Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/H-adpFxDzgm3Ihfm5yTkElLaOkY.roa
File: H-adpFxDzgm3Ihfm5yTkElLaOkY.roa (raw, json)
Hash identifier: JFhQUBwkXfF9hbwQFzAvo2FNMJOmEMEK9fLtnReKalM=
Subject key identifier: 1F:E6:9D:A4:5C:43:CE:09:B7:22:17:E6:E7:24:E4:12:52:DA:3A:46
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01942746361ACCEFF40C84467B19F0A2C517
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/H-adpFxDzgm3Ihfm5yTkElLaOkY.roa
Signing time: Thu 02 Jan 2025 13:48:20 +0000
ROA not before: Thu 02 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211619
IP address blocks: 185.244.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:36:1a:cc:ef:f4:0c:84:46:7b:19:f0:a2:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fe69da45c43ce09b72217e6e724e41252da3a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:49:ea:82:31:af:1a:e7:ab:e5:46:d8:b3:
69:28:ee:d3:95:5d:ec:77:15:69:70:14:5e:f4:14:
6d:5d:87:97:9b:70:7a:9e:d0:65:a8:38:ea:cf:d4:
b1:7d:b8:02:24:06:fa:a8:f9:55:35:69:30:fa:21:
70:51:12:a6:ba:a8:3f:0a:6b:7d:ad:13:d3:bb:66:
9e:78:e0:6d:5b:ac:b8:42:95:9b:4a:fc:ee:f9:d8:
97:23:eb:d5:54:67:4d:6d:21:5f:f7:35:e7:e0:4f:
d4:fa:a9:5a:1e:22:8c:e3:05:70:0f:74:a1:e3:12:
39:c1:22:32:23:14:00:fd:c2:91:4e:96:28:3b:e4:
25:46:e0:c0:e6:27:6f:3b:aa:ef:b2:27:a1:9c:02:
2a:7e:82:55:10:21:10:3b:c1:9c:53:48:bd:ce:0e:
99:a0:21:01:8c:34:55:7f:fb:9b:3f:05:2f:5e:bd:
db:a3:30:1a:2a:33:fa:4b:ec:3b:bc:e7:15:c2:a9:
96:01:6c:1f:6d:78:be:6a:28:70:89:36:4d:03:2c:
03:58:33:3f:57:af:e6:b9:91:b0:8d:25:23:e0:47:
40:b1:3e:6c:fa:6f:dd:eb:f9:ec:28:9b:47:84:70:
8e:59:5b:11:7a:be:36:75:47:37:37:f8:22:1d:9d:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E6:9D:A4:5C:43:CE:09:B7:22:17:E6:E7:24:E4:12:52:DA:3A:46
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/H-adpFxDzgm3Ihfm5yTkElLaOkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:90:e7:e3:82:f5:ef:fa:fa:4d:1a:b0:d7:e1:f9:97:98:b3:
fd:4f:c8:ba:4f:fa:8d:a1:ff:00:49:22:6e:eb:8b:62:df:ac:
7a:7f:f7:0f:ba:ae:9e:d5:4a:76:d2:76:44:57:34:01:bd:df:
57:50:d6:41:70:fd:4d:32:9e:a8:4a:37:69:d8:54:de:68:70:
58:fb:45:25:f9:da:31:52:89:fb:cf:6d:c4:71:49:29:c3:30:
f1:20:74:8f:3a:6e:61:c6:3c:35:88:16:8e:a8:e2:7a:36:02:
c4:68:42:04:a1:ac:c1:17:2d:03:3d:06:37:cd:45:7c:a6:97:
a5:9e:65:23:0c:9b:b8:47:1a:79:14:8e:a3:a2:cf:cc:df:c2:
33:21:a2:39:62:5f:02:97:fc:40:11:69:d1:7f:65:37:39:ae:
fa:7a:3c:d6:55:3b:c3:1a:72:3e:46:2b:b2:61:8c:32:34:71:
a2:fb:94:40:a5:c9:9b:82:dd:15:63:63:b7:d1:a2:63:c2:06:
cb:d7:8b:57:21:f8:2c:1a:49:49:90:99:65:e7:58:a4:82:55:
a4:c8:c1:a6:df:71:e2:ec:92:d3:ff:85:3f:ed:e9:39:c5:b3:
1d:91:fc:35:72:a0:01:81:e7:16:f0:ef:d2:df:a5:b2:49:2e:
56:09:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:34 2025 by rpki-client