Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/8pgaGBXBaUb02KKfxBTaArJBx7M.roa
File: 8pgaGBXBaUb02KKfxBTaArJBx7M.roa (raw, json)
Hash identifier: MwzlZRqfpq85Jtfy1BfMUyKAa2i1GlwvDq8Y0Ug3Xu8=
Subject key identifier: F2:98:1A:18:15:C1:69:46:F4:D8:A2:9F:C4:14:DA:02:B2:41:C7:B3
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 0194266BD75B2047CA1AD1E859273934366D
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/8pgaGBXBaUb02KKfxBTaArJBx7M.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 185.145.100.0/24 maxlen: 24
185.145.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d7:5b:20:47:ca:1a:d1:e8:59:27:39:34:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2981a1815c16946f4d8a29fc414da02b241c7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:ad:1c:96:72:67:9c:88:18:ae:8d:6e:93:
b5:b2:70:61:38:24:02:46:3a:f4:25:0a:c1:22:cd:
37:d4:cd:9c:f0:4b:f3:ea:d5:e8:4c:30:3f:7a:b0:
b1:3b:0f:e8:1c:95:61:3d:b2:09:d5:f3:d9:5b:0d:
7d:3e:6d:95:08:bd:86:2e:43:86:d5:ff:49:e5:19:
da:14:2a:23:78:f5:90:0a:95:76:b2:e4:60:98:f2:
33:24:3d:ac:5e:f1:39:50:be:7e:08:a6:90:1a:a2:
24:fc:11:15:d1:57:48:6b:a8:f0:e2:ec:5f:af:38:
a8:29:e0:9f:72:f8:39:59:17:8b:4c:49:02:c4:54:
7c:7e:21:21:8f:18:ae:db:d2:fb:c2:52:83:9b:ac:
b4:e9:c5:f4:79:c3:4b:2c:15:1f:14:53:6a:d4:42:
48:94:b6:4a:8f:e3:b1:4f:aa:07:b0:7d:84:89:6a:
c2:8b:66:ee:5a:23:b4:95:a1:eb:21:35:67:65:4f:
9d:f6:b4:8a:dc:97:2e:19:5d:ab:67:d7:8e:6c:af:
c4:56:d3:34:7c:3f:db:88:9e:5e:06:01:74:e9:89:
07:32:73:c4:d0:8d:15:58:70:44:62:f8:1a:4a:69:
14:ad:e7:cd:a7:27:53:9f:df:ee:e8:b3:c0:79:77:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:1A:18:15:C1:69:46:F4:D8:A2:9F:C4:14:DA:02:B2:41:C7:B3
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/8pgaGBXBaUb02KKfxBTaArJBx7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.100.0/23
Signature Algorithm: sha256WithRSAEncryption
80:79:41:b0:b0:c4:a6:0e:0f:9f:a8:ce:84:59:0c:a5:ae:9e:
6f:03:a4:d5:eb:0a:83:3f:35:b8:30:64:16:00:55:9a:93:37:
4f:64:5a:73:9a:18:eb:dd:81:ab:60:42:f8:55:2a:ac:82:5c:
d4:c1:de:a1:aa:74:55:64:a3:a3:44:64:f0:81:e5:87:63:54:
2e:eb:e4:98:83:77:e6:32:70:a9:63:44:e8:56:41:2a:a0:d7:
42:09:49:0d:e2:29:af:f2:07:4a:3c:cb:9c:0f:ee:88:8a:8a:
ab:36:5e:5a:1d:92:58:98:49:bd:b4:0a:4b:d5:be:1b:02:74:
be:43:0c:99:6c:d8:53:76:d8:50:05:e8:5c:fe:91:6c:85:02:
72:c0:21:ba:4c:ab:3d:5f:dd:06:2a:db:a2:c8:14:3f:24:2b:
8b:3c:97:c5:3a:90:d7:78:b8:84:14:85:70:ef:36:0a:28:4e:
95:b3:80:98:db:af:a5:ba:44:d6:58:f7:1e:f4:b9:05:bd:c1:
eb:a3:10:ea:71:fb:83:67:45:42:43:c3:99:12:92:ce:f9:af:
86:cd:80:39:e0:3c:cb:7f:86:76:7d:ef:4f:55:d1:29:9a:77:
07:73:76:04:ef:cc:a7:64:ac:f9:45:a8:30:9c:d4:20:5f:c2:
45:41:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:34 2025 by rpki-client