Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/8uqjL1Q7jgFdAvMEecW_AW4apnU.roa
File: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (raw, json)
Hash identifier: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=
Subject key identifier: F2:EA:A3:2F:54:3B:8E:01:5D:02:F3:04:79:C5:BF:01:6E:1A:A6:75
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019427B5D84CE2F64ABA807E68D4534174C2
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/8uqjL1Q7jgFdAvMEecW_AW4apnU.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 185.252.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d8:4c:e2:f6:4a:ba:80:7e:68:d4:53:41:74:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2eaa32f543b8e015d02f30479c5bf016e1aa675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:ed:d4:48:7b:43:b3:af:07:67:16:39:8b:
82:a3:9c:b9:d7:6c:54:d6:69:c8:c3:b2:2e:ea:f7:
d5:cf:80:f0:99:3d:5a:2d:3d:04:3e:0b:14:af:10:
2c:6b:31:6e:8f:ba:32:99:4c:54:ea:65:fc:55:87:
61:6c:b3:c5:27:5b:52:9f:c0:f4:6a:15:04:d2:e2:
c1:01:c8:44:f5:cc:d4:a5:e8:0e:f4:dc:7d:2a:0b:
71:7c:79:fe:5b:bc:15:74:4a:65:a7:55:aa:c8:cd:
be:74:fb:c5:83:c9:4c:1b:91:e9:d4:0b:59:02:02:
8d:1f:ea:5d:d4:8c:6d:55:22:44:6b:7f:ac:75:bb:
99:e2:e5:b0:a4:d1:3b:31:12:3e:8a:ff:2d:6b:20:
df:33:0e:ac:c0:1a:44:b6:ec:84:e0:9d:56:97:4e:
dd:8f:e0:80:d4:6c:c3:4c:10:ad:24:f5:7b:c0:f2:
cb:92:5f:01:9c:e1:46:3b:17:38:9e:24:77:62:28:
d9:c6:70:af:6c:ea:2f:44:b8:d8:83:a5:b5:f1:e9:
1d:08:af:f0:29:13:5a:a5:1b:e1:22:54:9e:f6:31:
6b:58:5e:b0:ce:82:c4:0c:f3:b3:dd:05:4b:69:60:
22:9b:ac:63:68:7e:fb:23:24:d0:51:2d:11:cb:32:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:A3:2F:54:3B:8E:01:5D:02:F3:04:79:C5:BF:01:6E:1A:A6:75
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/8uqjL1Q7jgFdAvMEecW_AW4apnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.43.0/24
Signature Algorithm: sha256WithRSAEncryption
68:94:8e:25:d7:43:ba:a1:6d:71:cb:47:a0:c2:fa:08:bc:e8:
0c:9a:b7:2c:da:f2:a6:3f:d2:6a:39:4d:e5:a5:f8:80:98:c9:
c7:90:d0:bb:c0:2b:48:2f:58:47:3a:65:6e:8b:b5:e5:28:45:
e1:b4:ad:85:20:70:91:3d:40:14:fc:eb:23:5c:ba:b6:1f:ae:
08:84:67:13:95:ce:24:d3:e5:93:e3:db:bf:22:c9:5c:2d:03:
0a:e2:d3:c9:26:87:96:67:e2:78:a0:dc:98:e5:4b:55:f6:ab:
f6:97:f5:26:73:8b:3c:ed:28:9a:10:91:68:20:16:32:2e:7e:
eb:88:b9:2b:f6:d0:e4:02:37:a8:e4:77:89:cd:d2:40:ec:c0:
f5:f3:13:ab:62:6b:91:00:aa:cb:53:c7:7a:2b:ea:3a:65:36:
79:da:fa:6d:35:cc:97:03:f3:0c:17:b6:f4:5b:6a:8d:f8:09:
48:c9:5b:8b:59:c5:1d:b0:cc:fd:13:91:67:2f:7d:8c:0c:06:
cb:a3:1b:99:e0:bd:be:b4:6f:8d:3c:e1:a6:c2:c8:a8:8c:c6:
8d:7e:af:7e:61:8d:ac:45:13:e9:59:e4:82:7c:bf:f1:84:7d:
68:57:82:3a:6c:ca:de:d4:00:a3:12:94:18:65:db:d9:50:32:
74:17:77:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntdhM4vZKuoB+aNRTQXTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NmUwYzQwZTRlOTM3MGRiOTlhZDI3YTk3Mjk4ZDdkMDU1
OThmNzMwHhcNMjUwMTAyMTU1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmVhYTMyZjU0M2I4ZTAxNWQwMmYzMDQ3OWM1YmYwMTZlMWFhNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Lt1Eh7Q7OvB2cWOYuCo5y512xU
1mnIw7Iu6vfVz4DwmT1aLT0EPgsUrxAsazFuj7oymUxU6mX8VYdhbLPFJ1tSn8D0
ahUE0uLBAchE9czUpegO9Nx9KgtxfHn+W7wVdEplp1WqyM2+dPvFg8lMG5Hp1AtZ
AgKNH+pd1IxtVSJEa3+sdbuZ4uWwpNE7MRI+iv8tayDfMw6swBpEtuyE4J1Wl07d
j+CA1GzDTBCtJPV7wPLLkl8BnOFGOxc4niR3YijZxnCvbOovRLjYg6W18ekdCK/w
KRNapRvhIlSe9jFrWF6wzoLEDPOz3QVLaWAim6xjaH77IyTQUS0RyzKq4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLqoy9UO44BXQLzBHnFvwFuGqZ1MB8GA1UdIwQY
MBaAFCZuDEDk6TcNuZrSepcpjX0FWY9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUt
OWMxYTUzNTgwZTM5LzEvOHVxakwxUTdqZ0ZkQXZNRWVjV19BVzRhcG5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUtOWMxYTUzNTgwZTM5
LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufwrMA0G
CSqGSIb3DQEBCwUAA4IBAQBolI4l10O6oW1xy0egwvoIvOgMmrcs2vKmP9JqOU3l
pfiAmMnHkNC7wCtIL1hHOmVui7XlKEXhtK2FIHCRPUAU/OsjXLq2H64IhGcTlc4k
0+WT49u/IslcLQMK4tPJJoeWZ+J4oNyY5UtV9qv2l/Umc4s87SiaEJFoIBYyLn7r
iLkr9tDkAjeo5HeJzdJA7MD18xOrYmuRAKrLU8d6K+o6ZTZ52vptNcyXA/MMF7b0
W2qN+AlIyVuLWcUdsMz9E5FnL32MDAbLoxuZ4L2+tG+NPOGmwsiojMaNfq9+YY2s
RRPpWeSCfL/xhH1oV4I6bMre1ACjEpQYZdvZUDJ0F3fn
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:39 2025 by rpki-client