Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/_Jt2cq-dgcIR8JCb6TIGQHCstiI.roa
File: _Jt2cq-dgcIR8JCb6TIGQHCstiI.roa (raw, json)
Hash identifier: HheoHhkZF998Fh2qrnQYSKa5rHl2Nsopnd2pzxjannE=
Subject key identifier: FC:9B:76:72:AF:9D:81:C2:11:F0:90:9B:E9:32:06:40:70:AC:B6:22
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019493C6302311EA258B5BC886B4AC75040C
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/_Jt2cq-dgcIR8JCb6TIGQHCstiI.roa
Signing time: Thu 23 Jan 2025 15:27:06 +0000
ROA not before: Thu 23 Jan 2025 15:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202654
IP address blocks: 185.30.162.0/23 maxlen: 23
185.30.162.0/24 maxlen: 24
185.30.163.0/24 maxlen: 24
194.8.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:c6:30:23:11:ea:25:8b:5b:c8:86:b4:ac:75:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 23 15:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc9b7672af9d81c211f0909be932064070acb622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:09:80:38:99:97:f3:f1:f4:b9:5a:45:8a:
99:65:89:1b:4f:29:e2:d2:9a:39:a4:80:85:81:32:
12:8c:ba:2b:7d:0f:cf:8f:92:8a:76:71:b7:8d:e5:
ac:73:68:3c:3e:bf:5f:4d:19:0a:ae:e4:74:b3:e5:
7b:f4:ff:58:e0:d6:17:8d:fe:61:e3:74:54:5e:9a:
de:e4:e5:7e:fe:03:19:b5:79:21:37:a5:30:95:b3:
31:85:1f:65:e0:bb:af:be:59:fb:d9:0e:c9:fd:97:
19:36:d8:c7:c4:30:1d:4a:ec:5b:c8:6b:cf:38:97:
b6:f8:dd:43:4c:07:78:5b:84:bd:35:58:a1:36:3b:
d2:a8:a7:67:b4:4b:7f:19:97:72:db:01:f6:ea:e8:
1c:97:c4:17:3e:85:2d:91:6b:b7:ea:a9:e8:e4:ce:
90:81:72:67:21:79:5a:d1:48:3c:80:6e:13:70:f7:
b9:aa:45:59:ff:14:b5:a5:be:22:38:56:c3:27:75:
1f:7b:8f:22:41:c7:00:04:90:14:fb:57:62:74:8a:
98:15:dc:43:3e:76:8c:a7:8c:ce:90:e5:2f:79:de:
31:39:f0:98:1a:af:c1:51:30:0a:b3:e9:e3:7b:81:
58:07:05:cc:62:5c:aa:68:8b:86:16:8d:c7:57:6d:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9B:76:72:AF:9D:81:C2:11:F0:90:9B:E9:32:06:40:70:AC:B6:22
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/_Jt2cq-dgcIR8JCb6TIGQHCstiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.162.0/23
194.8.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:69:ef:53:1f:da:fb:a4:c6:4b:03:2b:21:7d:f2:ff:bc:94:
37:c0:5c:9b:bb:4f:89:35:a1:a3:e0:ed:7e:b6:3f:fb:5c:0b:
68:45:cd:c9:28:1c:21:cd:19:c5:54:67:1c:6f:84:dc:f3:b6:
3c:be:85:25:3c:14:7f:48:7a:6c:bd:c2:52:f0:f9:6b:bd:71:
50:72:99:e6:1a:2a:e8:9c:64:3e:7e:71:13:fe:37:14:b8:f7:
2f:3e:49:0c:a1:46:74:3d:cd:25:0f:40:40:9b:aa:cc:f5:5c:
cd:99:bc:3c:95:f4:35:e7:bd:68:d8:82:a0:19:e0:19:d0:eb:
02:ee:7f:af:44:37:44:53:f1:d4:94:ee:86:32:9d:bf:96:a6:
64:0a:11:0d:9e:44:94:97:0f:bb:b2:38:b3:e0:7c:fd:38:e6:
3c:b6:4a:7b:d7:4b:cf:23:57:7f:14:7e:e7:70:0b:15:24:9d:
d2:05:5b:8a:1c:36:33:da:55:ef:bc:7e:4e:e6:f5:c1:4e:5e:
0a:ed:cf:fa:45:59:79:03:22:92:a0:61:3f:d5:bb:79:08:e3:
18:52:17:45:89:67:ca:f7:59:09:f7:1f:6b:07:65:a5:3d:d5:
df:2b:81:22:23:7e:c2:b7:0e:e7:e1:12:96:ee:ec:e9:39:7e:
c6:c3:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:28 2025 by rpki-client