Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/g5gtKCNjGb9ukJ4fm_B2_oXdwFc.roa
File: g5gtKCNjGb9ukJ4fm_B2_oXdwFc.roa (raw, json)
Hash identifier: uFuPGbgzXqwteOgYJzIrE2TdRbUIB0b3oHzlN/e2SwI=
Subject key identifier: 83:98:2D:28:23:63:19:BF:6E:90:9E:1F:9B:F0:76:FE:85:DD:C0:57
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 0194EEF635D43C26F848A198B8FEC8CF956A
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/g5gtKCNjGb9ukJ4fm_B2_oXdwFc.roa
Signing time: Mon 10 Feb 2025 08:25:00 +0000
ROA not before: Mon 10 Feb 2025 08:25:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 185.244.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:f6:35:d4:3c:26:f8:48:a1:98:b8:fe:c8:cf:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Feb 10 08:25:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83982d28236319bf6e909e1f9bf076fe85ddc057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:5f:d9:15:fe:6d:2b:4c:bc:48:92:50:5d:
82:d3:43:52:3a:38:32:6b:33:3a:8c:ff:1e:8d:97:
a6:18:33:4f:93:a1:93:a5:51:a3:bd:21:40:ff:96:
b9:a3:17:72:c1:63:ce:9e:c1:bc:4c:0f:53:b7:e2:
29:e3:4d:62:43:1b:83:d1:0e:46:95:74:ac:3e:42:
9b:72:b6:39:52:47:78:91:1d:96:6a:e4:ff:d7:d8:
19:7b:d7:0c:90:de:cd:e1:fb:ac:e8:8a:46:ef:81:
fb:96:70:c2:d1:dd:dd:98:24:8c:f0:d4:b9:8c:bb:
fb:a5:5c:56:7c:ec:b3:ee:5d:98:68:7d:48:7b:2b:
bd:63:3d:51:47:c2:f4:3e:0d:1a:4f:55:92:df:45:
c7:1b:ba:d2:01:8c:da:21:be:67:db:cf:1f:65:43:
03:6a:88:5d:15:d2:ea:c3:f4:dd:11:61:c0:21:45:
2e:f9:0d:fb:27:0f:75:95:10:db:c5:53:5a:c1:20:
ec:85:3a:ec:b9:7b:24:15:57:94:75:7d:03:4e:86:
fb:5b:5f:1a:08:24:0c:bb:d1:8a:3a:5c:d1:3f:b4:
77:ca:73:bd:2a:20:0e:c9:6a:30:67:a7:1a:25:ae:
04:e8:2f:13:54:d2:a4:45:47:fe:bb:62:b4:9d:0f:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:2D:28:23:63:19:BF:6E:90:9E:1F:9B:F0:76:FE:85:DD:C0:57
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/g5gtKCNjGb9ukJ4fm_B2_oXdwFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b9:00:28:df:4e:2b:a0:09:65:75:7d:bd:bb:20:1f:b5:b2:
1f:1d:ea:81:16:de:b4:01:37:22:94:53:b2:cf:30:5b:5d:89:
d9:f5:86:7d:e5:68:f3:ea:36:c2:ce:87:dd:df:e6:8c:63:15:
10:ec:aa:8b:1f:89:1b:0d:0e:20:d5:93:b9:08:a9:a8:3c:dd:
12:de:d3:f1:8b:ee:fb:10:a2:1c:89:4e:d4:c5:01:66:05:e8:
f7:5c:3a:34:ae:0e:bc:86:47:d6:61:fa:33:86:e5:4a:9b:3d:
cb:7f:b2:a9:97:0b:dc:6e:54:63:dd:f6:18:a8:9f:95:75:e5:
8c:cc:39:c5:6d:1e:97:64:63:dd:20:c4:26:a9:28:98:4a:f6:
3c:51:39:a1:f7:28:bf:d5:3d:cf:e0:7f:fc:61:0a:3c:4e:17:
a7:d2:bb:0b:52:2b:a6:04:f8:a5:70:f5:89:d6:30:84:15:36:
5e:74:48:65:7b:49:48:2c:f9:ee:ee:ae:90:49:4e:63:01:a6:
3a:2b:05:06:cb:5c:f9:c2:4d:7b:b0:25:11:ac:ec:d3:d3:b8:
3a:5f:e3:ec:2c:b7:76:f9:40:d2:d5:e9:86:09:1d:65:b5:2a:
07:f4:ba:ff:c9:b1:e2:84:18:ae:c1:e3:86:36:dc:46:4b:cf:
4d:a5:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:20:30 2025 by rpki-client on console.sobornost.net