Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9ab4gsm8HWV3453txi9GuHhETfI.roa
File: 9ab4gsm8HWV3453txi9GuHhETfI.roa (raw, json)
Hash identifier: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=
Subject key identifier: F5:A6:F8:82:C9:BC:1D:65:77:E3:9D:ED:C6:2F:46:B8:78:44:4D:F2
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 0194274863D04944BD88CF43E6F2E3789795
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9ab4gsm8HWV3453txi9GuHhETfI.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13204
IP address blocks: 185.116.152.0/24 maxlen: 24
185.116.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:63:d0:49:44:bd:88:cf:43:e6:f2:e3:78:97:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5a6f882c9bc1d6577e39dedc62f46b878444df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:7d:cc:3a:c6:d5:31:69:6e:fe:bb:16:1b:
fa:14:c2:63:c2:4f:da:93:98:c9:71:c9:86:6e:68:
fc:bc:9a:4b:38:7a:75:a8:fb:bf:ef:f9:7e:cb:22:
14:ed:56:87:ed:95:ef:57:84:ce:91:67:36:9d:80:
43:9b:4e:63:26:b1:11:9a:35:29:6d:1f:3a:33:73:
74:84:ef:7b:8b:44:32:db:2e:9b:dd:cf:8f:7a:c1:
cd:07:fd:05:cb:4a:e2:47:d3:98:08:5e:4c:60:7f:
c5:c9:48:a0:c2:41:54:08:e2:dd:7d:b3:41:e1:1c:
f8:c1:db:ab:4d:d9:66:9c:af:e6:49:57:ea:10:f9:
54:87:9a:05:0c:9b:86:bc:09:c2:2a:9e:f1:80:9a:
dc:e7:41:b7:19:94:f9:02:c6:2e:01:bd:0a:86:cd:
33:fe:81:3d:db:f0:fd:56:57:cf:6d:89:22:a4:91:
bf:c4:fc:59:c9:3d:7f:c3:41:ca:f8:8e:88:cd:90:
e2:8b:59:49:54:13:e7:39:03:14:d5:7a:5e:26:79:
23:7e:e7:81:96:c9:f6:e1:ba:15:c8:4b:5f:e5:80:
15:53:bb:03:5c:02:a7:ce:91:a5:77:ed:a2:69:c2:
04:b8:7b:a4:35:21:6f:81:d7:d0:8b:4d:89:10:26:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A6:F8:82:C9:BC:1D:65:77:E3:9D:ED:C6:2F:46:B8:78:44:4D:F2
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9ab4gsm8HWV3453txi9GuHhETfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.152.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:5c:a4:2f:b3:bd:e5:7b:37:d6:eb:f1:01:72:9a:9b:41:6d:
6e:d8:f2:ea:06:1b:7c:87:4e:12:6d:9b:b7:bb:be:3b:92:3a:
a7:d8:a4:2f:2a:e5:6e:e3:fb:28:0d:af:c5:50:d1:39:cb:df:
ce:2e:d7:14:0c:85:3d:1f:62:ad:88:60:fc:81:cf:ae:81:39:
fb:cd:f0:52:50:6a:d4:44:ba:97:af:b2:95:f9:7b:9f:a9:70:
c8:2f:fc:92:23:c2:8e:c8:ac:c0:fe:0b:5c:72:94:37:b9:ff:
be:38:30:56:15:ca:f5:d3:36:66:de:6e:12:48:a5:62:69:fc:
3f:b0:3e:bd:25:1c:50:5c:9e:06:0b:d7:51:56:b2:10:91:f1:
fd:d8:ba:30:00:5d:83:02:8d:bd:7f:c3:4f:e0:df:85:0a:9f:
9c:65:43:80:c6:c5:f6:04:21:79:a9:df:80:5a:9b:a3:fb:84:
03:07:93:b4:cd:a5:44:2c:56:5c:b5:13:4b:f7:b4:a6:d8:c5:
1f:a2:16:9e:0a:79:e0:cf:7e:db:ba:6e:11:dc:ea:62:1f:34:
24:13:53:0b:86:1a:11:39:05:74:40:30:43:22:98:3d:0d:12:
4b:6e:40:52:81:9a:34:d3:53:32:c0:fd:54:42:a3:48:c8:91:
40:00:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net