Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/g_WJ1Q2GyVj2D5mwLA6Id73qHro.roa
File: g_WJ1Q2GyVj2D5mwLA6Id73qHro.roa (raw, json)
Hash identifier: 3Vw0Xqb+0QwKqB2bM3G/6hEiWo1+ZtSCbV9YwE9dtBI=
Subject key identifier: 83:F5:89:D5:0D:86:C9:58:F6:0F:99:B0:2C:0E:88:77:BD:EA:1E:BA
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 01941FFA75DF6D2FBE49143A111B64B426B6
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/g_WJ1Q2GyVj2D5mwLA6Id73qHro.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.120.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:df:6d:2f:be:49:14:3a:11:1b:64:b4:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83f589d50d86c958f60f99b02c0e8877bdea1eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:2e:fd:44:97:2b:04:d0:6a:c4:c8:44:df:
99:de:1b:83:61:b9:03:55:c1:d3:d7:7f:ee:5d:4f:
c2:9d:cf:8a:da:0e:fe:39:7f:0d:0c:cb:3e:cd:18:
2d:94:c0:df:6b:5c:73:05:a0:ed:b1:e1:9c:38:6d:
ec:11:55:f7:c3:8f:d4:d8:8e:20:de:4c:a6:5f:23:
2b:80:3c:c4:7a:b8:e7:d9:13:0c:ca:15:38:91:68:
72:50:f4:0c:a4:9e:53:51:3b:83:e6:a6:3b:b5:8d:
3f:2b:cf:4f:73:19:f6:70:58:85:7b:9d:b4:b6:5c:
4a:5b:58:0a:49:7c:f6:20:c8:63:97:a6:3b:d7:f9:
17:30:0f:39:af:fc:85:62:1c:b1:97:a8:65:b3:cf:
ec:4e:3c:7a:ce:1a:3c:47:b9:cf:ee:ad:f9:1f:b1:
d9:bf:e0:4b:6d:ef:7c:ad:20:8c:a1:24:9f:fc:3d:
14:57:43:90:02:62:9b:d8:b5:42:4c:7d:12:bc:31:
1f:b8:a5:61:c1:b0:87:1a:36:f1:6a:7d:b4:f1:ce:
ea:69:c5:be:af:cc:b2:c8:a9:aa:38:05:7e:0a:af:
b9:f0:ac:9a:4d:9f:bb:03:70:4f:20:ee:cb:4a:31:
24:0f:d7:e8:e4:05:0c:cb:6f:35:31:0f:9f:96:6e:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:89:D5:0D:86:C9:58:F6:0F:99:B0:2C:0E:88:77:BD:EA:1E:BA
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/g_WJ1Q2GyVj2D5mwLA6Id73qHro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.92.0/22
Signature Algorithm: sha256WithRSAEncryption
43:9f:70:7a:d1:a5:31:0e:f8:ef:3b:f1:52:e7:e9:72:86:4b:
88:da:ad:89:d4:4d:ce:14:5d:a0:03:65:0a:94:67:60:c8:ff:
60:31:ff:1d:44:7a:2f:d7:eb:72:62:3c:45:44:ee:d0:d4:c9:
04:c6:f3:3b:57:61:a4:50:ea:b4:86:13:71:47:1e:78:43:a6:
0b:82:28:ef:5d:fd:af:46:3d:c2:35:4d:92:a5:dc:4b:8b:50:
5a:5f:90:e2:bf:0a:71:a1:78:fb:62:53:4c:96:70:9c:52:56:
73:02:b0:05:0f:1d:d6:2a:94:6f:22:d3:6e:46:a5:aa:c8:41:
6d:9a:e9:26:ca:6c:6c:a6:3f:8b:4e:38:bb:57:69:ba:e1:44:
69:9f:25:79:dc:04:a7:2f:3f:b1:10:6f:11:72:cc:9e:15:08:
ab:b1:0a:ce:3d:ef:86:1c:10:0d:af:4c:fd:4d:22:5a:66:b3:
76:aa:8b:35:7e:68:6d:b4:d7:8e:ce:a5:f1:8f:e8:f5:b1:8e:
61:f5:e9:59:f5:18:db:e4:58:2d:7f:b5:5d:81:01:c7:07:7b:
df:07:e5:7e:b1:58:18:f3:30:9c:71:53:45:73:ff:5a:c9:18:
35:df:b7:42:ca:69:1f:d8:30:f9:a1:19:9b:3a:8e:e4:a5:ac:
97:61:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:09 2025 by rpki-client