Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ahr84eZNjYWY2iLRQSZih5fyo8U.roa
File: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (raw, json)
Hash identifier: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=
Subject key identifier: 02:1A:FC:E1:E6:4D:8D:85:98:DA:22:D1:41:26:62:87:97:F2:A3:C5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194F18A4F764C23FD98C0A7722AB047CCDD
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ahr84eZNjYWY2iLRQSZih5fyo8U.roa
Signing time: Mon 10 Feb 2025 20:26:00 +0000
ROA not before: Mon 10 Feb 2025 20:26:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211567
IP address blocks: 185.88.173.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:8a:4f:76:4c:23:fd:98:c0:a7:72:2a:b0:47:cc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 10 20:26:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=021afce1e64d8d8598da22d14126628797f2a3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:e8:2f:2a:54:f0:18:e0:41:a0:29:b6:9e:
43:4c:5a:f9:2e:83:37:26:ec:b1:36:53:f7:a6:81:
8d:40:8c:7d:ab:47:6a:c7:32:64:6b:2a:92:83:79:
40:cf:86:4f:b3:fa:cd:1f:c4:54:d6:1b:49:a7:6d:
6b:cd:3a:4d:84:29:2e:a9:b4:1f:e1:43:6a:3f:4c:
98:7a:5d:9f:fc:74:ca:cd:ab:ec:e0:84:47:1f:53:
db:af:46:f9:de:e5:9d:9d:97:6c:06:e3:07:db:6e:
f5:59:89:33:e5:92:f6:9d:8d:7f:6c:f7:5c:23:fe:
9a:97:5a:a1:ec:93:86:c8:c0:17:98:d8:4a:7a:ae:
af:b1:93:d9:da:83:eb:a2:3e:78:65:71:29:c5:80:
9d:53:fb:d4:1e:83:4d:ce:63:d8:57:e1:68:e7:f2:
6c:17:21:19:29:44:9e:e5:9b:a9:6e:b4:7f:15:f1:
3e:50:a6:55:47:44:53:5b:e4:e5:79:42:4b:b5:cc:
2d:55:0e:aa:a8:2a:b5:82:4d:ce:2a:3c:e2:2e:a4:
b8:55:6e:37:b5:ef:c1:30:e5:0b:e7:27:31:c3:72:
ee:b1:c7:89:d5:e6:e8:d3:a3:26:bb:a8:8a:c6:f0:
e4:ff:ba:66:bc:77:94:5a:93:00:6d:b5:65:0a:ab:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:FC:E1:E6:4D:8D:85:98:DA:22:D1:41:26:62:87:97:F2:A3:C5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ahr84eZNjYWY2iLRQSZih5fyo8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.173.0/24
185.250.210.0/24
Signature Algorithm: sha256WithRSAEncryption
63:60:f6:52:40:fb:11:4f:87:c1:a6:97:52:fc:61:a1:6d:e6:
a3:4a:31:64:37:d8:c2:f4:5b:61:9f:cb:e6:0a:37:7c:74:16:
3a:8e:2e:86:61:d5:19:80:34:e1:e5:f0:56:df:64:12:a7:e3:
90:ab:f6:ea:24:34:ab:bc:6b:0a:3d:53:15:01:b2:3f:88:2b:
e7:7a:8c:01:a5:2e:c9:c5:86:fb:43:e8:ce:6b:1c:0d:a2:85:
c2:13:a3:98:38:6a:d0:2d:ed:81:52:1e:04:ab:02:40:85:9e:
d6:68:40:2b:a2:c1:9e:f6:a8:66:45:c8:39:40:59:92:9e:9d:
3b:ee:66:52:0a:3b:59:9b:0c:6b:ad:28:ff:da:07:32:19:0f:
2f:c3:9c:0e:2d:e7:c3:7e:46:0f:2f:8f:d9:ec:4d:df:2a:ab:
ae:ca:e2:12:95:31:ba:30:59:d3:71:06:bb:97:6e:f4:bb:51:
1b:a0:4a:f7:ab:04:91:48:24:ab:e7:ce:27:09:f7:e9:f5:71:
c3:46:8a:2c:bf:62:9e:6a:d5:14:59:0b:d1:35:4a:59:da:ee:
9a:56:aa:b7:e3:fe:4e:8e:47:06:19:32:18:9f:55:c8:df:8c:
4f:a2:04:38:5d:f7:17:ab:d2:dc:b9:0a:b1:7f:43:4b:d5:44:
7d:6a:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:27 2025 by rpki-client