Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/DED9vt3vinq5uo7W8xf1qKgQoDQ.roa
File: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (raw, json)
Hash identifier: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=
Subject key identifier: 0C:40:FD:BE:DD:EF:8A:7A:B9:BA:8E:D6:F3:17:F5:A8:A8:10:A0:34
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 0194221FAF11937B8C8B5AAA30E167CF0B78
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/DED9vt3vinq5uo7W8xf1qKgQoDQ.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201708
IP address blocks: 185.62.172.0/23 maxlen: 23
185.62.172.0/24 maxlen: 24
185.62.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:af:11:93:7b:8c:8b:5a:aa:30:e1:67:cf:0b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c40fdbeddef8a7ab9ba8ed6f317f5a8a810a034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:f0:a1:b7:71:71:48:4f:74:9e:48:0d:75:
0f:06:06:4c:39:26:3f:5e:8a:43:f7:3b:49:69:cf:
2b:e4:f4:b4:0e:19:c8:e8:a5:34:9a:42:33:23:5b:
56:73:0a:f8:e5:7e:a1:47:52:cd:74:89:44:81:f8:
55:99:8b:c9:45:e9:cd:2d:88:08:8d:81:99:d6:55:
a8:a4:51:bf:f7:1b:9b:c2:b7:bf:e8:b2:ba:5b:19:
7e:90:0a:c8:99:ce:ea:a9:48:93:17:90:93:69:28:
d9:ec:e7:0a:86:fc:54:12:3c:d7:39:70:ab:a1:8e:
df:eb:c0:ba:c2:e0:6f:55:59:56:f5:14:4b:35:87:
19:85:15:18:aa:cc:04:0e:8c:0f:50:44:28:5a:ab:
80:81:79:9a:fd:0c:9b:4a:bf:38:cb:0f:90:a5:d1:
5d:d1:86:f5:8d:04:25:91:65:09:9e:eb:8e:33:fb:
a9:70:2b:a3:3f:c5:5d:d0:cd:f8:44:ce:87:ab:44:
fd:56:45:21:46:10:d1:5f:88:fa:ea:94:93:1f:3d:
06:f1:16:06:1f:b1:7c:34:0e:d7:76:b9:3c:3d:d0:
48:3b:78:01:41:a5:98:be:7f:be:d1:da:8e:83:73:
d6:73:5b:bc:56:60:52:72:df:7b:b2:e8:f0:63:56:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:40:FD:BE:DD:EF:8A:7A:B9:BA:8E:D6:F3:17:F5:A8:A8:10:A0:34
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/DED9vt3vinq5uo7W8xf1qKgQoDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.172.0/23
Signature Algorithm: sha256WithRSAEncryption
67:ca:27:76:31:5e:da:86:c4:08:5c:1d:a9:07:35:28:8c:1c:
e7:20:44:5b:85:a5:16:be:f4:c4:76:98:35:f6:82:d8:7a:c7:
78:56:53:1a:58:97:df:e3:c4:f6:6e:e2:d0:05:4c:3a:ae:61:
64:0f:8c:84:1d:a7:83:c7:2c:53:b4:d5:bd:64:b3:ea:f9:7c:
54:c4:2a:e3:eb:cd:a0:84:96:ca:ed:6d:ee:38:17:34:5b:7f:
a7:0c:ca:7e:cc:95:26:ec:a6:88:9a:d7:ec:35:31:9e:86:52:
79:0e:87:c5:44:b0:3e:f5:21:f2:fa:17:4b:a8:79:af:6a:7f:
b9:f9:75:56:6f:38:57:ef:17:57:80:a8:36:1e:79:72:0a:86:
47:a3:e0:3d:61:e2:25:cc:ab:7c:da:e7:27:1b:a2:40:1a:a2:
a5:1c:87:2e:35:0d:37:5d:70:8b:2d:96:fd:82:15:67:95:ca:
80:38:4a:59:31:95:3c:a6:72:7b:e3:a8:ee:a4:f4:b5:32:69:
29:78:49:75:29:32:19:b6:a1:d2:5d:2a:02:10:d3:4c:11:f6:
e4:52:1e:2d:e4:8a:50:9e:6e:53:57:51:c7:51:9a:7b:ce:cb:
0c:45:c4:e9:79:b9:9e:c2:07:35:6b:b7:dc:5d:d7:21:39:aa:
fc:e7:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:14 2025 by rpki-client