Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/55uUM8GKQ0QxJrAcXyTGCoblJOs.roa
File: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (raw, json)
Hash identifier: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=
Subject key identifier: E7:9B:94:33:C1:8A:43:44:31:26:B0:1C:5F:24:C6:0A:86:E5:24:EB
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 01942067E74831C2C2CDE5C619D06812F35E
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/55uUM8GKQ0QxJrAcXyTGCoblJOs.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211326
IP address blocks: 185.134.80.0/22 maxlen: 22
185.134.80.0/23 maxlen: 23
185.134.80.0/24 maxlen: 24
185.134.81.0/24 maxlen: 24
185.134.82.0/23 maxlen: 23
185.134.82.0/24 maxlen: 24
185.134.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e7:48:31:c2:c2:cd:e5:c6:19:d0:68:12:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e79b9433c18a43443126b01c5f24c60a86e524eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:f8:1e:bd:1b:28:54:90:3f:57:f6:69:fd:
3b:7b:fe:59:ce:e2:5c:8f:5b:19:72:9b:3a:68:96:
98:28:ce:f7:b0:a1:8d:f2:92:76:88:a9:de:87:87:
a6:e3:24:92:43:18:8c:0a:10:8b:fc:93:59:e0:fc:
f8:db:6b:e5:cc:71:98:c4:d9:c4:cb:a9:5f:0a:7d:
25:50:8a:22:d3:be:60:ed:59:48:ee:e6:bb:96:8e:
35:cc:af:64:e4:c1:1e:6d:c3:0c:d8:4f:b2:1f:1e:
1e:22:8e:3d:fb:4c:b1:9f:63:a1:18:89:d3:e5:42:
54:4e:7e:22:07:d2:42:59:a3:be:a0:e7:e5:94:eb:
f3:85:5a:4e:7c:c1:dd:55:52:0e:ea:60:dc:fc:5a:
f2:86:da:53:c1:9f:ce:24:5a:55:07:97:33:5b:db:
ae:28:fe:3e:72:1f:b7:82:a8:f3:f8:2a:8b:6f:64:
73:ad:7a:eb:e8:13:15:6f:8a:b0:23:95:4b:24:f2:
89:08:08:24:73:6e:a1:25:9d:f0:97:95:b2:4a:f2:
c0:29:e0:57:1e:9e:89:3c:c5:00:87:1b:24:c8:de:
c7:4b:f4:6d:d5:a7:db:d8:08:52:d1:11:29:23:f5:
11:30:1d:20:37:ce:31:66:b7:77:15:2e:da:24:91:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9B:94:33:C1:8A:43:44:31:26:B0:1C:5F:24:C6:0A:86:E5:24:EB
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/55uUM8GKQ0QxJrAcXyTGCoblJOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:73:92:86:73:5e:18:f9:d7:67:76:f1:64:e3:d2:80:b3:1e:
74:f8:7d:65:61:d1:f5:84:cb:51:69:b6:6d:a9:65:e9:52:f4:
e4:fb:c1:7c:39:57:ec:2c:65:6e:fa:e5:ae:ee:f5:34:3b:e0:
42:9a:0e:19:37:73:57:df:fe:45:bd:96:39:55:cb:da:97:09:
a3:65:4a:92:62:00:ad:67:3c:3a:f3:db:ac:3c:d2:6d:c0:cc:
03:1e:25:62:6f:1a:80:be:0e:f5:cc:3f:44:72:cf:eb:3c:3c:
0b:60:3c:e6:55:12:6e:cd:b1:9d:a6:9c:36:f0:23:54:5a:d3:
e1:84:10:bc:dc:eb:ae:7a:f7:45:e6:91:2a:90:75:de:e1:12:
18:7a:21:b4:c1:d6:7c:d5:4a:1c:a8:e0:93:0d:8c:3a:f5:58:
87:66:f8:64:58:1f:23:b1:bc:aa:59:5c:40:b9:59:96:21:67:
02:cf:53:46:ce:8e:c6:75:7b:db:5e:38:73:0d:0b:8e:dc:80:
34:f5:10:5d:94:fe:62:60:bb:19:de:fd:d6:9c:b9:dc:38:09:
c1:cb:35:52:05:8a:74:4f:10:d8:c8:9a:0a:c5:a4:eb:91:b1:
e2:e4:1a:27:26:66:00:26:5a:36:c6:e7:a3:1f:8f:91:78:8e:
ee:77:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:00 2025 by rpki-client