Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/aOjf7ha4NpM1xf113RLoBKrWwUY.roa
File: aOjf7ha4NpM1xf113RLoBKrWwUY.roa (raw, json)
Hash identifier: hUQXGx10+6VeL01cd/7kpuKBjZges7kH8YJzcunm/rU=
Subject key identifier: 68:E8:DF:EE:16:B8:36:93:35:C5:FD:75:DD:12:E8:04:AA:D6:C1:46
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 01942746FF6FF9241113865353891BF55C18
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/aOjf7ha4NpM1xf113RLoBKrWwUY.roa
Signing time: Thu 02 Jan 2025 13:49:11 +0000
ROA not before: Thu 02 Jan 2025 13:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203084
IP address blocks: 185.145.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ff:6f:f9:24:11:13:86:53:53:89:1b:f5:5c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Jan 2 13:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68e8dfee16b8369335c5fd75dd12e804aad6c146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:c1:28:c3:e1:71:dd:9b:d4:e5:0d:a8:46:
c1:37:54:2f:b2:0a:f3:53:2f:f6:6d:a2:a0:7c:1a:
25:f6:7e:ab:ed:80:a9:0d:d5:93:ab:b4:86:f6:5b:
b6:92:cf:86:f3:81:bc:fc:08:c7:03:82:7d:a9:f9:
a5:fb:79:45:4e:51:55:89:8a:1c:36:04:fb:7b:df:
2c:5b:a2:ac:83:5d:51:c3:a9:35:94:cf:b3:24:17:
f9:94:ec:33:ee:61:e6:6d:79:fe:a3:18:e8:b3:8e:
4c:46:74:d7:61:e1:28:6b:92:e4:7f:19:0c:40:6c:
c1:c1:5b:27:c6:5a:0f:eb:f1:08:6a:c5:c9:8b:95:
57:58:c1:40:9c:3f:db:8d:f1:af:34:95:83:c0:3b:
4c:94:65:76:c5:77:d6:7e:3c:f3:98:85:d3:6a:11:
6a:be:bf:b5:5f:94:e1:ca:33:16:dc:dc:12:83:8d:
4e:6d:6f:21:df:c7:9e:13:ff:fc:ad:eb:81:e7:50:
51:99:34:40:ec:ff:bd:ce:e8:e4:4d:ac:c8:ff:7d:
16:cf:3e:31:86:1f:93:ca:c6:a7:53:64:fc:3f:65:
74:33:00:76:50:d5:1c:54:0d:bc:55:0d:8e:60:d3:
78:b5:99:c1:ec:d3:5e:5a:34:19:5c:b2:ca:db:f9:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:DF:EE:16:B8:36:93:35:C5:FD:75:DD:12:E8:04:AA:D6:C1:46
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/aOjf7ha4NpM1xf113RLoBKrWwUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.144.0/22
Signature Algorithm: sha256WithRSAEncryption
25:8f:39:b5:0f:b3:14:d8:d6:df:fa:ca:47:21:e7:1a:52:2a:
c9:71:98:21:d9:8e:71:31:18:57:df:74:df:ec:28:32:e6:03:
65:73:f6:d2:04:6f:32:9b:bc:7b:08:04:1d:98:72:13:aa:1a:
28:51:90:59:50:04:3b:b5:05:9a:de:0d:7c:a5:a0:85:7e:4f:
a8:d9:e4:89:07:25:59:e3:1e:3a:74:39:84:8f:70:94:8e:dd:
74:11:3b:85:65:c4:00:a4:bf:8f:59:d3:b5:57:61:ce:3e:d7:
e0:fc:79:fd:8f:dd:c2:ba:61:75:20:b0:6f:6b:7b:73:ef:67:
1c:8c:37:8b:19:42:34:e0:4b:a4:f0:7c:91:75:15:72:71:1b:
34:03:ad:37:5a:c4:ff:60:59:33:4a:07:3f:34:ba:92:41:d7:
3d:de:bc:d6:1a:89:c7:a4:d9:fd:2d:69:f2:fc:a7:b5:4f:16:
90:b3:1c:17:03:84:96:ba:36:ae:3a:24:c3:81:81:75:8c:fc:
f6:03:66:5f:a7:fb:ba:3a:9a:77:92:d6:a1:a1:bd:2b:b9:9e:
0b:43:d3:e5:bb:b1:c5:5b:0a:19:97:44:1d:1b:48:f3:6a:03:
ee:1b:00:12:5e:50:b7:07:4e:6e:dd:4d:95:31:e5:fc:0d:6e:
45:72:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:28:02 2025 by rpki-client