Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/V3axZivK3WrjDfjp92dOnzYIRGs.roa
File: V3axZivK3WrjDfjp92dOnzYIRGs.roa (raw, json)
Hash identifier: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=
Subject key identifier: 57:76:B1:66:2B:CA:DD:6A:E3:0D:F8:E9:F7:67:4E:9F:36:08:44:6B
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 019422FBF609A3E41AED5144CA42F6A579DC
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/V3axZivK3WrjDfjp92dOnzYIRGs.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205184
IP address blocks: 23.19.48.0/22 maxlen: 22
185.84.200.0/23 maxlen: 23
185.129.40.0/22 maxlen: 22
185.151.204.0/24 maxlen: 24
185.230.36.0/23 maxlen: 23
185.230.38.0/24 maxlen: 24
2a0b:14c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f6:09:a3:e4:1a:ed:51:44:ca:42:f6:a5:79:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5776b1662bcadd6ae30df8e9f7674e9f3608446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:0e:88:bf:d2:75:d3:84:f2:5d:65:76:f3:
b1:8e:71:54:6d:67:59:55:85:30:5a:de:4b:01:9a:
db:27:c6:9e:f2:f0:af:4c:f6:fe:2e:8e:04:68:33:
8b:94:4c:53:91:ad:f8:10:87:a9:a5:86:8d:fd:e0:
2e:f8:50:85:b0:80:db:6a:ad:ba:1c:52:4e:a9:4a:
aa:af:ea:ea:5f:aa:31:0f:f3:03:16:77:dd:c8:bf:
bd:29:b8:13:53:06:9d:e8:2b:63:4a:89:a1:59:5a:
5b:9f:79:d0:47:45:cc:56:cf:21:a0:17:90:0d:46:
7e:5f:b5:9a:1f:af:a3:94:81:b4:16:45:16:fe:52:
7e:f6:ac:be:99:fe:6e:18:39:91:81:db:55:ba:cf:
24:94:6e:40:ac:f5:87:bb:02:d3:ab:6d:94:c1:95:
1c:23:f8:33:30:8a:e1:46:ac:b9:ed:e9:13:2f:38:
df:d4:60:94:17:c5:80:e5:5b:f8:9c:bb:d6:cd:c4:
3b:42:2e:9b:40:bf:56:62:a7:5a:92:82:71:e1:40:
a3:f0:67:ae:52:40:53:a0:63:4c:6a:aa:ea:0d:73:
29:5c:ea:b1:d2:3b:b2:de:79:7d:16:71:b8:07:a2:
1a:ce:d1:d0:90:9b:5f:80:f4:74:86:fb:f4:08:0a:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:B1:66:2B:CA:DD:6A:E3:0D:F8:E9:F7:67:4E:9F:36:08:44:6B
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/V3axZivK3WrjDfjp92dOnzYIRGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.19.48.0/22
185.84.200.0/23
185.129.40.0/22
185.151.204.0/24
185.230.36.0-185.230.38.255
IPv6:
2a0b:14c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
cb:76:e7:3c:0d:03:b8:8a:d2:1a:12:6e:d0:a8:ef:8b:0d:13:
a3:16:df:59:2a:31:d9:a5:7a:7f:61:20:ab:9c:74:f0:d5:b6:
1e:58:e5:27:63:10:c6:f3:c7:fc:f5:e0:12:ee:d3:66:d8:f4:
a0:cf:0a:16:67:b0:7b:19:ae:0a:bc:66:4d:71:01:20:61:b1:
a0:d1:ed:67:ce:bd:1c:8f:e7:13:fc:41:1a:6b:14:f3:ae:9a:
ea:b6:93:11:c3:0e:96:b4:4e:ba:a3:bf:fe:53:38:1d:6e:b6:
f6:f8:ec:47:59:fe:f6:fd:bb:6f:8f:64:89:99:8b:4b:05:c1:
ba:98:b5:75:a8:7a:8d:ad:6e:23:0c:f1:7d:f9:78:ac:13:e4:
b0:13:6a:3b:14:82:59:e9:2d:1d:d9:79:ef:89:01:b8:52:ef:
03:46:ec:45:a4:35:a8:e8:79:34:6a:df:97:ac:ae:03:1f:10:
38:c1:d5:57:b0:ef:97:eb:f2:71:06:fd:0b:3f:be:88:04:58:
f8:66:06:24:d5:b5:87:84:2a:41:dd:84:4f:7a:10:3f:3e:7f:
f1:51:73:85:05:65:07:a0:61:5e:63:7f:7f:6d:cf:85:63:02:
5a:f7:ef:e0:ba:bb:9a:0d:3b:22:87:89:d5:88:2a:34:7a:1f:
db:16:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:40 2025 by rpki-client