Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/yMibhdeNkrtpzm1LIcJxa2aSGEE.roa
File: yMibhdeNkrtpzm1LIcJxa2aSGEE.roa (raw, json)
Hash identifier: FzeHPUN5/1eWMKZnzxinmg7lQbi1t/jROjMl/iHf/wE=
Subject key identifier: C8:C8:9B:85:D7:8D:92:BB:69:CE:6D:4B:21:C2:71:6B:66:92:18:41
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 019423D6FFCBE082FA093CA8F4D98ECDCADD
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/yMibhdeNkrtpzm1LIcJxa2aSGEE.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200189
IP address blocks: 185.108.36.0/23 maxlen: 24
185.108.36.0/24 maxlen: 24
185.108.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ff:cb:e0:82:fa:09:3c:a8:f4:d9:8e:cd:ca:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8c89b85d78d92bb69ce6d4b21c2716b66921841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:2b:40:19:47:ff:d0:e0:0d:fe:3c:a2:02:
2b:5f:79:ba:2c:6f:f7:7f:f2:75:cd:03:f8:c9:2c:
16:1c:91:fd:54:f8:64:5c:ed:ef:da:00:62:34:d3:
05:d5:4e:c9:32:ec:af:19:6d:18:d3:3c:55:a3:09:
ba:e5:d7:f0:0d:1f:a3:ff:d6:3d:11:13:17:88:96:
0f:96:b2:6d:82:9c:5f:fc:ef:6d:b1:30:e4:28:67:
aa:00:05:86:a5:7c:d4:0c:7b:4e:9b:a5:6a:69:08:
f7:7d:57:af:66:07:3e:0d:e2:b7:db:18:a8:c2:4b:
18:4c:44:d8:c9:45:ae:6d:67:8e:64:bc:45:79:15:
92:89:f8:83:71:14:51:f7:d8:92:50:74:01:35:5e:
6a:7d:c2:50:29:e4:93:d4:e5:d1:7b:be:0c:56:81:
ce:77:9c:62:d3:44:e8:c5:1d:25:63:c0:93:e5:39:
a3:96:e2:36:39:dc:08:87:6e:62:cf:95:9e:85:8a:
26:1e:c9:72:98:6d:bc:0a:6e:9f:99:a5:3f:08:34:
09:a1:59:1d:d2:95:3f:5a:2a:89:79:cc:6f:c7:cf:
36:52:61:53:87:6f:cb:0f:c5:9b:87:7f:05:91:0f:
ee:37:63:5e:b1:4d:d1:92:03:29:c8:e6:c5:e2:81:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:9B:85:D7:8D:92:BB:69:CE:6D:4B:21:C2:71:6B:66:92:18:41
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/yMibhdeNkrtpzm1LIcJxa2aSGEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.36.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:ab:29:13:c3:c8:70:a4:8c:39:85:27:65:80:2b:d6:88:b7:
5b:fe:8e:67:1a:34:83:55:5f:4e:36:a4:ff:61:19:50:c7:a7:
b4:84:c0:72:7e:79:e9:2f:e7:75:99:d5:a0:7d:c8:a0:ed:0d:
02:ae:cb:ff:a8:bd:bf:af:29:b0:c8:bd:8a:19:ec:22:77:df:
f0:8e:3a:98:30:f3:8c:08:b6:72:4d:56:eb:ef:a9:87:b3:19:
0a:41:b4:c5:e4:01:48:71:80:04:d8:ed:ea:ed:f5:d6:83:61:
d5:7c:dc:d0:85:db:8c:bc:9c:25:d1:2f:f1:32:72:91:5e:ec:
8a:66:42:99:e1:6a:75:2a:86:ad:21:42:b0:99:a4:68:b2:6a:
63:1e:c9:10:c2:3a:51:ad:03:ac:9c:d2:eb:77:eb:9b:68:04:
9d:f0:8c:45:fc:40:47:8b:2c:68:27:7b:d0:ed:41:90:16:de:
9e:a1:5a:a0:a3:34:4b:fb:c7:05:fb:84:ea:32:1f:8e:a1:af:
e8:20:c3:b1:5f:d7:ae:da:70:f5:b9:cb:16:b6:ac:f3:93:53:
8b:fe:24:98:fd:c2:74:7b:c3:c0:c1:38:c9:37:35:d3:38:8f:
f9:e9:67:d3:f8:a6:ff:21:02:a8:59:1b:53:ef:cb:d1:41:46:
07:04:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:16 2025 by rpki-client