Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fHvSslCY6YYpyS3XxrUThUzbGi0.roa
File: fHvSslCY6YYpyS3XxrUThUzbGi0.roa (raw, json)
Hash identifier: u1crNvhwafIJUi9+XkL7LnXJkX9gDek5LCxTuv9rITg=
Subject key identifier: 7C:7B:D2:B2:50:98:E9:86:29:C9:2D:D7:C6:B5:13:85:4C:DB:1A:2D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019441025431A51C008883545326F9DC0B1B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fHvSslCY6YYpyS3XxrUThUzbGi0.roa
Signing time: Tue 07 Jan 2025 13:44:19 +0000
ROA not before: Tue 07 Jan 2025 13:44:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 185.108.204.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:02:54:31:a5:1c:00:88:83:54:53:26:f9:dc:0b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 7 13:44:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c7bd2b25098e98629c92dd7c6b513854cdb1a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:65:d8:66:48:1b:cd:53:81:53:f6:ec:e8:
57:5d:60:cc:c0:f3:e3:4a:f2:83:cd:1b:73:90:fb:
21:9d:95:75:c7:98:d9:3e:a2:e6:34:99:cd:ee:08:
12:3f:20:a9:4e:d1:7e:86:37:0e:c3:a5:db:1c:80:
75:85:05:c9:7c:86:52:f8:4a:ac:f4:49:d4:a8:29:
ab:01:c8:6e:5c:5e:60:97:f9:e3:90:a0:65:a5:ae:
ae:78:41:a5:20:24:d9:8d:61:81:d8:7b:ee:14:54:
3b:d6:8e:79:18:bf:cd:d3:5a:a1:56:9d:06:4d:4f:
d4:a2:16:af:6f:f4:33:26:36:25:65:21:9a:77:5d:
71:a2:6c:d7:ab:88:70:0b:78:cb:4b:c2:d1:c6:fb:
10:7b:3c:9d:b4:1c:02:47:d0:ae:76:aa:87:52:7d:
c4:27:df:19:a8:88:9b:e7:cd:ad:60:b3:7d:c6:2a:
47:bb:0e:18:53:00:1a:cb:72:16:8f:16:b7:28:c6:
0c:53:25:2a:e8:6a:d9:7c:da:08:a5:d2:da:4e:83:
ce:c3:d5:95:30:ce:26:83:7b:ed:79:bb:9d:86:b2:
ab:38:00:a9:88:4e:76:f4:46:c1:8b:5d:5b:a4:04:
b1:db:54:1b:89:a4:36:54:38:52:0f:19:68:ca:a6:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:D2:B2:50:98:E9:86:29:C9:2D:D7:C6:B5:13:85:4C:DB:1A:2D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fHvSslCY6YYpyS3XxrUThUzbGi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.204.0/24
185.209.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ce:29:28:43:6d:86:b4:14:73:7d:aa:2e:51:32:21:fa:a3:
86:38:1f:79:39:ce:ed:f3:d4:7f:2e:ee:1f:50:d4:5d:61:79:
ec:82:03:a5:15:bb:c6:6f:60:ff:cc:ab:bd:b5:32:8e:d7:76:
5e:50:c8:26:88:a4:e5:28:73:6a:79:82:cc:ba:15:7e:52:6b:
5a:7d:50:e0:89:f2:e1:5c:d1:6f:f6:c2:5b:31:c6:f7:eb:e6:
9f:d9:99:91:61:27:f6:a6:32:df:de:34:e0:bf:7d:89:9a:0c:
a5:c4:26:de:60:eb:9a:e3:ea:22:dd:be:7d:4c:dc:75:af:37:
00:a8:38:29:5b:f9:96:4a:ba:49:e8:fb:23:f4:50:e5:b5:5f:
c8:aa:0b:84:da:b3:a3:b8:c6:d8:ec:46:96:1e:5a:67:d6:3b:
06:85:60:57:60:7f:46:10:5e:d4:5c:14:26:73:da:09:35:d9:
18:ba:cf:bb:26:9a:cc:bc:f1:1d:13:96:08:d0:90:02:0a:bc:
a0:dd:8a:3d:f2:db:4b:7f:a0:9e:ab:51:60:1f:1f:95:c5:e8:
0f:03:f1:b4:a2:a1:d2:34:40:b3:a7:1e:8b:72:bb:4c:d2:16:
e9:dc:f4:74:9a:e6:07:9f:7c:aa:30:25:db:21:57:95:73:f7:
16:81:9f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:09 2025 by rpki-client