Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/8V7ejxEv_GEeH4w675eVpJxAMGA.roa
File: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (raw, json)
Hash identifier: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=
Subject key identifier: F1:5E:DE:8F:11:2F:FC:61:1E:1F:8C:3A:EF:97:95:A4:9C:40:30:60
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019518483E94255C0DB29516FDE6B03D1C67
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/8V7ejxEv_GEeH4w675eVpJxAMGA.roa
Signing time: Tue 18 Feb 2025 08:59:02 +0000
ROA not before: Tue 18 Feb 2025 08:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.75.244.0/24 maxlen: 24
185.75.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:48:3e:94:25:5c:0d:b2:95:16:fd:e6:b0:3d:1c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Feb 18 08:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f15ede8f112ffc611e1f8c3aef9795a49c403060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:03:1d:56:e7:c0:bd:1a:48:e8:bf:b8:79:
91:d8:f8:27:57:ee:a6:97:20:4b:18:bd:81:a9:e2:
33:56:67:3e:93:bb:ad:3e:15:b6:1b:55:f3:14:fa:
28:fd:49:f9:8f:91:23:0d:a4:db:d5:db:84:ea:9e:
11:58:50:34:1f:7c:03:65:49:e4:d1:62:62:cd:30:
49:71:2a:5a:4a:59:97:9f:1e:fa:78:46:00:f6:24:
aa:88:4c:7d:c8:91:0a:ee:b8:e4:d8:60:cf:b1:fc:
f8:e1:ce:3d:d8:d6:de:6f:3f:0f:b9:04:cc:5a:01:
9b:75:67:26:1f:16:3d:95:00:0f:ca:ac:c5:a3:b5:
d3:f1:24:7a:80:35:5b:bc:ed:74:f5:e2:9f:85:86:
d4:ec:6d:7f:58:7f:b4:e8:26:ed:78:bd:d2:d3:26:
c1:d6:0c:90:a5:20:dc:a5:ec:3b:7a:68:f0:f8:fb:
ae:61:1a:c4:dd:49:c6:ea:81:cf:f3:19:72:89:2a:
de:3f:94:fc:2b:07:e9:d5:d5:e2:11:31:28:70:2e:
d7:b4:32:ef:53:4c:9a:22:ee:74:00:fc:a7:90:ac:
fe:67:df:2d:68:0f:83:3b:7f:84:74:a7:92:1f:8c:
28:19:5a:f7:70:d2:4b:4c:ac:4e:24:f5:a6:1c:eb:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:DE:8F:11:2F:FC:61:1E:1F:8C:3A:EF:97:95:A4:9C:40:30:60
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/8V7ejxEv_GEeH4w675eVpJxAMGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.244.0/23
Signature Algorithm: sha256WithRSAEncryption
36:3a:19:46:a7:e4:80:26:96:e4:86:e2:d8:bc:8f:4c:90:de:
e1:1e:12:21:8b:69:7b:df:8a:28:ce:e3:d3:d9:7a:6f:3e:05:
39:3c:4b:c4:f4:cf:58:65:a7:26:61:79:b0:a1:c7:62:27:9a:
c3:3f:7c:8b:4f:3b:4b:59:cf:90:85:bb:fb:03:9f:9b:27:1c:
11:67:d7:08:b4:e3:13:07:b1:de:72:1b:6f:10:f0:9f:76:ab:
9f:69:29:1e:6f:76:2c:e2:8b:89:68:9b:dd:9a:8a:06:6a:24:
80:91:ab:ca:24:ca:e0:a4:55:60:62:40:97:7a:6a:9b:b2:05:
9c:ba:d4:bb:13:3c:41:e2:7b:79:32:31:8b:00:56:f9:8c:16:
50:86:c2:a2:53:64:22:b5:14:a8:21:db:d5:d4:93:7d:fd:75:
f7:27:41:22:5a:e0:49:78:a3:f0:a9:c1:3d:96:99:ab:cf:9c:
c3:84:b7:8f:f5:92:01:ca:5b:6b:7b:09:ad:ea:f2:46:04:59:
db:07:c2:a8:48:ea:75:c7:65:be:12:38:37:c3:1d:1e:a2:8c:
58:cb:d0:93:2c:cd:2d:f5:73:5a:a6:dd:c7:97:8f:63:08:83:
30:de:24:3a:e3:8a:df:1e:a2:a5:93:49:97:b4:fa:e8:91:06:
ed:7d:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:39 2025 by rpki-client