Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa
File: t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa (raw, json)
Hash identifier: 0NfSlFcI3MTsg3tU/1EBreDuvvrgFnFan39Sv/glqLM=
Subject key identifier: B7:95:7E:D7:0F:AC:FA:BB:C1:81:BD:F0:AB:66:52:28:CC:09:0A:CD
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 019422FB13A49D4F8459F46C811BA524D636
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.109.96.0/22 maxlen: 24
193.3.28.0/24 maxlen: 24
2a04:a0c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:13:a4:9d:4f:84:59:f4:6c:81:1b:a5:24:d6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7957ed70facfabbc181bdf0ab665228cc090acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:46:28:83:e3:e0:d0:b8:7a:b2:0c:d2:8b:
72:f1:53:79:5d:5d:0b:47:39:60:9b:92:28:8d:0a:
c9:03:1e:c5:cd:26:f6:ed:88:d5:32:48:5c:e1:94:
73:f4:df:5f:6e:d8:39:3c:ce:a3:75:9d:16:9f:c4:
88:14:cb:69:ec:be:7e:0f:0e:eb:99:32:aa:4c:b4:
c9:63:01:a0:9a:d3:95:54:12:c6:8f:77:6a:3f:ba:
81:ef:30:3d:0f:b4:0c:e9:32:bf:12:5a:29:92:6d:
eb:5b:0f:04:34:13:f7:cd:84:db:c6:ab:45:e9:f2:
71:c0:b7:9e:46:8e:9f:4d:cb:e0:aa:89:8b:ab:3d:
43:b4:3c:a1:91:07:ec:82:56:86:7b:73:09:da:e8:
c9:66:90:4f:c1:54:22:92:64:f2:55:7c:8c:e4:78:
bd:50:7c:f4:21:db:66:a4:b4:93:f1:48:3e:7e:64:
70:c3:5d:49:40:75:49:5d:83:02:a9:8e:a0:5f:c3:
9b:64:d3:79:e6:b2:8e:22:d3:43:ac:7d:91:b3:f6:
c0:f1:6d:08:11:97:a2:89:94:50:3f:12:97:0c:28:
02:3a:a1:0b:ba:5f:17:cf:e4:e5:38:b6:dd:11:fd:
9b:16:c8:73:1e:35:60:38:73:7c:d1:c2:00:b0:df:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:7E:D7:0F:AC:FA:BB:C1:81:BD:F0:AB:66:52:28:CC:09:0A:CD
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.96.0/22
193.3.28.0/24
IPv6:
2a04:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
56:2a:5d:b2:4c:2f:c3:e2:9f:2e:5f:91:50:8e:68:22:d5:96:
1c:e1:1f:fa:b1:28:cf:b3:47:39:ab:10:22:53:d9:ea:b3:2c:
6c:22:ac:f4:fe:7e:1d:01:ca:82:8d:d5:d7:35:1d:d5:b2:8c:
1a:88:d2:68:c5:d3:09:98:48:4f:f1:7c:05:b9:45:50:ea:a5:
61:39:ea:81:d6:03:c9:cd:2e:c1:f8:62:b7:45:30:6a:4d:27:
68:ae:c5:67:0a:f9:c4:3f:66:ec:c8:89:ce:ab:e8:29:c9:ec:
b4:19:42:99:a9:e4:ea:22:f2:de:03:19:e9:67:0a:8f:d2:82:
d1:c8:e5:ae:d2:e1:19:a0:7e:26:25:a2:af:20:f0:b5:36:2a:
86:2d:df:f9:cc:4e:46:a4:92:91:99:84:b5:15:68:ca:af:21:
50:f2:a2:68:13:15:eb:b2:55:9c:96:fc:15:5d:41:95:29:71:
4d:1b:29:16:c3:2c:6f:04:4f:47:01:62:d8:7d:e9:63:47:d0:
ec:98:fc:65:34:95:26:ef:e4:7a:fe:87:1d:1a:a7:11:e5:64:
21:15:2a:90:9a:1e:ad:69:90:4d:58:cf:13:ba:45:8b:86:50:
7d:e8:c9:22:92:61:36:51:af:62:75:7d:79:55:5a:b6:f7:1d:
06:70:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:16 2025 by rpki-client