Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa
File: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (raw, json)
Hash identifier: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=
Subject key identifier: A4:ED:CB:AF:88:E2:37:AD:4A:9F:8F:65:50:35:5D:FD:2D:0E:56:F3
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 01942823F07A88C081ED910EB7D125EF0402
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa
Signing time: Thu 02 Jan 2025 17:50:31 +0000
ROA not before: Thu 02 Jan 2025 17:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59800
IP address blocks: 185.68.196.0/23 maxlen: 24
2a05:19c0::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:f0:7a:88:c0:81:ed:91:0e:b7:d1:25:ef:04:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Jan 2 17:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4edcbaf88e237ad4a9f8f6550355dfd2d0e56f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:78:50:90:37:ad:b6:06:02:a8:50:35:4c:
06:eb:14:45:96:e9:52:77:69:70:f7:38:bd:f8:20:
96:0b:6a:f6:f4:95:07:71:6b:e5:22:a9:f5:01:ae:
6c:b1:72:9f:fb:58:e0:a9:b3:06:61:db:8d:a2:b6:
b7:de:91:dc:5e:64:8d:8e:09:54:05:7a:c7:07:fd:
00:94:ef:44:5b:19:0b:bd:9b:4a:10:7d:25:7d:f9:
66:0d:9b:bf:ec:e4:cd:7d:ed:33:72:04:70:2a:4e:
93:49:40:d1:a5:11:b0:9f:3d:fb:c9:84:ac:4e:20:
ca:2a:c7:ec:bc:ff:89:f4:30:f7:22:45:bd:67:b8:
7b:4c:49:09:4b:9c:24:53:bd:da:f3:8f:39:5b:93:
60:eb:e2:67:8b:cd:fc:a7:0e:17:42:df:62:1d:b8:
0f:0d:0c:a0:a8:a4:1e:e6:99:34:87:46:03:4f:96:
86:44:06:d4:f7:bc:3b:fa:53:ee:76:5c:65:62:e9:
69:93:8a:6c:50:be:1a:d5:6f:c2:ec:3a:4e:fa:d5:
f8:31:3f:5c:f9:6a:45:c1:7a:b4:6e:85:e1:6c:22:
5e:00:86:65:13:db:d7:2d:31:27:82:6a:ae:db:62:
76:cb:6b:5e:b4:2c:ef:a1:8c:ec:16:44:5f:dd:e5:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:CB:AF:88:E2:37:AD:4A:9F:8F:65:50:35:5D:FD:2D:0E:56:F3
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.196.0/23
IPv6:
2a05:19c0::/47
Signature Algorithm: sha256WithRSAEncryption
55:8f:5f:f7:04:a4:6a:be:4f:3c:b4:ba:60:14:41:24:3d:fa:
1c:cf:0c:f5:2b:84:f0:f2:86:a7:f8:ce:99:2e:e1:a8:bc:d9:
09:78:59:f7:13:fc:3b:7a:9f:22:91:a6:f7:57:bb:b3:cb:96:
8f:18:9f:02:5b:9c:db:b2:b4:a0:80:6e:64:6c:d0:37:25:72:
24:ec:48:8e:70:39:72:6d:61:5a:07:aa:40:d8:69:ed:89:6f:
86:b9:e6:ae:72:45:9e:5e:7e:2f:85:a2:f9:e0:0d:42:1e:b2:
13:bc:8c:1a:55:1d:71:29:c4:c7:cb:eb:4a:2e:5c:80:0b:42:
05:f8:b0:92:37:f5:e3:42:e1:db:fc:e1:7a:a9:95:1a:92:cf:
37:42:46:d7:c7:99:f4:38:9d:1d:cf:3c:f9:29:25:ad:1e:52:
ad:fd:f7:e2:6f:f4:c3:78:67:f0:a3:55:e2:ab:de:db:a5:cd:
1e:de:1b:0c:b0:5e:de:e1:92:61:71:12:95:4e:98:6c:67:35:
4e:dc:49:bc:a6:fb:13:71:01:38:f3:11:63:b6:ee:1e:cd:63:
e5:84:dd:72:e7:99:33:b6:b0:f5:a6:48:58:9b:98:05:70:60:
f0:04:c7:c3:bb:71:01:0a:aa:d3:a8:a0:73:6f:aa:a1:c9:40:
1c:cd:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:01 2025 by rpki-client