Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/72hcj4wbVqPsCBOmP2-2q0gKVwk.roa
File: 72hcj4wbVqPsCBOmP2-2q0gKVwk.roa (raw, json)
Hash identifier: JVI3uRWBk247N9J10ej5wPC2kk3iQ5bErEc04hMDgSI=
Subject key identifier: EF:68:5C:8F:8C:1B:56:A3:EC:08:13:A6:3F:6F:B6:AB:48:0A:57:09
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019424B3F94AB79C65180A8E49C9CCBFFF28
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/72hcj4wbVqPsCBOmP2-2q0gKVwk.roa
Signing time: Thu 02 Jan 2025 01:49:21 +0000
ROA not before: Thu 02 Jan 2025 01:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210122
IP address blocks: 185.229.240.0/24 maxlen: 24
185.229.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f9:4a:b7:9c:65:18:0a:8e:49:c9:cc:bf:ff:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef685c8f8c1b56a3ec0813a63f6fb6ab480a5709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:5e:b4:54:47:6c:ba:1f:e9:26:6a:b9:48:
74:bd:55:4f:03:87:76:0b:81:4e:35:2e:a0:7e:56:
9c:19:ad:b6:d7:f8:dd:7f:ff:63:68:61:9e:5c:42:
a7:ac:64:4a:73:ee:72:89:f5:5f:0b:0f:9a:9b:25:
76:ea:d0:c2:0c:79:a8:cc:ae:8c:8e:1f:30:93:bb:
f1:76:89:0f:2a:eb:a3:e0:cd:c9:60:86:0f:e8:ff:
99:23:95:e6:6f:95:99:23:6c:52:11:73:3e:de:2f:
14:8c:32:81:fa:d4:81:01:09:4a:81:12:f1:72:ec:
c1:87:28:61:2e:b3:b3:45:89:bf:f3:0c:cd:bd:f0:
2d:95:64:b8:21:86:ae:d8:fa:d2:b3:50:f2:d8:91:
06:48:e5:c4:ae:39:f4:86:35:b5:42:fa:b7:a1:0a:
cd:2a:82:a6:14:c8:04:3a:19:f2:32:c4:55:5f:76:
2c:4d:ee:df:88:b9:5f:8d:e1:94:0f:4a:b1:e5:7b:
72:22:6a:f5:c8:d4:5d:bc:51:a5:6e:db:b6:38:59:
8c:95:d3:a7:7d:ae:a0:34:9d:82:bc:92:bb:84:02:
dc:94:8a:04:07:b8:68:ba:43:e1:c8:16:bf:80:ab:
21:4e:9f:c8:a6:91:66:df:fe:7e:7f:b5:69:79:fd:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:5C:8F:8C:1B:56:A3:EC:08:13:A6:3F:6F:B6:AB:48:0A:57:09
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/72hcj4wbVqPsCBOmP2-2q0gKVwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
62:70:3a:2c:61:f3:3b:5f:86:30:8e:50:c1:03:8d:22:ce:f6:
1e:31:b8:50:19:6a:f1:00:f7:39:d1:66:bc:6b:22:f1:92:76:
9c:6c:9d:66:3d:7c:c2:be:35:53:2a:86:eb:d1:45:0a:ce:20:
1a:75:4b:e3:d5:cc:69:0d:d7:1d:62:17:d1:7a:61:5e:ea:77:
8b:c0:81:24:42:60:bf:db:75:cb:c7:13:47:fe:2e:9e:7e:b4:
90:4d:ac:23:9b:35:ed:8d:e6:03:26:33:9c:0a:73:90:86:0e:
18:db:10:3f:1d:7e:16:cb:dc:69:28:de:7f:ba:4a:f7:5e:6d:
16:37:cf:90:31:0d:31:12:7e:4a:97:16:88:aa:35:a9:b6:09:
73:dd:6d:80:78:47:b5:75:f0:66:23:29:23:a4:8d:15:16:7f:
ea:5b:ef:15:47:08:17:93:9c:cd:a3:79:47:e3:21:b0:e6:44:
64:b8:e8:85:79:3e:66:e5:78:a7:58:9c:b7:68:64:6b:f0:8e:
7e:8e:8f:aa:8e:45:b8:e3:d0:7d:2c:93:da:5a:94:1b:a9:28:
0a:24:36:fa:d8:30:cd:7b:5d:93:9f:e2:48:66:fb:4f:76:68:
cb:ed:de:41:b7:ae:25:89:98:17:a0:a2:f5:0d:16:ba:c4:fd:
71:5b:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:51:46 2025 by rpki-client