Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/SC1NH4BhQbqz2aYg59ahgnwQszg.roa
File: SC1NH4BhQbqz2aYg59ahgnwQszg.roa (raw, json)
Hash identifier: 1mPOGFp4g8u13xFq/L3DTLiX9+I1u5tVBVqICDXDWUo=
Subject key identifier: 48:2D:4D:1F:80:61:41:BA:B3:D9:A6:20:E7:D6:A1:82:7C:10:B3:38
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 01957FC25FF37BF86DAEE2EB8530C7988197
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/SC1NH4BhQbqz2aYg59ahgnwQszg.roa
Signing time: Mon 10 Mar 2025 11:13:19 +0000
ROA not before: Mon 10 Mar 2025 11:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 185.177.230.0/24 maxlen: 24
185.177.231.0/24 maxlen: 24
213.178.140.0/24 maxlen: 24
213.178.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:c2:5f:f3:7b:f8:6d:ae:e2:eb:85:30:c7:98:81:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Mar 10 11:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=482d4d1f806141bab3d9a620e7d6a1827c10b338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:72:2a:d3:8e:f4:16:87:7d:79:83:11:7b:
42:92:aa:a8:df:2b:fb:b8:99:60:5e:f0:a8:b6:1c:
3a:f2:e5:6c:08:cb:29:10:e1:8d:14:c7:e2:68:dd:
7b:a4:77:b1:3a:2c:18:09:b7:54:c0:75:a5:26:75:
05:a8:c3:90:cb:cc:65:b4:6e:07:03:c4:da:02:12:
87:64:ff:6e:3f:de:3c:80:56:48:23:e3:bd:af:17:
c3:4c:d2:c9:64:25:85:07:d0:ca:fe:d1:bd:4d:e1:
19:b7:6b:a1:20:eb:9d:3c:d8:66:cf:49:c0:9a:92:
e1:e1:0d:cd:09:97:1c:fd:11:6f:9b:75:fd:1b:81:
a0:11:ed:f1:03:72:53:10:72:98:90:9c:ba:a4:a5:
ea:0f:59:14:24:08:ef:6e:a9:9c:7d:9b:36:9a:89:
8b:bb:5c:79:0b:17:5a:10:10:b7:61:f5:f4:d8:46:
aa:e2:f5:59:10:ef:ce:db:d9:12:5b:0d:95:29:6b:
48:7d:80:de:ce:91:e9:75:c4:dc:46:e2:69:94:f5:
34:5d:7b:09:89:b5:f5:0d:41:c7:03:45:4e:77:81:
af:20:87:16:7b:89:e6:68:d1:65:9f:03:87:3a:66:
9d:5b:11:8d:3d:d3:88:18:64:40:68:b9:eb:c8:28:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:4D:1F:80:61:41:BA:B3:D9:A6:20:E7:D6:A1:82:7C:10:B3:38
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/SC1NH4BhQbqz2aYg59ahgnwQszg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.230.0/23
213.178.140.0/23
Signature Algorithm: sha256WithRSAEncryption
35:9f:b6:f3:3d:cc:e9:e3:cb:16:99:ae:c6:07:d4:7d:5d:e8:
0e:7b:5f:52:6e:96:d8:1d:3c:6e:ce:35:1d:bf:f9:9e:57:05:
1b:5c:d6:fb:cd:38:f6:54:f4:08:17:fd:6c:b3:bd:7c:08:a7:
f1:18:d9:36:1d:60:4c:25:52:89:2b:71:a9:d5:dc:e2:73:1a:
b3:6c:36:e7:d1:42:82:57:cc:12:ef:52:3e:b5:62:85:af:2c:
cc:5e:e3:fc:1a:75:5a:55:7b:f0:e5:f0:34:95:5e:29:37:9d:
de:db:d0:8a:15:34:8c:6f:45:ea:bb:34:99:47:10:fb:55:da:
f7:39:25:aa:02:73:c9:59:31:f2:52:78:1a:81:fc:cd:34:23:
c9:46:72:31:d9:4d:18:19:de:5c:49:25:bb:39:8d:63:4a:29:
38:79:d1:5e:d6:99:3d:f7:45:5b:de:12:f6:5c:5c:25:6d:70:
24:05:18:52:d5:cd:a8:35:36:dc:df:91:c0:37:23:c6:4a:56:
db:a0:16:5f:fa:bc:ec:00:ef:58:a4:fd:48:41:39:31:5b:45:
c8:90:73:90:67:ac:ae:58:70:3d:19:33:98:92:9d:62:47:c6:
a8:72:d9:ba:f3:5f:0e:6a:42:d7:b9:2c:e6:16:2a:81:36:40:
aa:4a:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:16 2025 by rpki-client