Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/1-ahrbQf-asIlPCSy6xzlVi_ZcJU.roa
File: 1-ahrbQf-asIlPCSy6xzlVi_ZcJU.roa (raw, json)
Hash identifier: REPvtwUna7IZgKxH8NgbfLlZhGcEo+TvyKm4Xe9K4UM=
Subject key identifier: F9:A8:6B:6D:07:FE:6A:C2:25:3C:24:B2:EB:1C:E5:56:2F:D9:70:95
Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial: 019420D5CFCE0F9ED47C996386F27829B428
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/1-ahrbQf-asIlPCSy6xzlVi_ZcJU.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206819
IP address blocks: 185.175.100.0/22 maxlen: 32
2a0b:e500::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cf:ce:0f:9e:d4:7c:99:63:86:f2:78:29:b4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9a86b6d07fe6ac2253c24b2eb1ce5562fd97095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:ee:5a:ca:b7:88:38:6b:9a:a5:a8:15:ba:
fb:cb:cc:c8:99:39:16:c2:2d:da:ae:8c:f3:0b:01:
ee:d0:e2:14:9b:af:88:dd:75:53:d7:07:60:b1:24:
44:ac:fb:cf:65:65:3e:2e:ba:92:1f:85:3e:7d:a8:
5c:24:df:1a:67:b7:db:9f:2c:27:97:4b:9e:62:69:
1a:7e:c6:c4:89:0e:e5:51:4d:85:5f:d6:31:92:35:
9d:6c:cf:53:d6:2c:ec:0a:19:c6:87:87:9b:d5:79:
f3:20:31:45:a4:e0:16:e7:85:68:56:9f:79:b9:44:
fa:fa:18:30:27:a9:fc:a6:6a:55:a6:03:94:62:e8:
f2:eb:15:f6:78:04:3c:a0:be:60:ad:cb:67:bb:79:
64:fa:98:6f:b6:6d:fe:57:52:b8:07:fa:9d:24:40:
9c:d9:cb:88:3f:50:f0:d0:07:12:33:79:cf:76:e1:
87:5d:69:2e:3d:da:6b:fd:17:2e:0e:8e:53:c8:3e:
f4:cb:8d:9b:2c:9b:4d:52:cb:73:e4:57:8f:40:a5:
b0:2e:11:6d:c7:bf:fe:ee:e8:de:cc:78:cf:54:97:
bc:c5:bf:58:bd:67:c1:31:29:97:e5:5c:53:11:20:
40:42:47:02:00:9b:24:d4:fc:a3:a5:7e:4d:8e:ad:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:6B:6D:07:FE:6A:C2:25:3C:24:B2:EB:1C:E5:56:2F:D9:70:95
X509v3 Authority Key Identifier:
keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/1-ahrbQf-asIlPCSy6xzlVi_ZcJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.100.0/22
IPv6:
2a0b:e500::/31
Signature Algorithm: sha256WithRSAEncryption
04:01:82:72:a7:75:37:b7:0b:a7:9c:34:0d:b8:dd:da:21:c0:
11:50:4d:81:93:3d:70:b3:1d:f2:fa:3a:4b:9e:b1:be:a8:36:
db:5d:1d:94:64:3d:10:16:a3:8b:36:cb:ec:88:c0:2b:70:c5:
76:a3:14:13:4d:7a:69:5d:ea:4b:7c:91:91:b2:67:f2:4a:6c:
c3:27:e5:d4:3d:d8:1e:b3:68:48:2c:5a:b4:45:25:5c:ee:43:
54:a3:a3:a1:b1:34:52:7b:05:dd:fe:a4:2e:a2:44:b5:2c:fa:
9c:1b:8b:dd:f9:e3:0e:ee:c2:ba:a7:10:62:39:1b:03:47:7c:
bd:af:ca:a1:47:7b:e8:94:18:dc:8e:95:d5:02:b3:a6:1f:b4:
f8:6e:80:51:fe:1e:eb:2d:bc:3a:fd:b0:62:14:a5:ac:ce:47:
fb:48:55:c9:d9:cf:1f:9a:5e:b8:e1:6d:b6:85:7f:f0:12:27:
64:c2:6c:10:0c:02:a7:47:cb:38:b7:c9:0a:68:03:b8:f1:e1:
e0:bc:0a:6e:8f:fe:2d:57:c1:da:42:81:12:c6:90:8f:52:12:
1e:f7:91:80:ae:6c:6c:74:fd:37:99:11:7c:9a:cc:8e:21:4b:
b1:ad:31:4a:14:06:34:bf:82:0d:20:91:56:82:1b:10:1a:30:
d7:8a:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:18:35 2025 by rpki-client