Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa
File: 1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa (raw, json)
Hash identifier: Ez8uNLSpiX9S8lz0pVk5NS7jK9ai+KC6g5pGfPW50c4=
Subject key identifier: F8:6C:6B:EA:F2:16:E3:20:73:70:1C:24:A5:3C:AF:D3:D4:DD:3A:5A
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 019424B3BE39FB5D3BFE82E50672E968B758
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 185.14.237.0/24 maxlen: 24
185.14.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:be:39:fb:5d:3b:fe:82:e5:06:72:e9:68:b7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f86c6beaf216e32073701c24a53cafd3d4dd3a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:62:7f:e1:99:a8:eb:98:0b:e7:4e:dc:b6:
39:37:8c:12:b7:24:d5:dd:df:ee:ab:f0:37:cc:1d:
7b:4b:dd:c1:a5:35:20:3c:6d:02:08:ba:40:a9:40:
ab:66:05:f4:91:b8:eb:e6:c0:6e:3c:67:1e:5f:e5:
8a:4d:2a:1c:0b:2a:9b:31:94:bf:4a:58:88:cd:ff:
18:ef:02:8b:18:1f:2a:4f:15:37:6f:a9:0b:2f:5b:
fe:76:ee:92:6b:09:99:3a:bb:4a:65:57:97:e3:e9:
d1:22:38:dc:33:57:22:2e:96:4b:13:61:fa:e0:f0:
aa:8e:58:ca:a7:50:35:03:1b:42:23:ef:3f:8f:3a:
ae:39:c0:ca:c1:98:af:ae:7b:a8:c1:85:40:dd:b3:
b8:bb:63:d9:67:80:34:40:0e:ad:f8:db:17:e2:ad:
64:9f:c1:f8:77:1e:c8:3b:46:01:9e:87:b0:8b:fa:
9f:81:1d:1f:10:c1:2e:4a:f5:51:49:13:1a:d9:2e:
ce:58:37:f8:8c:37:42:34:68:1c:bd:5a:d3:54:82:
80:dc:a4:53:2d:85:74:7d:a4:67:1c:8c:0d:90:ae:
08:cc:76:c3:fa:b9:94:21:1e:3c:aa:8d:29:09:f0:
b6:f6:07:8a:0f:60:f4:f2:a6:11:cf:86:57:e9:cd:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6C:6B:EA:F2:16:E3:20:73:70:1C:24:A5:3C:AF:D3:D4:DD:3A:5A
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.237.0/24
185.14.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0c:02:5a:2c:d5:de:c8:b3:2d:7f:24:a5:a6:3f:81:6b:a9:
75:4c:32:5e:30:84:36:f8:2f:e6:d7:d9:02:4c:0e:7d:d4:a0:
d5:b1:e0:86:60:85:c3:6a:6e:bb:5a:fa:f9:4b:88:2d:08:8d:
f7:ed:cc:6c:00:80:62:cc:f3:e6:54:55:6d:9d:8e:fc:a6:1a:
55:31:c2:b7:9d:0e:aa:08:a4:9c:2d:6c:be:dc:f4:be:36:f3:
0e:08:8a:91:b4:b8:20:ba:a9:80:67:08:c2:63:81:9b:08:64:
c5:95:af:f7:60:17:9e:3c:66:b5:fd:26:21:d8:14:96:64:b0:
8b:3f:45:82:f9:06:4b:00:b7:0b:89:b6:d4:c9:d8:60:cf:fb:
35:9a:53:96:fa:2b:3f:fa:53:c0:cf:f0:c0:20:e0:d1:13:98:
a7:2f:c9:13:b7:b3:90:87:c6:80:21:59:2c:49:76:9e:41:60:
12:86:54:c1:cb:04:5e:5d:25:ab:ab:df:f6:b5:3a:fb:d2:30:
65:85:ae:5d:a0:57:ea:a2:b3:20:04:5d:be:7f:f1:25:e5:6d:
fa:89:2d:24:65:a2:45:69:42:ba:0f:7b:2d:79:a3:6c:41:e1:
81:c0:cf:fc:d3:22:8d:04:27:e4:44:e5:8b:38:8b:53:b6:d5:
89:12:7b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:53:04 2025 by rpki-client