Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/q7ww2wDcTgipqytNvF8wuPFhkjg.roa
File: q7ww2wDcTgipqytNvF8wuPFhkjg.roa (raw, json)
Hash identifier: mdic1s+jxC7+rsCajcIo8dOXmgDPc11VAtR4iRswjDM=
Subject key identifier: AB:BC:30:DB:00:DC:4E:08:A9:AB:2B:4D:BC:5F:30:B8:F1:61:92:38
Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial: 01942369D6D06EEE33F75C6C1411C55D0943
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/q7ww2wDcTgipqytNvF8wuPFhkjg.roa
Signing time: Wed 01 Jan 2025 19:48:46 +0000
ROA not before: Wed 01 Jan 2025 19:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205889
IP address blocks: 185.185.172.0/24 maxlen: 24
185.185.173.0/24 maxlen: 24
185.185.174.0/24 maxlen: 24
185.185.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d6:d0:6e:ee:33:f7:5c:6c:14:11:c5:5d:09:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Validity
Not Before: Jan 1 19:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abbc30db00dc4e08a9ab2b4dbc5f30b8f1619238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:16:3c:dd:1f:6e:b5:9d:b0:2d:d1:f3:76:7c:
7f:f9:25:9f:9d:37:6a:b8:24:dd:ef:3d:56:87:17:
8c:94:70:b8:1b:fb:98:b8:a6:db:3a:82:44:84:6c:
5d:78:2e:e9:28:52:c3:76:a4:bb:dd:b0:9c:e6:1f:
e1:10:bb:62:9d:a5:3e:d0:93:64:c3:de:65:7d:58:
98:a6:16:f4:dc:3b:e6:00:bd:7c:ba:20:22:90:b4:
42:26:96:7c:24:a4:20:d8:bf:05:5b:31:03:41:93:
b5:57:9d:a0:74:bf:38:1f:c3:c5:e8:b0:51:73:9b:
01:58:e7:de:79:90:11:fc:31:81:ec:e4:bb:65:37:
0a:83:61:28:42:d2:8f:79:70:e0:62:cc:d4:8c:b4:
90:de:d9:7a:b0:7a:70:f1:08:a9:08:40:d2:a0:90:
af:0a:00:d3:f6:a5:cd:41:4f:d5:58:32:06:3e:72:
b0:4b:e2:5a:c6:9f:55:41:d7:f4:d2:3c:3d:64:6b:
79:96:c1:b7:32:0b:ba:3d:06:16:d1:24:ea:b8:c0:
da:78:8f:14:7b:d9:1e:f4:91:92:a1:0f:8f:e5:3c:
e6:a8:26:ef:8e:b9:e0:f4:57:b7:bb:4d:a6:a4:9c:
73:9b:b4:b6:8d:82:65:a1:82:5e:5d:75:d6:6f:83:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:30:DB:00:DC:4E:08:A9:AB:2B:4D:BC:5F:30:B8:F1:61:92:38
X509v3 Authority Key Identifier:
keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/q7ww2wDcTgipqytNvF8wuPFhkjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.172.0/22
Signature Algorithm: sha256WithRSAEncryption
82:74:b4:fc:04:c0:e0:20:31:84:90:5e:9e:97:da:4a:c2:94:
a5:1d:c0:6d:bf:a2:9c:f6:b5:a6:29:0c:d1:0d:60:17:dd:b4:
59:21:aa:09:1f:e3:d8:d7:41:ff:af:f4:b4:02:78:ca:78:fe:
37:1a:1f:08:71:fa:cb:3e:9d:e9:79:f3:f8:73:40:ea:2a:bb:
51:4d:76:f8:a7:e3:03:50:af:b0:b5:0c:37:8e:df:f3:d4:3f:
df:04:f3:16:be:01:a0:65:d7:ca:7f:ea:57:df:00:74:39:47:
e2:e8:dc:e3:a1:69:b5:41:5d:ba:f9:d3:39:49:a4:ca:77:49:
fa:05:6f:b2:64:44:d1:68:38:79:f1:d5:0a:3a:10:11:d8:a7:
26:1a:4d:ab:a1:88:74:9a:1b:d9:40:12:ff:74:c0:29:46:00:
3f:d3:c5:d4:ec:36:7e:2c:60:a7:e6:6a:b6:1a:23:d9:9c:62:
00:2f:1c:f9:59:73:9d:33:8f:c9:c5:48:c8:35:73:3d:9a:88:
59:49:c8:1d:dc:5c:21:5f:40:0a:7e:a8:2e:21:cd:8c:c4:f0:
e5:e3:7f:32:55:71:94:46:9b:f4:32:15:a4:0e:4a:70:0b:2f:
4e:4e:8a:2c:63:59:11:81:4c:c4:7f:64:a4:07:72:35:b8:1f:
92:2e:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:31 2025 by rpki-client