Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa
File: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (raw, json)
Hash identifier: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=
Subject key identifier: 2F:B3:E1:ED:02:92:AC:5C:D4:BA:73:35:9D:68:B2:D3:3B:51:83:3D
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 019427B5797E485C863A223CE66E47948D84
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8757
IP address blocks: 185.146.124.0/22 maxlen: 24
212.58.128.0/19 maxlen: 24
2a07:7b80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:79:7e:48:5c:86:3a:22:3c:e6:6e:47:94:8d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fb3e1ed0292ac5cd4ba73359d68b2d33b51833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:6b:e9:a2:3d:2c:bf:20:4f:08:c6:66:16:
c7:d7:b1:51:a0:1c:05:3e:6c:9f:88:8c:78:d7:ac:
72:6f:3b:65:71:7d:22:ea:57:d3:36:96:51:9d:09:
73:6f:62:de:20:84:1d:51:8c:79:f0:b4:ca:e1:f5:
30:59:4f:ad:1f:e5:05:17:bd:e3:1a:92:ff:d3:b0:
6f:1a:59:98:09:2d:5d:f5:3b:23:b1:cb:0b:53:ef:
87:1d:c0:cf:f2:61:03:00:6b:ec:d4:d3:d2:9a:3d:
e9:30:cb:cb:08:66:a8:fd:e9:eb:5b:69:14:4b:a0:
cf:44:06:52:83:09:33:39:a4:79:67:11:8a:df:c4:
dc:1b:3b:90:f7:67:63:2d:a1:ba:b0:90:85:02:f4:
ba:c2:f8:d3:e7:5e:31:87:9a:8a:12:6b:1f:50:48:
aa:a4:d9:85:55:81:47:9e:58:ac:99:7e:18:84:36:
2b:cc:59:4d:5c:db:5b:4a:53:31:b2:36:4e:47:03:
1e:57:f1:6b:0a:3e:7f:3b:d9:7a:47:9b:a9:6e:78:
d0:44:b2:1c:f9:ee:38:56:2f:98:8a:51:87:54:11:
ab:87:d5:59:69:d7:08:8e:7d:c8:68:ae:13:25:02:
25:d5:2a:eb:a9:4e:75:19:af:47:c8:e6:1b:0f:bc:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:E1:ED:02:92:AC:5C:D4:BA:73:35:9D:68:B2:D3:3B:51:83:3D
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.124.0/22
212.58.128.0/19
IPv6:
2a07:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
36:87:45:91:80:62:26:1e:59:b4:d0:f9:9c:d0:ee:08:38:6c:
d8:d2:f9:71:e0:ab:67:7d:a1:02:19:cd:3d:3b:92:c0:c9:07:
0a:48:37:70:a5:6a:56:5e:60:c6:e3:45:4b:4d:8e:2b:82:43:
f5:74:7f:fd:1c:03:de:92:00:a5:e7:f3:fc:e0:82:50:74:da:
2e:24:bc:6f:3b:f8:54:30:02:42:20:d0:9b:8e:aa:42:ab:17:
d4:b7:c1:6b:90:74:c0:a4:86:ee:af:ba:0c:34:0f:a2:56:38:
72:f0:8e:0f:48:0d:37:99:83:fe:ce:21:b1:35:3b:44:84:fb:
50:4d:4c:27:1c:59:98:18:ec:85:8b:ec:6f:a3:3c:73:6a:01:
72:8b:65:3d:f8:5b:bf:31:04:f9:32:43:10:ad:c8:4c:d3:e6:
f3:be:af:fe:21:37:ea:84:3b:57:d3:41:41:76:2f:c9:fe:42:
04:6d:9e:09:96:2e:d2:67:4b:80:42:59:99:ae:89:a1:30:7d:
66:e9:c2:73:03:8d:2b:34:ef:7a:9f:58:9c:7d:7b:8b:aa:0b:
6b:05:e5:a5:99:da:0b:c1:b3:b6:87:a3:c6:63:5e:03:fb:a6:
02:66:dd:60:ff:23:4f:c3:16:01:40:f1:2f:1c:65:0a:e3:94:
d6:c1:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:23:35 2025 by rpki-client