Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/PHL7NSBK95zaws9C31ZflNW81UQ.roa
File: PHL7NSBK95zaws9C31ZflNW81UQ.roa (raw, json)
Hash identifier: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=
Subject key identifier: 3C:72:FB:35:20:4A:F7:9C:DA:C2:CF:42:DF:56:5F:94:D5:BC:D5:44
Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial: 019422FAFA6722A4A4F6A24E01EE0197AA6B
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/PHL7NSBK95zaws9C31ZflNW81UQ.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47195
IP address blocks: 185.13.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fa:67:22:a4:a4:f6:a2:4e:01:ee:01:97:aa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c72fb35204af79cdac2cf42df565f94d5bcd544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:ea:eb:cf:e9:e9:a4:ae:21:da:d3:35:92:
d4:ad:da:ac:7c:c0:59:1c:33:da:cc:84:b3:68:8b:
af:22:ef:71:7f:71:00:6d:54:a4:3f:e5:12:c1:33:
0c:b9:e1:c1:13:9f:94:68:2c:fb:e7:fc:ce:d2:32:
95:a6:e5:56:a2:cf:74:fb:55:4d:f6:d8:4e:92:54:
3e:3f:a0:9c:ca:3a:04:ca:28:16:f9:be:39:30:85:
e8:00:5a:3d:b0:5a:4d:ae:e5:99:14:d2:84:a3:3e:
e2:87:04:cb:01:a0:21:59:55:52:de:45:9e:93:12:
bd:1a:b4:88:59:02:ae:d2:a2:ec:83:1d:82:68:ec:
81:58:00:fb:1f:7e:71:d1:38:6d:34:9e:1b:d0:0b:
38:0f:70:74:15:a2:83:18:1d:25:71:56:ae:81:72:
ed:5c:dc:d7:c4:02:64:52:e9:5c:0f:0b:70:d7:6f:
03:f6:73:b7:94:98:e5:f2:c9:28:bb:03:cf:39:4f:
81:e8:50:67:11:cf:b4:6e:f5:9d:00:c4:16:8a:8a:
42:c0:d0:f9:8c:a5:5e:65:ec:90:ac:21:6f:a3:18:
cd:62:c4:65:ca:3c:07:ef:45:56:c1:1d:7b:e6:ad:
f4:a9:10:c0:95:65:47:e6:8a:ec:38:1f:20:c3:6d:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:FB:35:20:4A:F7:9C:DA:C2:CF:42:DF:56:5F:94:D5:BC:D5:44
X509v3 Authority Key Identifier:
keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/PHL7NSBK95zaws9C31ZflNW81UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f2:6a:76:c5:49:c7:dc:60:79:12:51:39:4a:1b:fb:7c:5d:
90:d0:52:36:ab:5c:cb:25:9f:d9:ef:48:43:8a:c8:45:58:c9:
bd:fe:da:22:b9:cc:bc:df:fe:95:27:92:9b:17:9a:8a:39:82:
36:7a:37:b0:b0:81:d4:08:44:e0:78:7f:63:83:72:68:f9:70:
f8:a8:e1:42:68:8f:77:27:94:2b:c9:11:cc:c6:b6:46:fd:e1:
f6:70:c7:33:68:fe:f5:83:ec:31:5a:61:61:35:f5:8a:47:89:
69:ef:31:70:46:08:9b:6d:6f:1e:b5:d4:8d:f1:3e:67:39:41:
7e:b1:9d:47:73:58:01:29:b3:1d:c8:46:47:00:2a:2a:27:91:
44:c2:c0:0d:2e:26:42:14:fb:3f:8c:fa:21:52:79:2a:ca:8c:
c0:dd:fb:73:10:da:ff:08:1d:6d:ae:32:75:20:bf:2c:4a:09:
1a:0e:aa:9e:bc:66:25:a0:bc:18:49:5b:73:8b:b6:21:40:49:
d7:a1:25:da:47:4f:0d:eb:ac:73:e0:e1:6c:3c:ed:eb:5c:cf:
be:c7:9c:3e:b3:cb:c8:f5:0c:a5:e2:7a:e1:62:ed:6c:08:9c:
8e:0a:44:94:d8:63:68:e8:49:bd:b5:2c:e1:35:0d:eb:06:8b:
7c:3e:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:37 2025 by rpki-client