Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/uhWjc5L6HF8CL85GmROwozUvuSg.roa
File: uhWjc5L6HF8CL85GmROwozUvuSg.roa (raw, json)
Hash identifier: K9tb23uEh+etbgOiAW3T/MkxyInQIRAfCLsSJRvGHxg=
Subject key identifier: BA:15:A3:73:92:FA:1C:5F:02:2F:CE:46:99:13:B0:A3:35:2F:B9:28
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 019423D6DCF9BC211C56BEFC9CF66985152A
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/uhWjc5L6HF8CL85GmROwozUvuSg.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203606
IP address blocks: 185.123.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:dc:f9:bc:21:1c:56:be:fc:9c:f6:69:85:15:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba15a37392fa1c5f022fce469913b0a3352fb928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e4:cb:f2:88:c3:b5:6c:f3:0b:ea:c6:4b:39:
81:59:67:64:fa:2f:18:d7:ec:1a:af:97:9a:4d:4d:
96:e0:0f:b8:25:43:d2:c1:a0:08:23:0f:d7:fc:e4:
9a:64:1f:88:64:57:ba:30:2d:cd:83:f3:c2:a5:0d:
99:78:89:9b:b8:44:50:b5:62:9f:e4:49:7d:56:a1:
02:0c:35:95:c5:c7:fb:e3:28:d7:cb:2a:46:e1:ef:
69:d4:ad:d4:e4:c5:62:f5:fb:c1:78:c3:05:f0:de:
9f:9d:b6:9d:78:bf:59:50:65:3c:a5:ea:10:c8:2c:
ad:a9:8d:a8:d1:fd:13:da:74:95:bd:ab:7d:08:99:
e3:79:8a:20:f0:2d:11:e3:14:09:0c:03:ed:73:77:
1b:aa:b0:ae:5b:49:30:1d:8d:d1:b2:b9:40:b4:25:
95:e1:54:d6:35:f6:a5:1b:e5:ce:36:54:d1:86:58:
f8:0c:11:de:9e:d6:84:23:5b:0c:70:2c:35:d0:74:
6f:ba:4f:f2:8d:20:6c:86:35:93:d1:21:6a:ba:d3:
f4:b5:00:18:c1:67:73:60:6d:8b:f9:de:c5:0e:eb:
20:89:a7:b6:dc:53:14:11:9f:0d:82:0f:62:3d:6a:
1d:26:0f:17:59:44:42:07:27:df:12:75:08:e4:8e:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:A3:73:92:FA:1C:5F:02:2F:CE:46:99:13:B0:A3:35:2F:B9:28
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/uhWjc5L6HF8CL85GmROwozUvuSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:0e:1a:10:c2:59:73:a1:2d:74:ce:02:12:bc:b9:d0:91:31:
85:87:d8:98:a4:97:24:0e:0a:5c:2e:72:3c:86:7b:1f:12:3b:
32:94:8d:ee:e5:17:07:c4:61:93:59:6b:56:4d:34:92:40:db:
09:f4:61:aa:24:de:4a:a1:ea:a5:58:e4:79:80:22:91:6e:09:
b3:c3:5b:07:fb:1e:00:c1:74:18:7d:da:a7:f1:00:a0:2a:4d:
2d:c9:9a:4b:68:42:31:a7:f9:d1:cf:93:2d:92:c4:ad:ad:72:
ba:a5:f3:1e:1b:81:e6:56:ab:fb:b5:b2:59:f5:b3:7e:2c:5d:
99:78:db:27:be:36:93:21:43:da:f5:11:83:3c:3f:15:a9:2c:
8f:9e:2d:3c:41:fc:5c:b2:c8:fd:5d:9a:7b:b6:d4:de:37:75:
7e:67:a2:99:38:bc:09:b8:91:04:e0:17:08:46:80:a2:21:57:
11:e5:d9:2b:85:21:4e:56:b2:62:54:30:a1:1b:36:57:75:88:
d5:92:f6:76:ef:c4:da:9d:df:38:f2:d9:e9:b3:11:64:ed:f4:
fe:7a:9c:4e:44:bb:04:d0:d5:24:9e:b0:73:20:f5:de:41:ce:
1a:64:72:ca:a0:05:6c:c9:da:db:9c:d7:70:ea:38:7a:72:04:
db:f3:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net