Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/xEVUwNoistpr086p8wiZOj3lAS0.roa
File: xEVUwNoistpr086p8wiZOj3lAS0.roa (raw, json)
Hash identifier: jssBpk2I1njjei0F0mwFNz5A15Y3I0c8WhHM6GhLppA=
Subject key identifier: C4:45:54:C0:DA:22:B2:DA:6B:D3:CE:A9:F3:08:99:3A:3D:E5:01:2D
Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial: 01942521D10C0C6E4F7BF47B642214BA4B77
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/xEVUwNoistpr086p8wiZOj3lAS0.roa
Signing time: Thu 02 Jan 2025 03:49:20 +0000
ROA not before: Thu 02 Jan 2025 03:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29468
IP address blocks: 185.102.16.0/22 maxlen: 22
185.102.16.0/23 maxlen: 23
185.102.16.0/24 maxlen: 24
185.102.17.0/24 maxlen: 24
185.102.18.0/24 maxlen: 24
185.102.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d1:0c:0c:6e:4f:7b:f4:7b:64:22:14:ba:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c44554c0da22b2da6bd3cea9f308993a3de5012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:db:d7:f9:81:e6:65:84:e6:55:32:13:2e:
c4:08:48:24:54:90:41:0c:bc:f5:4b:f7:de:ec:86:
1d:f5:f1:6d:08:1e:df:e2:fd:ff:e0:38:9e:95:b1:
9a:78:e1:4c:83:83:e2:4c:15:ee:11:23:f7:49:9f:
c0:2e:94:89:e3:2c:df:d6:f8:99:d4:ee:13:e9:c0:
27:f3:fe:44:42:fd:71:79:4b:d9:93:97:12:c4:7b:
79:00:2d:89:b0:af:02:c5:85:ad:e7:43:a9:4f:e7:
bb:40:0b:52:d0:08:ad:36:3b:f0:95:4d:6a:11:bf:
ee:71:41:15:38:5e:c9:4a:7e:26:18:a4:46:27:fc:
2b:03:3e:c4:2a:f6:e7:41:2a:54:17:12:0e:55:24:
12:06:c7:20:a9:8e:06:87:85:87:95:bd:d0:d7:e2:
63:e5:ca:28:f8:d5:fe:5f:de:fd:a2:d6:44:63:87:
fe:a0:18:46:56:60:fc:cf:33:8e:35:db:42:3c:fd:
13:cd:92:55:5c:6d:5e:c1:11:f5:83:6d:8e:a0:31:
9b:60:93:39:84:9b:af:d5:6e:b4:c0:e4:7f:22:f0:
4f:a3:a0:6f:69:a5:8a:47:fe:8f:3b:cb:9a:e5:42:
35:7d:48:24:d0:44:1c:c8:02:ea:f6:09:6d:59:0d:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:54:C0:DA:22:B2:DA:6B:D3:CE:A9:F3:08:99:3A:3D:E5:01:2D
X509v3 Authority Key Identifier:
keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/xEVUwNoistpr086p8wiZOj3lAS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.16.0/22
Signature Algorithm: sha256WithRSAEncryption
93:13:a8:44:62:7c:c7:44:88:0e:11:04:02:97:87:4b:8c:32:
b3:d7:f9:46:68:b3:c2:49:c3:47:b2:32:02:1b:5d:62:e9:9e:
1a:9f:a7:25:1b:4b:30:4b:d9:86:ca:5f:a4:d5:8a:0d:c2:9b:
e1:00:6a:73:61:23:0b:fd:02:4b:75:38:ee:f2:32:bb:05:a1:
4d:c8:74:cc:b9:76:a2:1e:08:85:de:88:3a:8f:55:e4:06:7c:
f4:0c:ab:41:1e:a3:c7:a5:a9:9c:bf:6f:a7:66:e1:12:90:be:
7d:87:c7:ba:59:33:60:b5:80:63:2b:26:5a:96:04:b6:f5:bd:
48:c4:10:d3:06:f9:5b:be:5d:af:7b:47:e1:a3:48:a5:ad:10:
29:7d:7a:93:3d:96:33:65:39:53:2a:69:16:67:20:10:0b:5d:
e2:d5:4f:f0:18:20:3b:c1:11:fe:35:5f:4d:22:18:c4:34:60:
af:fc:24:77:15:ce:d2:8e:1f:d8:f1:10:62:d7:b4:5a:de:88:
4f:5c:53:82:88:01:f8:07:ef:41:82:1f:08:91:3a:0e:00:49:
ba:76:7e:9b:dd:66:92:9c:7d:28:62:13:b4:74:e0:d7:58:97:
c8:43:15:70:0f:7b:3a:bb:e0:c7:57:15:0e:b1:49:22:ad:28:
f0:c0:1a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:57 2025 by rpki-client