Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/v05yfGi9C_17HLObMwDo5FEICGE.roa
File: v05yfGi9C_17HLObMwDo5FEICGE.roa (raw, json)
Hash identifier: /OVS3c7m1p/c35QFzc0QWZFHRzFKrme9OTRuEH9/X8k=
Subject key identifier: BF:4E:72:7C:68:BD:0B:FD:7B:1C:B3:9B:33:00:E8:E4:51:08:08:61
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 019423D702F6E8E248A41131C65CF36B39CE
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/v05yfGi9C_17HLObMwDo5FEICGE.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212907
IP address blocks: 185.187.84.0/24 maxlen: 24
185.187.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:02:f6:e8:e2:48:a4:11:31:c6:5c:f3:6b:39:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf4e727c68bd0bfd7b1cb39b3300e8e451080861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:71:73:0f:e4:19:02:0a:33:43:44:57:2e:
02:41:86:12:17:1a:ab:b9:ba:7a:b4:4b:62:87:ac:
b4:27:8c:7c:60:9d:f4:65:1e:31:45:b9:62:29:5d:
74:4b:62:70:62:e4:80:c5:9f:bc:78:bd:bd:02:51:
08:51:3f:95:0a:61:03:8a:2f:57:be:7b:96:5e:d0:
2e:4f:44:5c:2d:f7:dc:ad:21:48:07:19:62:f0:16:
34:27:39:20:a5:c5:4a:81:78:32:96:2e:a1:57:e4:
cf:0d:33:c2:82:fc:c6:91:80:93:4e:fb:eb:8d:7d:
a4:a0:25:d1:b1:71:20:77:12:d5:60:23:3f:30:0b:
77:3d:48:86:ef:51:a5:2f:32:a9:af:c9:09:17:f1:
28:78:fd:b1:65:23:49:26:38:2f:8c:f1:34:85:1d:
03:fb:f7:1a:f9:d5:08:d9:66:a0:f7:e4:27:fb:84:
e1:5b:3b:cb:35:f1:92:3c:e1:1a:3f:a0:08:7b:14:
fa:9c:3f:e5:f8:2d:34:ef:16:5b:32:3d:3c:b0:f4:
c9:7c:23:8e:c4:4e:8d:6d:70:70:69:b1:5e:fd:82:
9b:fc:0c:fd:b6:a1:21:e2:a1:76:70:78:64:ef:46:
7e:98:be:2f:db:35:ee:76:1c:b4:62:f9:03:b7:6a:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:72:7C:68:BD:0B:FD:7B:1C:B3:9B:33:00:E8:E4:51:08:08:61
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/v05yfGi9C_17HLObMwDo5FEICGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.84.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:38:ee:58:07:72:d0:b5:ad:a0:3f:e9:bd:e4:86:c4:85:b2:
8f:93:7f:26:a3:5e:9b:a8:6e:45:bb:b1:53:f2:5a:d6:94:ae:
7c:8a:08:4c:7c:b4:6a:3e:de:52:33:51:8b:3f:17:ba:d8:6e:
10:38:a4:4b:df:2e:98:4e:77:28:c1:27:ea:5f:0b:eb:c6:43:
ad:06:4e:99:de:7f:53:5a:03:d3:9e:b3:db:dd:cd:96:da:6a:
c3:d5:ed:8b:0b:96:9d:37:2e:04:09:21:9b:0a:26:ed:64:bd:
04:ac:50:01:65:bc:93:15:e1:ef:e8:fd:5c:df:bf:18:c0:2d:
f7:6b:dc:73:1e:4f:42:26:24:d9:db:9c:c2:7a:28:61:bb:c0:
77:63:23:77:e1:32:1a:a0:b0:2c:a4:c7:d4:e9:cb:7a:40:b7:
a7:5b:cf:45:b9:d5:0a:b5:2b:37:a4:e3:a1:7a:94:5e:86:45:
cc:63:cb:f1:f7:ea:8e:d2:8c:b8:1b:9f:89:81:4b:35:1f:18:
42:45:ea:14:d8:d0:7a:cd:69:61:86:3c:45:c9:0a:d0:d7:3e:
bf:83:d7:41:c5:b9:97:07:26:50:44:08:e8:d1:75:8a:fa:de:
4b:fe:c5:81:7a:28:9e:e0:48:d1:ae:4a:a7:fe:62:0a:9d:1e:
48:12:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:53 2025 by rpki-client