Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/7Wfm8N_BNNM1ZIAzk65u_y1CoxQ.roa
File: 7Wfm8N_BNNM1ZIAzk65u_y1CoxQ.roa (raw, json)
Hash identifier: vGKhwTsZ6bUD5wem1afZhHCNpuoU8y3whIP7i2K9fc8=
Subject key identifier: ED:67:E6:F0:DF:C1:34:D3:35:64:80:33:93:AE:6E:FF:2D:42:A3:14
Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Certificate serial: 01942747BDCEFC443AEE66422E2B0BA594C6
Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/7Wfm8N_BNNM1ZIAzk65u_y1CoxQ.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211079
IP address blocks: 185.83.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bd:ce:fc:44:3a:ee:66:42:2e:2b:0b:a5:94:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed67e6f0dfc134d33564803393ae6eff2d42a314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:15:91:18:4d:bc:ab:d0:3d:bd:81:0c:50:
d0:bd:30:45:ab:fc:5e:27:15:26:cc:69:98:d1:c6:
be:cb:bc:f1:04:99:59:ab:7b:c9:21:2e:14:d4:cf:
30:41:77:b0:cb:b1:16:c5:51:72:a2:ce:63:41:c5:
b0:37:17:37:b4:a0:27:3d:b3:13:5b:f2:18:07:7f:
2d:61:df:87:4b:4b:e0:d2:f2:c3:66:5d:a1:6e:e6:
8f:94:be:45:9a:0a:60:e8:53:2a:4b:50:b1:93:b4:
d8:2f:66:04:35:34:f1:62:30:be:db:a8:77:e7:52:
99:fd:f6:58:ca:11:63:f1:a0:cb:9e:ac:40:8b:2b:
5f:0b:8e:69:12:3b:b1:d4:5f:60:c4:fd:a1:2b:03:
cd:ae:6e:8d:27:54:23:3d:30:0d:88:3c:96:e8:b7:
b2:13:b9:c7:65:f5:9e:75:57:e1:f8:af:af:20:9d:
74:5d:a5:6d:8a:93:47:e9:a7:60:e8:e0:05:6c:32:
13:0a:95:a6:03:d9:a5:f8:31:fb:ba:eb:3d:f8:07:
8a:5a:2f:0a:70:22:21:f6:df:7a:a2:b8:5c:da:58:
7b:fb:f7:8e:4b:d8:9c:34:c9:2b:93:c9:0c:84:3e:
c3:a6:82:62:2e:c2:a5:ef:d7:91:ed:ef:28:28:3f:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:E6:F0:DF:C1:34:D3:35:64:80:33:93:AE:6E:FF:2D:42:A3:14
X509v3 Authority Key Identifier:
keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/7Wfm8N_BNNM1ZIAzk65u_y1CoxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.228.0/24
Signature Algorithm: sha256WithRSAEncryption
af:52:44:e0:db:0f:7f:b5:31:ad:d1:a5:2b:23:13:a5:e1:cb:
98:29:1c:5b:50:5c:b4:4c:20:e2:7a:d8:d1:a5:0b:97:22:3d:
88:6a:93:0f:f4:64:ec:5a:95:6e:49:57:08:35:33:55:93:a3:
e4:02:21:2c:2a:af:96:e7:4f:0d:67:56:59:1c:86:cf:b4:0a:
66:f9:d1:93:39:ed:5e:58:a1:ad:1d:df:7a:ec:39:36:9b:c7:
2b:25:86:dd:e6:ad:53:41:77:41:3a:48:5a:18:5c:a3:0d:0a:
78:11:a0:97:7d:3b:ed:36:e6:a9:70:fd:ca:a1:57:6d:52:f7:
ed:c4:2c:f0:7b:df:08:5c:37:be:b7:51:a3:a0:5b:17:09:93:
83:fa:27:c0:e6:0e:c9:10:41:ac:fb:62:83:b4:69:db:6d:85:
a3:ac:4a:3c:df:70:18:d1:b6:68:de:0a:14:06:59:9c:1f:9d:
70:de:6b:85:6e:e9:10:f9:38:20:dc:13:f7:9f:95:7b:c7:05:
d4:1c:e8:a2:46:3b:17:1d:bf:1b:99:14:1d:f9:d8:9d:13:96:
cb:6d:48:60:d2:6e:ee:4a:f7:d0:6e:b4:4d:07:1d:6b:bf:c8:
f1:56:85:0e:a2:59:13:b4:0e:f3:de:2d:c0:4d:a7:16:6e:eb:
12:80:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:07 2025 by rpki-client