Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/2PPfPp92gP7ZN1XYTs05NdeNFe0.roa
File: 2PPfPp92gP7ZN1XYTs05NdeNFe0.roa (raw, json)
Hash identifier: VL63d4eCMXJ85KSNT/DG966gx4kgp15bsn+i+OHsgV4=
Subject key identifier: D8:F3:DF:3E:9F:76:80:FE:D9:37:55:D8:4E:CD:39:35:D7:8D:15:ED
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 01941FFA7DBB9A08E41077B53C7DA497EAEF
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/2PPfPp92gP7ZN1XYTs05NdeNFe0.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35575
IP address blocks: 185.190.44.0/24 maxlen: 24
185.190.45.0/24 maxlen: 24
185.190.46.0/24 maxlen: 24
185.190.47.0/24 maxlen: 24
193.238.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7d:bb:9a:08:e4:10:77:b5:3c:7d:a4:97:ea:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8f3df3e9f7680fed93755d84ecd3935d78d15ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:f3:6a:4c:4c:ef:8c:3a:39:f7:0d:ba:13:
02:ca:e7:d3:78:3a:55:70:db:e8:46:85:04:60:e7:
38:bd:2b:92:6d:86:fc:9d:48:11:af:5c:30:a0:47:
f9:12:6d:0b:65:47:5b:9c:2e:7c:1a:eb:67:0a:28:
63:8e:c2:77:96:30:e0:34:4f:a4:28:e3:7c:1e:68:
b0:54:c8:85:d9:ff:db:ad:66:71:be:62:c7:2c:39:
4e:84:72:a2:a5:8c:1e:26:7b:fd:45:8c:38:ce:26:
06:18:9b:45:eb:a0:31:0c:81:50:25:23:a9:f3:90:
74:69:b5:35:7b:e2:cb:15:78:62:77:db:b0:25:fc:
ae:f2:d1:14:a3:d8:0f:9d:34:a5:22:b1:e8:db:c9:
c0:08:2b:b5:7b:94:b2:f9:bd:ee:12:81:97:b2:96:
e6:95:c0:57:85:29:4c:e6:88:bd:1d:c2:12:6d:c9:
e1:16:8f:b5:b9:e5:5f:3b:b2:a0:4a:f5:26:e8:6c:
e1:ff:b8:09:5c:bf:e4:35:71:fa:8d:a3:73:98:f0:
b9:75:19:80:8b:f1:2c:d4:d3:fb:37:f7:63:a3:49:
f8:fe:c4:b0:94:80:e7:58:f1:25:aa:38:5c:30:ea:
0c:b4:82:d6:f0:1f:4a:99:e9:31:d1:c5:10:b7:88:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F3:DF:3E:9F:76:80:FE:D9:37:55:D8:4E:CD:39:35:D7:8D:15:ED
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/2PPfPp92gP7ZN1XYTs05NdeNFe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.44.0/22
193.238.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:f8:05:9d:f0:df:df:d2:bc:be:a2:c6:0a:80:8f:2c:1f:41:
d8:de:d1:96:e8:4c:91:16:4c:e1:f5:3b:f8:5b:97:c6:af:6c:
23:7e:98:b3:ef:1c:3a:c6:b7:30:6f:f6:3b:f6:91:ce:47:24:
ed:cd:1c:69:a0:e3:0d:e6:df:01:27:e3:7b:c8:0e:07:f7:3d:
ba:01:e4:cd:b4:8a:ef:05:1d:ef:90:ae:34:6c:bd:5a:bd:65:
9f:a9:86:8d:82:9a:33:52:7f:d7:b9:66:5b:ad:78:be:4d:06:
b0:a7:fb:78:5c:dd:48:cc:0c:e7:21:b0:18:83:80:06:c1:0e:
4d:41:19:b5:4c:cc:90:44:23:32:c2:f8:47:6a:1e:ad:5b:bd:
98:8c:70:6a:a2:00:d3:03:cc:4f:0a:d9:16:b7:37:20:47:20:
95:72:00:b8:6f:d7:35:1a:81:9e:16:0a:77:0b:de:c5:01:67:
00:79:19:c7:25:9a:57:21:fc:08:3c:b6:41:89:d6:cb:5b:fd:
45:b3:ac:22:b1:dc:30:5a:ad:b1:2e:21:08:2f:4f:6e:22:12:
e8:fa:80:12:65:16:05:93:74:df:ba:78:fc:99:4f:11:eb:19:
e0:0f:90:07:ce:79:2d:3a:5b:38:77:25:64:c7:ab:b1:cf:49:
8d:fa:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:32 2025 by rpki-client