Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/5vHG0OxzvrqhI56hWt2APxlEca8.roa
File: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (raw, json)
Hash identifier: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=
Subject key identifier: E6:F1:C6:D0:EC:73:BE:BA:A1:23:9E:A1:5A:DD:80:3F:19:44:71:AF
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 019424458E8C3CED119149A7A62AB0DDEAEE
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/5vHG0OxzvrqhI56hWt2APxlEca8.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198432
IP address blocks: 185.18.198.0/24 maxlen: 24
185.18.199.0/24 maxlen: 24
185.68.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8e:8c:3c:ed:11:91:49:a7:a6:2a:b0:dd:ea:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6f1c6d0ec73bebaa1239ea15add803f194471af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:3d:78:5d:47:80:01:a7:bb:0d:64:81:7b:
05:c4:5a:97:da:c8:39:82:17:74:e2:d8:8a:e8:97:
a0:f0:b2:16:fb:61:b1:c1:6a:87:62:29:42:fe:a0:
7c:99:40:9b:53:21:23:ae:06:62:fd:7f:a8:9d:c6:
ce:79:86:73:b0:9d:3e:1c:76:5d:fb:63:eb:d1:a4:
3f:de:58:be:86:2b:80:4f:b4:89:ea:a8:8b:fb:ed:
44:e4:85:6e:a5:20:ba:11:50:1c:0d:d9:e5:22:f6:
4d:57:71:ad:30:84:f6:e5:4e:35:b1:05:6c:b2:a5:
a1:78:4b:29:03:cf:82:c0:63:4a:95:65:8b:bb:03:
48:46:8e:23:be:99:05:f2:0e:c1:e6:97:57:80:2e:
19:4b:70:2a:b7:1f:d2:37:f3:f2:b4:20:c7:00:e8:
9f:4b:a0:fa:35:cd:ba:5f:5b:b0:e9:9b:48:26:91:
97:d7:4f:1c:e2:5b:3a:5b:d9:e3:0d:6c:db:3e:d9:
ea:ef:9d:0f:43:72:b8:d4:e5:61:03:09:7d:e8:a2:
ec:8d:42:d3:09:1d:fb:d0:75:93:18:8b:e7:fc:02:
b8:bb:8a:3d:bc:13:c4:81:6f:67:34:44:1b:fa:d3:
49:7c:82:0e:2a:3d:31:97:d9:38:6f:52:de:46:b6:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F1:C6:D0:EC:73:BE:BA:A1:23:9E:A1:5A:DD:80:3F:19:44:71:AF
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/5vHG0OxzvrqhI56hWt2APxlEca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.198.0/23
185.68.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:8f:7e:bf:1d:b5:b4:b5:d3:96:cc:49:ff:55:e5:79:72:cc:
f0:f4:4d:b4:0d:b4:9a:d6:e4:86:7d:cf:fb:a7:e9:59:8c:a4:
0d:92:e5:bd:3e:87:61:73:6f:ef:af:0b:ae:b6:5a:ce:78:de:
2c:41:c4:bc:40:c0:57:cf:1b:40:2c:00:23:07:9f:1f:ff:35:
40:e1:0e:af:9e:9c:15:93:b4:05:5c:d7:94:a1:15:6f:88:a6:
2f:80:da:5f:16:ce:98:d0:da:ff:64:ad:07:49:86:74:99:30:
04:3a:79:c4:bf:1e:fd:4f:a2:b4:16:d9:5a:57:bc:38:b6:1c:
ea:f0:2c:95:81:7a:db:d5:ab:54:a5:31:88:30:4f:6f:a9:56:
67:92:50:e8:02:95:6d:87:26:0e:5d:f3:0c:5a:56:03:16:4c:
c8:23:37:25:15:6e:4d:f3:55:77:8c:96:67:bc:5d:c1:c5:e4:
64:55:dd:b3:49:97:28:52:d4:65:0b:c8:31:b1:65:bf:e8:88:
ac:1f:03:73:9c:f7:66:30:a8:1d:da:bb:d7:2a:7e:64:4f:0e:
fb:36:f1:09:4c:2d:c0:2f:5a:93:ab:06:1f:00:a7:17:a8:67:
fd:7c:ac:8a:10:e1:f9:47:6e:df:f7:e2:2c:c9:23:3a:c4:c6:
b1:b6:44:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:29 2025 by rpki-client