Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa
File: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (raw, json)
Hash identifier: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=
Subject key identifier: 12:1C:7F:6E:4F:21:7D:B3:DB:DB:00:82:91:B2:05:BA:DC:80:A2:24
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019420D64BEB7B6DB02615782C46137D8519
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47516
IP address blocks: 185.136.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4b:eb:7b:6d:b0:26:15:78:2c:46:13:7d:85:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=121c7f6e4f217db3dbdb008291b205badc80a224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:48:26:bc:ab:6a:ba:0a:70:b2:2b:38:f6:
a6:31:b7:14:03:1f:fb:53:a0:3c:54:39:1f:7a:c9:
5a:e3:3f:5c:06:df:5a:68:a0:f6:71:d7:c5:37:83:
ae:78:4b:66:ae:bd:e2:f1:ec:2b:7c:fc:a8:2f:d6:
9b:2d:89:56:68:ad:2e:9b:5b:ab:38:d3:65:11:c3:
1c:eb:5b:10:5e:60:ce:aa:cc:98:3b:14:53:d3:f4:
5e:21:5e:50:1d:94:90:64:df:8b:d8:6c:f1:47:99:
a2:16:f3:92:62:b1:47:6e:8c:3c:c1:bb:2e:30:89:
b3:0b:5d:db:08:6f:20:28:13:45:35:ab:d4:c4:45:
1a:3b:23:79:45:8d:ad:31:d6:68:cb:16:7a:a1:c7:
b8:ba:0f:b2:24:85:e2:5d:96:fe:93:12:3f:91:48:
04:76:04:f6:4e:e7:2d:c5:bd:7c:9f:be:24:c5:75:
ff:65:11:e0:1c:e5:e7:c9:ac:76:56:7f:0f:93:62:
2b:55:1b:a9:6f:62:30:aa:ef:bd:1b:8b:e4:52:b7:
fe:0e:cd:ac:24:96:14:12:76:28:a4:3a:a0:db:f9:
f9:b8:7f:f1:70:31:42:cc:e4:94:ea:e2:36:a2:f9:
ca:ab:06:be:19:61:86:55:06:de:c2:2a:58:87:96:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:7F:6E:4F:21:7D:B3:DB:DB:00:82:91:B2:05:BA:DC:80:A2:24
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
Signature Algorithm: sha256WithRSAEncryption
68:18:ba:ca:b7:41:90:bd:7a:1f:39:3b:3e:28:b0:73:7b:b4:
7a:5d:38:46:10:72:a2:04:8a:70:ca:9e:5b:77:0a:93:aa:77:
35:0f:10:61:92:75:0e:c8:c4:31:ce:27:3a:ae:e6:77:dd:8d:
98:d9:9d:73:ed:4c:c5:8e:d7:b4:27:30:19:03:43:16:63:4f:
cb:b1:96:8b:1d:28:c4:3f:65:f8:12:b9:19:a0:58:58:01:43:
65:94:c3:ea:a7:37:09:c9:15:21:77:38:4a:ce:a1:26:9e:00:
83:f9:a4:5a:13:52:39:d0:a8:6a:83:74:1a:17:51:98:fc:22:
55:6d:7c:c6:34:b9:f7:8a:ac:a3:9c:bb:d7:b5:85:ef:f9:33:
f7:17:50:49:c8:da:2c:a9:ec:bf:ef:1e:18:af:a4:27:a5:fe:
8b:3b:a7:3b:58:72:d5:21:cc:45:50:01:7c:2c:ef:9e:e0:f8:
65:90:3f:a0:19:da:cf:78:4a:8b:a6:e7:db:4b:08:1a:67:b0:
e7:1e:d0:de:49:18:56:ff:73:de:cc:2a:5a:bd:fb:20:38:ca:
fe:7f:18:59:d2:eb:24:a7:a4:6b:4f:64:2b:a1:22:47:bd:28:
60:5e:88:7a:51:4d:6e:ae:28:11:70:f4:47:6f:ce:9e:b8:df:
bc:99:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:50 2025 by rpki-client