:40:9f:51:d9:20:a9:13:4c:6d:6f:42:
57:23:67:8f:de:97:fc:80:62:cb:3a:6b:60:aa:da:
34:fd:62:b5:a9:2b:3a:a5:a0:6a:b2:98:08:e5:17:
31:82:a9:07:7b:9e:b3:26:a3:b0:9e:dd:ae:a2:e5:
fc:57:c2:c1:7f:d8:f1:12:66:fb:4b:3f:93:0b:e1:
07:cd:9e:96:5d:1a:f8:39:21:9e:27:07:40:5b:38:
13:e1:8e:b4:66:78:6e:2b:25:d4:66:f6:15:bd:dc:
7f:91:ba:96:a9:94:ba:99:a6:8c:cc:36:85:dd:2e:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:71:BD:10:5B:04:5D:0A:D0:BE:E8:1E:13:ED:58:B1:9C:2E:6E
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/05RxvRBbBF0K0L7oHhPtWLGcLm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
77:78:f7:94:48:d1:6d:57:70:aa:ec:53:8f:ae:21:0c:7c:65:
4d:d3:be:7b:5c:c4:74:11:d2:22:1e:f5:22:8a:f1:65:6d:3f:
5b:66:8f:b0:40:8c:66:1d:17:1f:f0:0b:93:6a:72:88:75:67:
ad:b7:8e:d7:f5:34:74:00:d3:e7:d4:93:7e:f2:e8:06:a9:8f:
7f:b4:38:bd:e6:dc:b1:3e:89:fe:fe:04:4a:06:d2:81:41:90:
02:70:1b:3f:7d:61:9b:e7:76:d7:72:c0:6c:aa:db:c4:2c:a4:
df:eb:c2:0f:79:3a:e9:4d:3a:84:61:e8:37:44:ef:5a:48:dc:
ff:cc:34:24:d5:db:02:26:fb:47:3a:57:92:4a:7d:6d:ac:7f:
33:08:d5:85:94:65:2b:9f:63:b1:4f:0f:d3:f0:48:e9:d5:4c:
1e:51:ed:2d:20:df:cc:ad:79:e3:f3:16:b3:8d:34:d5:cb:03:
91:62:20:bd:c2:1a:2d:6b:7c:6d:1d:e0:15:2b:f4:01:2c:50:
b8:66:60:2a:ad:4a:73:c3:e7:a2:23:e9:81:7d:43:10:b9:69:
a5:80:d3:f7:0a:0b:63:e4:85:02:91:bd:4e:85:78:b7:60:ab:
68:40:03:f7:ae:d0:e4:f0:9b:b9:36:13:10:bd:22:a6:0b:f5:
a7:43:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net