Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/quAevwWcT98bf654qLWm8mJZnuo.roa
File: quAevwWcT98bf654qLWm8mJZnuo.roa (raw, json)
Hash identifier: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=
Subject key identifier: AA:E0:1E:BF:05:9C:4F:DF:1B:7F:AE:78:A8:B5:A6:F2:62:59:9E:EA
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019424B38E2F37178B11E3B17521B97A226B
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/quAevwWcT98bf654qLWm8mJZnuo.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60479
IP address blocks: 185.17.80.0/22 maxlen: 24
185.17.80.0/24 maxlen: 24
185.17.81.0/24 maxlen: 24
185.17.82.0/23 maxlen: 24
185.17.82.0/24 maxlen: 24
185.17.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8e:2f:37:17:8b:11:e3:b1:75:21:b9:7a:22:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aae01ebf059c4fdf1b7fae78a8b5a6f262599eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:47:34:d3:cd:15:2c:64:76:3d:64:69:e1:
9f:fb:d8:2f:c8:0e:c5:28:fe:ad:5d:73:24:94:70:
31:7b:0c:3d:3c:27:37:2e:71:8c:f8:4b:61:39:ed:
a8:4a:c2:9c:7b:06:8c:5a:87:32:39:a0:9a:9c:26:
10:73:49:10:fb:7f:43:9d:65:1c:ae:61:00:b3:7c:
9b:b8:b0:a7:0d:14:94:65:d3:5c:8d:64:9c:f0:58:
6e:c0:1a:df:cb:85:c0:8d:ae:a3:da:3c:7f:c8:6c:
df:a4:87:19:07:8a:f1:18:6f:56:de:3f:5c:5e:14:
14:09:33:11:1e:54:3b:0b:36:91:b6:ac:61:89:5c:
90:4a:8f:3e:c7:d4:98:02:35:3f:04:b5:29:9a:08:
df:d8:d8:4f:89:5c:4e:6d:55:14:e2:ee:e4:2a:bd:
d0:a9:1f:c0:d8:b4:9c:c7:ba:30:b1:89:08:40:73:
bb:f0:e8:19:97:8f:93:a2:da:e8:37:13:3a:58:86:
7c:f3:53:94:ed:ae:a6:45:d3:c2:e4:b4:c5:6f:3a:
f0:2d:fa:79:b7:74:91:98:ef:13:b7:20:f9:96:23:
09:42:e2:da:68:8e:f2:c6:8f:b4:2e:97:db:5f:94:
f7:2e:27:ba:ce:33:42:a8:a1:6b:bf:29:25:8b:41:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E0:1E:BF:05:9C:4F:DF:1B:7F:AE:78:A8:B5:A6:F2:62:59:9E:EA
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/quAevwWcT98bf654qLWm8mJZnuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:34:20:ac:63:5f:06:04:7c:56:e9:95:25:37:a1:c9:4f:99:
4b:fc:e7:a4:1e:a1:5f:16:6b:f9:2c:a3:44:e6:3f:f3:d6:3d:
c1:2f:59:68:c7:d8:f0:ad:8a:de:91:b1:e4:8a:5b:75:31:91:
d9:2d:9a:08:be:9c:b4:e9:c6:25:f8:e1:95:cd:34:c7:c9:e1:
5b:b7:b4:3c:29:df:48:cc:92:bb:30:e0:41:b0:b6:b5:c8:c7:
5a:e5:a1:03:46:48:cf:86:87:af:7e:12:70:25:fd:c4:fb:14:
45:64:a2:ae:5d:a5:b9:a4:3d:b0:a8:7c:12:7c:f1:2b:36:2f:
21:48:86:2f:11:31:f7:2e:c8:8c:db:20:a6:5e:44:27:fc:c9:
bc:d5:ea:bf:71:5f:f3:e8:3d:ba:37:4e:42:c9:51:04:ce:b6:
5e:2f:c7:38:05:0b:0f:f1:d4:bb:be:d3:6d:17:a8:13:69:76:
a3:68:b6:42:ed:dc:13:11:24:bd:95:13:ef:29:f1:a1:69:bf:
2c:9d:3f:14:e7:e9:2a:f8:7c:ac:c1:1e:55:79:41:a2:8d:58:
64:cb:05:4b:80:51:9c:70:28:20:b0:d4:71:95:db:7c:07:dc:
d8:61:bd:d5:68:25:cd:ac:47:58:46:bd:ce:0d:db:7b:6b:03:
8f:fa:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:23 2025 by rpki-client