Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Khq7MohgYUdwdsILURkMctGI2Es.roa
File: Khq7MohgYUdwdsILURkMctGI2Es.roa (raw, json)
Hash identifier: 7snSLpn25s7MS3HHPumrsFD7CRDMELbC1VwVqir8Mpw=
Subject key identifier: 2A:1A:BB:32:88:60:61:47:70:76:C2:0B:51:19:0C:72:D1:88:D8:4B
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0195C79476AF27400D36031A92010B30AE70
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Khq7MohgYUdwdsILURkMctGI2Es.roa
Signing time: Mon 24 Mar 2025 09:55:50 +0000
ROA not before: Mon 24 Mar 2025 09:55:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 185.104.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:94:76:af:27:40:0d:36:03:1a:92:01:0b:30:ae:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Mar 24 09:55:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a1abb32886061477076c20b51190c72d188d84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:44:fd:02:aa:0b:1f:79:90:d5:6d:5d:8a:
29:b7:e4:07:8e:f8:21:3d:b1:0b:f4:6e:49:a7:62:
c7:ae:a1:d5:63:03:fa:f9:dc:c4:78:93:ec:51:75:
69:de:50:cc:a8:ef:2c:53:e6:ba:fe:33:a9:d5:5f:
4f:f5:ca:b4:a4:10:8f:09:9f:42:50:81:66:b8:0b:
20:cd:b8:24:ad:ec:1f:70:9c:3e:32:0c:90:ea:ad:
65:c2:0d:7e:ef:b3:7d:e8:2b:65:5c:93:41:18:18:
a9:29:25:25:f1:c3:9f:65:fc:78:e3:ad:68:a2:4e:
26:4c:b9:00:10:21:02:42:d5:bc:31:4c:45:3c:35:
fb:db:fd:f3:c5:2f:ac:7a:43:8c:6c:8e:a0:e0:86:
a6:85:c5:c2:d1:8c:98:eb:97:d6:61:35:5b:5e:f0:
b0:77:3c:6e:f3:16:1c:cd:ef:0d:ce:1e:e0:31:18:
a0:13:93:1f:5d:b4:1a:11:25:51:30:40:d6:d3:70:
9c:ea:68:34:ae:f0:5d:1e:d3:46:a1:cc:97:04:23:
f3:a8:a2:ff:a8:a9:f9:a6:bf:5b:b7:c2:a7:e8:2b:
7f:a8:dd:3d:1c:0d:da:6d:69:c0:c4:91:2a:26:34:
6d:07:7c:e2:9d:df:4c:bb:77:c4:ca:5c:8b:e5:45:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:BB:32:88:60:61:47:70:76:C2:0B:51:19:0C:72:D1:88:D8:4B
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Khq7MohgYUdwdsILURkMctGI2Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.151.0/24
Signature Algorithm: sha256WithRSAEncryption
71:52:e7:3e:27:cd:b2:0a:ce:f6:b2:59:88:03:7a:09:e7:10:
69:f6:30:2b:27:5a:a4:e1:94:9e:63:95:f7:ac:6d:d3:11:0d:
39:60:89:96:09:f8:d0:95:f6:d0:61:ca:59:a4:9c:6a:0d:46:
3c:65:93:68:ad:b2:76:4c:36:10:f6:61:b9:4d:3e:b3:74:7e:
fb:dc:b4:20:16:7d:f5:26:82:ec:7f:86:7e:9b:ad:17:b5:f2:
45:40:15:fa:88:c2:0d:06:6a:b2:c8:86:73:70:78:e0:1e:20:
d9:d6:dd:2b:46:51:f4:43:c4:a0:8b:31:68:cc:30:9f:94:9d:
68:cb:79:2a:5c:e2:13:09:4e:5b:1a:a2:0e:be:bd:b6:35:a6:
a7:a9:24:64:50:90:78:79:b9:f8:a8:95:60:2c:f3:ec:da:40:
99:54:83:0f:8e:43:80:40:8e:33:c7:22:62:ad:7c:14:2d:d3:
d8:bd:21:16:78:5c:cb:a3:e0:b4:87:a8:5d:d3:6e:5e:0a:e9:
08:20:2e:6e:1e:07:83:51:cd:c1:cb:66:84:5a:8a:21:fe:4a:
e5:35:74:92:d2:94:cc:6d:e9:a1:78:3c:d5:03:bf:8b:e9:a0:
0d:51:79:fa:eb:2a:e3:77:99:8d:ad:0a:54:69:06:3c:8e:a7:
17:f5:65:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:55 2025 by rpki-client