Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa
File: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (raw, json)
Hash identifier: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=
Subject key identifier: 0D:76:35:68:F6:4E:47:89:63:8D:F2:8D:9D:3C:CA:FA:E8:B6:1A:D4
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 019421443DF2896E0BFD50389C22A8DF6053
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12844
IP address blocks: 185.183.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3d:f2:89:6e:0b:fd:50:38:9c:22:a8:df:60:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d763568f64e4789638df28d9d3ccafae8b61ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:12:fe:68:51:06:5a:9d:6d:3e:24:67:cd:
af:39:48:f2:cb:dd:94:16:5a:0b:32:55:f2:ef:bd:
b1:82:20:55:7e:c5:49:7b:cd:11:23:7d:f8:7b:08:
96:23:82:96:96:22:af:b7:ed:85:2d:15:48:1b:fb:
26:5b:d7:eb:ea:2e:b2:b7:f8:74:4b:a8:1a:91:30:
8c:5f:7d:a4:2e:ce:f1:9c:27:bb:29:74:eb:64:05:
86:a5:c8:fc:e1:7e:b7:8f:e6:12:5f:70:a2:2e:3a:
e1:5c:4f:22:79:fb:a5:b7:a2:24:f1:c8:15:74:db:
8f:ec:d8:fe:d8:c7:6f:10:e6:95:15:38:ad:9c:0e:
5b:8a:f4:ee:2b:0a:06:ae:53:25:66:29:0e:3f:13:
43:40:6a:55:5f:30:c1:41:2f:c2:83:ef:c9:5d:31:
36:bb:57:c2:70:de:7e:ee:e1:66:ad:32:d6:fa:1a:
30:1b:81:51:14:98:13:6d:f1:8b:c0:5d:c4:9d:d1:
19:d6:be:39:36:34:a5:2c:ff:5e:fc:e6:4b:aa:f6:
a6:8b:0c:bc:58:ef:fe:02:dd:fe:47:07:8a:58:59:
3a:49:b3:cf:f4:f2:59:09:a4:7f:b8:c4:34:5a:3f:
00:45:54:a6:60:fd:32:47:ba:6f:cb:fe:09:42:13:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:35:68:F6:4E:47:89:63:8D:F2:8D:9D:3C:CA:FA:E8:B6:1A:D4
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:a5:ae:10:e4:e1:27:f9:84:2e:33:36:b2:2f:91:be:90:26:
2e:3c:33:94:aa:71:30:34:ca:3e:2a:c3:8a:17:87:6b:44:2b:
61:e4:15:a0:47:c4:7c:83:af:62:1c:c5:c3:a7:d9:c8:8e:97:
25:3a:1b:bc:21:92:99:e6:5f:54:ca:34:0a:69:14:a5:88:f5:
47:36:cf:f2:1d:1d:02:a8:a6:8c:80:40:b9:67:82:28:8a:52:
8c:0f:1c:13:73:97:f9:ca:73:36:e6:b0:83:38:5f:bc:a9:58:
fb:cc:3f:71:46:8a:7c:8b:bd:74:00:dd:f7:97:15:f1:ec:08:
9b:7b:4d:0b:4e:28:f8:7a:37:8f:3e:ec:b1:84:a0:a7:5d:95:
e7:da:8c:79:10:52:72:de:64:0f:de:27:b6:02:08:15:04:86:
25:d5:7b:57:75:be:58:d0:7f:83:3a:3c:45:43:58:5c:1c:78:
6c:bb:72:1c:12:5f:98:85:10:24:ae:1f:32:c2:c3:7e:cb:05:
94:10:a5:7d:e0:54:51:b2:b9:8d:75:24:82:9e:99:3e:f0:1b:
3d:b6:4a:e3:97:bd:44:b2:0d:af:af:61:c2:38:5d:2f:d1:45:
65:24:09:e9:a8:c3:66:52:4f:02:2f:bc:31:1c:11:a7:49:0b:
07:86:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net