Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/ghEtezlgRxtM8_A6BWhHBoi7MAA.roa
File: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (raw, json)
Hash identifier: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=
Subject key identifier: 82:11:2D:7B:39:60:47:1B:4C:F3:F0:3A:05:68:47:06:88:BB:30:00
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 019420684A7C3AB43F0A177299592DB1C126
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/ghEtezlgRxtM8_A6BWhHBoi7MAA.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59909
IP address blocks: 185.67.108.0/22 maxlen: 24
185.67.108.0/24 maxlen: 24
185.67.109.0/24 maxlen: 24
185.67.110.0/24 maxlen: 24
185.67.111.0/24 maxlen: 24
2a05:e40::/29 maxlen: 38
2a05:e40:1000::/38 maxlen: 38
2a05:e40:2000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4a:7c:3a:b4:3f:0a:17:72:99:59:2d:b1:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82112d7b3960471b4cf3f03a0568470688bb3000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:81:69:60:b2:f3:45:d4:4f:9b:2c:f4:d0:
7b:cb:2b:e4:ad:4f:a4:4f:07:23:ff:0a:88:64:98:
f5:69:e4:d9:46:35:42:2b:66:40:b0:e7:ed:b2:0b:
64:07:c9:77:44:71:e3:eb:40:1c:43:77:99:d0:ab:
b3:06:c2:d1:fc:be:78:48:43:60:17:99:6b:87:9a:
69:d2:84:f9:ff:03:51:54:e6:a3:10:db:c8:42:d1:
8e:ee:b0:0b:27:9f:f1:dc:b6:d3:6e:27:a1:8d:b2:
47:59:cf:05:c7:6a:c6:0a:43:eb:df:2a:36:9e:58:
bf:bb:52:c3:67:58:3b:e9:55:65:e2:49:85:97:5e:
eb:1f:75:7c:f3:ea:45:4f:f1:26:59:e4:06:3a:77:
dd:b0:86:12:df:50:74:fe:1a:87:e7:5d:3d:05:4d:
11:02:ee:d7:46:8f:72:b6:5a:f9:68:d2:26:1d:24:
0c:5e:57:bd:ad:4f:17:b1:fa:2b:4e:68:ce:ad:8a:
07:60:d0:a3:46:61:2e:39:a4:74:f9:e1:74:f5:82:
cd:3e:72:72:af:64:d7:79:79:49:fd:74:b1:a9:97:
16:84:6c:66:68:6e:eb:2f:fd:2c:5c:98:61:13:37:
72:a7:0a:74:3b:7f:39:24:ac:7e:7f:4b:75:62:aa:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:2D:7B:39:60:47:1B:4C:F3:F0:3A:05:68:47:06:88:BB:30:00
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/ghEtezlgRxtM8_A6BWhHBoi7MAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.108.0/22
IPv6:
2a05:e40::/29
Signature Algorithm: sha256WithRSAEncryption
43:6a:53:17:ec:1b:6e:31:1d:f1:30:dc:1a:3f:15:0b:61:25:
61:4e:a3:85:5e:2c:82:59:a4:6b:55:ad:ec:5a:3c:98:8d:0e:
30:29:7e:e6:7d:ed:d5:66:a8:9b:79:40:78:e4:dc:7b:e7:3c:
59:9c:c0:72:6a:88:4a:2e:5a:9f:d0:d9:7e:a8:28:dc:71:2a:
e3:a4:7d:84:20:c2:e8:73:54:63:23:3c:ef:8f:9b:f6:ab:6d:
6c:a1:58:5d:cf:35:73:bd:60:7d:ed:33:2b:8e:28:60:8b:99:
f7:4e:d9:d8:df:ac:f0:9b:63:89:71:2b:c1:b5:b0:4c:74:eb:
3f:f3:35:a0:e3:ef:40:09:09:d6:ea:f3:40:30:f3:38:8e:9f:
a1:03:04:18:44:62:63:d2:c2:d3:59:8e:11:61:d6:9f:56:29:
41:23:fe:84:9c:33:50:25:93:63:25:60:26:2b:28:34:58:c6:
2c:6b:dd:4e:aa:ad:15:ff:70:34:54:87:5f:b1:95:5b:87:e7:
6f:91:b5:c4:df:ca:01:bd:44:9f:55:37:7b:67:ec:95:88:3c:
81:59:51:d7:58:c7:a7:ac:e9:8b:c5:95:7f:7f:00:7a:57:56:
61:79:09:76:6f:2a:78:59:6f:de:45:96:88:ae:aa:ae:7b:4a:
a6:85:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:33 2025 by rpki-client