Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/jfIFCuUZlCfoxkAB48zp-OMBSv0.roa
File: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (raw, json)
Hash identifier: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=
Subject key identifier: 8D:F2:05:0A:E5:19:94:27:E8:C6:40:01:E3:CC:E9:F8:E3:01:4A:FD
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 019424455AA69978E9A8CA2A45E38B2BD7D2
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/jfIFCuUZlCfoxkAB48zp-OMBSv0.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.105.0/24 maxlen: 24
2001:7f8:bf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5a:a6:99:78:e9:a8:ca:2a:45:e3:8b:2b:d7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df2050ae5199427e8c64001e3cce9f8e3014afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:c8:5b:3f:bc:57:68:62:89:a6:57:a2:1c:
65:d3:72:ba:c6:3f:8d:0f:0b:de:94:e8:d3:3e:c8:
db:56:67:6c:f3:02:47:70:fc:13:94:23:9f:02:97:
5e:7e:58:c9:bb:c1:bd:3a:a3:d1:86:d7:12:94:57:
e2:f0:af:cf:73:6a:46:4b:ef:f5:12:65:15:6d:f4:
31:8f:30:df:57:c5:6c:e9:ba:64:ac:50:cf:a2:5c:
d9:eb:77:2b:93:21:5f:a8:6d:75:92:66:5a:5e:e8:
5b:2b:d6:4e:07:04:50:97:fe:33:ed:ea:10:e6:02:
ea:f3:94:9f:21:c4:30:4b:d2:50:33:ae:ed:a0:6c:
bd:da:20:07:a6:f8:0e:1a:a3:17:ce:b8:14:0c:53:
20:1b:a5:0e:5a:b7:aa:b1:71:e4:e3:c0:17:7f:66:
10:46:56:14:e5:b5:51:33:08:be:06:33:88:8b:6a:
e5:33:1e:60:d7:aa:76:e8:89:0f:7c:74:2b:db:dd:
de:65:d5:18:d5:7b:ce:02:91:45:49:c6:74:25:14:
6e:a4:bf:fe:e8:a8:6f:ac:12:ec:9b:65:64:9b:c9:
0d:0f:54:0f:d8:a5:9c:bb:21:76:28:ba:7d:bc:b3:
a8:15:64:2a:ed:99:67:ba:f3:43:e6:79:3f:26:16:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F2:05:0A:E5:19:94:27:E8:C6:40:01:E3:CC:E9:F8:E3:01:4A:FD
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/jfIFCuUZlCfoxkAB48zp-OMBSv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.105.0/24
IPv6:
2001:7f8:bf::/48
Signature Algorithm: sha256WithRSAEncryption
b3:47:85:cf:a2:de:e9:4f:a9:f9:61:02:59:a1:40:f1:49:0a:
cc:42:7b:81:71:0c:7e:ac:97:a8:37:be:62:8b:ce:f0:13:79:
fa:2d:30:e2:84:9e:0d:a1:48:ee:5b:3c:9d:2e:84:06:f3:a6:
62:da:44:3d:e9:3f:f3:e1:78:ee:ef:91:ba:ab:be:af:b6:42:
51:b8:1d:2b:c9:7e:72:57:13:56:3b:73:ce:fc:87:f5:89:e6:
69:31:e6:fc:6d:1b:66:88:79:50:99:d7:99:1f:24:61:3e:eb:
26:a3:b5:96:3d:71:27:86:44:d6:dd:db:db:09:fc:35:0e:9d:
c4:b6:ad:33:8c:6c:64:0c:ea:95:dd:7d:12:3b:4d:e1:2e:e6:
53:1d:56:35:d6:74:f1:4f:b7:cf:3b:ba:56:b2:0e:fe:9d:66:
b0:94:52:ca:b9:14:86:2b:7b:6d:86:e5:ac:d8:92:72:8a:d1:
ef:2a:7f:e2:de:8d:a6:40:f4:f3:a8:fe:08:64:3b:f4:94:55:
b6:ec:26:6d:86:61:7f:01:9a:9f:d3:a9:83:1d:5f:00:01:b9:
38:b7:ab:f1:c7:0f:17:36:64:00:28:17:ad:ee:b8:06:f1:ae:
06:f8:1e:f3:9f:06:ad:34:b7:1b:55:f9:1c:f1:89:b3:eb:50:
e7:6b:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:29 2025 by rpki-client