Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/JO9p7ll9zISZm_xFhXLEAHl9qVY.roa
File: JO9p7ll9zISZm_xFhXLEAHl9qVY.roa (raw, json)
Hash identifier: 0DU1k9iGKTCSkZjHepyU1MLXd84qinXMdi3Y0J9F55E=
Subject key identifier: 24:EF:69:EE:59:7D:CC:84:99:9B:FC:45:85:72:C4:00:79:7D:A9:56
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 019425FC263F7ED85C64336A42DCAA93EDEB
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/JO9p7ll9zISZm_xFhXLEAHl9qVY.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205763
IP address blocks: 185.207.124.0/24 maxlen: 24
185.207.126.0/24 maxlen: 24
185.207.127.0/24 maxlen: 24
2a0b:2340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:26:3f:7e:d8:5c:64:33:6a:42:dc:aa:93:ed:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24ef69ee597dcc84999bfc458572c400797da956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:15:7c:7e:03:4d:17:d9:81:74:05:80:67:
7b:47:72:04:8f:ea:d3:c1:c0:78:bd:b6:be:10:6e:
bb:6e:09:9b:7b:dd:c0:4d:0f:fb:a4:31:ec:a8:99:
a1:74:a3:fc:b4:b2:f0:fb:c7:7e:9d:13:ab:9f:c1:
5e:f5:2c:92:0a:7f:80:a3:fa:8b:15:91:f4:c6:4f:
02:83:5c:f4:cb:48:78:76:f9:d8:05:fd:f6:b0:54:
6a:5b:fd:4f:15:35:32:9d:5a:b8:b3:09:5a:a0:7c:
17:02:0a:39:68:92:15:7e:65:5c:61:1c:ba:0e:1c:
08:8e:f2:ac:69:13:63:cb:ce:35:d5:de:e5:42:8d:
9e:eb:1d:33:0d:78:f1:45:dd:d5:88:64:87:ea:14:
10:1f:58:d1:fd:73:a6:47:c5:68:1e:19:76:0d:38:
a2:3d:41:1f:53:59:4b:f3:14:e5:00:e3:0c:c9:ea:
8b:34:14:9f:68:23:6e:46:b8:64:e9:9d:e4:68:a0:
90:91:7e:de:1a:d0:d0:01:a8:84:db:5e:a9:65:25:
85:9c:40:a6:14:75:b0:fa:c8:60:6e:92:5e:9f:42:
87:17:f0:0d:72:83:b3:c5:3a:cc:38:82:5b:d7:52:
5b:8f:f9:da:31:e8:3e:06:44:80:7f:84:ea:01:17:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EF:69:EE:59:7D:CC:84:99:9B:FC:45:85:72:C4:00:79:7D:A9:56
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/JO9p7ll9zISZm_xFhXLEAHl9qVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.124.0/24
185.207.126.0/23
IPv6:
2a0b:2340::/29
Signature Algorithm: sha256WithRSAEncryption
2e:28:f8:33:18:6c:30:86:4a:7a:60:5f:1f:5f:76:75:5e:00:
87:2a:2e:45:3a:f5:45:9e:f9:ac:9a:58:b6:7a:c6:37:0e:04:
87:cd:ad:5c:2c:f4:c5:54:9a:af:ba:99:a7:17:5c:01:8c:22:
a4:1f:56:69:85:dc:fe:21:9b:65:36:e5:9d:a6:6a:8b:50:ea:
0e:7d:1a:a8:14:ff:e6:bb:59:25:00:cd:19:6e:cb:e7:1f:3a:
c7:95:e1:c9:a8:c2:08:b6:6d:fc:7f:de:64:55:d4:0a:be:25:
c4:63:2d:7b:0b:40:80:81:90:5c:6f:76:27:d1:3b:6b:b5:88:
12:f5:f8:a2:88:4e:83:2d:e1:a7:78:26:24:62:c9:6e:1d:3f:
14:88:12:b7:eb:6b:51:4f:6c:20:5a:3e:ca:20:a3:ec:b6:77:
30:eb:11:a7:e3:46:de:cd:30:cc:b2:e9:0b:b6:02:e3:18:6c:
8b:0a:da:48:e7:fc:03:e6:59:39:4e:ec:55:bd:c2:85:10:f1:
66:bf:99:c8:df:44:64:16:06:00:25:ab:10:90:65:86:3b:8d:
7e:a1:4a:a6:f4:ac:ec:b2:68:c1:05:74:5a:bd:10:4c:b0:8a:
fa:4b:c8:96:e2:1b:37:0d:96:7f:21:ef:d4:5b:08:4f:79:36:
da:9d:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:11 2025 by rpki-client