Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/h9zvvPI2dBY4jNWQKpPxUoE047A.roa
File: h9zvvPI2dBY4jNWQKpPxUoE047A.roa (raw, json)
Hash identifier: PkWglafHXDxF9KIzM61BgLg1omYPGots3ZThAKgjHP4=
Subject key identifier: 87:DC:EF:BC:F2:36:74:16:38:8C:D5:90:2A:93:F1:52:81:34:E3:B0
Certificate issuer: /CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Certificate serial: 0194252160B55B45182EAAC8107EF620AA5A
Authority key identifier: 6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/h9zvvPI2dBY4jNWQKpPxUoE047A.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203200
IP address blocks: 185.122.76.0/22 maxlen: 24
2a10:d340:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:60:b5:5b:45:18:2e:aa:c8:10:7e:f6:20:aa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87dcefbcf2367416388cd5902a93f1528134e3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:8a:ce:48:e3:59:ad:b9:68:fc:45:19:08:
8b:cd:99:28:ef:5c:3f:08:2a:c9:36:64:74:92:99:
95:59:56:7b:ff:df:6d:79:2d:c2:d9:25:68:04:e1:
70:97:b5:df:a6:14:a0:e3:03:4d:5c:53:64:d2:98:
2d:c0:c6:d4:ca:29:e3:e3:0e:57:5b:fc:61:39:5b:
17:bb:dd:fa:80:5e:0c:c8:3b:05:23:da:61:a1:17:
f5:61:af:78:c4:7e:69:9a:83:54:71:9c:ac:93:49:
b2:35:2f:94:fb:6d:a5:55:f4:6c:6a:2f:b2:f3:7d:
25:bd:10:48:23:b3:0e:0c:13:ec:31:c3:50:5b:68:
ea:4e:3c:a1:ef:42:0c:73:be:c5:ed:5f:ee:f8:df:
da:62:91:14:fc:08:bd:c7:ad:e1:60:e6:7a:9a:e2:
52:f5:e4:20:97:1e:ca:b6:10:61:90:6f:4b:0c:93:
e9:e3:37:de:fe:cb:94:ad:2c:d3:30:a6:8f:d3:9e:
df:10:cb:d2:c8:da:e5:84:30:01:8a:e3:14:31:5d:
50:5a:b4:a4:4c:3f:ac:9c:64:1a:87:78:14:1f:64:
d0:2c:16:83:bb:08:51:25:72:7d:53:85:ee:b7:84:
26:9a:25:84:c9:ad:41:cd:f9:1e:5c:b8:5c:32:ce:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DC:EF:BC:F2:36:74:16:38:8C:D5:90:2A:93:F1:52:81:34:E3:B0
X509v3 Authority Key Identifier:
keyid:6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/h9zvvPI2dBY4jNWQKpPxUoE047A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.76.0/22
IPv6:
2a10:d340:1::/48
Signature Algorithm: sha256WithRSAEncryption
65:f3:33:4e:fa:a3:9c:3b:6b:14:3f:10:4b:91:47:5f:a3:1c:
e7:a3:4a:db:b9:f0:dc:ee:cf:b3:41:42:89:74:fe:b8:dd:7c:
30:35:d5:6e:8f:be:84:d4:13:36:ee:ac:f4:e3:36:02:22:4e:
1f:01:9a:02:bd:70:69:7d:48:c1:a0:ae:31:d8:37:ef:f2:07:
0e:e8:1c:3b:af:65:e9:21:d6:7f:08:ea:db:a0:65:28:44:b6:
58:f6:80:97:2c:c0:e6:cb:04:13:9c:16:08:df:8a:13:02:cc:
e8:7f:de:02:59:1a:df:b5:76:32:32:f4:bf:a3:13:89:19:2e:
c2:69:e7:24:61:7b:5c:21:4b:a3:57:3e:c3:2d:6e:fa:09:4a:
2c:69:13:d0:07:a1:39:b1:8d:94:af:1d:39:40:04:db:32:3c:
5b:bf:9c:46:17:01:26:7e:dd:27:d7:f2:dc:a3:c6:f4:76:fc:
d9:94:70:9c:92:95:47:1d:03:08:9e:56:4d:14:ce:80:10:0d:
78:a3:d6:93:2a:eb:aa:c9:58:27:b9:31:e9:07:c1:38:88:f8:
14:ce:c7:51:98:e8:01:78:3a:d9:40:5d:ec:13:70:b1:d4:8f:
05:40:1f:51:1b:16:2b:6d:58:5f:1b:17:a6:a5:26:14:11:d4:
6f:9e:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:45 2025 by rpki-client