Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/04fz4DJk-EFjLGdlw1k17cKuph8.roa
File: 04fz4DJk-EFjLGdlw1k17cKuph8.roa (raw, json)
Hash identifier: D6MXM1xAweDO9fMDQkpUDosXdifPY+H8WjUSikX0QN0=
Subject key identifier: D3:87:F3:E0:32:64:F8:41:63:2C:67:65:C3:59:35:ED:C2:AE:A6:1F
Certificate issuer: /CN=0900ecb0ca64a78c33a69b0446eb5a8b4b1333a5
Certificate serial: 0DAC0A2A
Authority key identifier: 09:00:EC:B0:CA:64:A7:8C:33:A6:9B:04:46:EB:5A:8B:4B:13:33:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQDssMpkp4wzppsERutai0sTM6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/04fz4DJk-EFjLGdlw1k17cKuph8.roa
Signing time: Sat 01 Jan 2022 09:58:30 +0000
ROA not before: Sat 01 Jan 2022 09:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 185.225.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229378602 (0xdac0a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0900ecb0ca64a78c33a69b0446eb5a8b4b1333a5
Validity
Not Before: Jan 1 09:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d387f3e03264f841632c6765c35935edc2aea61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:b9:23:3e:7d:99:69:61:65:5f:b6:94:a3:
41:ca:c7:af:8f:7d:ba:d7:9c:e2:ac:17:d8:fd:17:
39:17:66:13:54:67:19:ee:94:eb:7c:06:6c:20:ca:
37:6b:4b:9c:2d:09:ea:88:03:ba:21:87:c5:0f:c4:
33:6e:c0:00:37:6a:67:88:51:d3:22:a4:05:61:7a:
7e:2a:88:6c:8b:23:3a:be:7b:42:c8:55:3a:df:15:
ed:ff:e3:46:82:28:24:cf:4a:17:24:e3:b7:c7:3e:
cc:fd:17:fa:c4:bd:d8:d6:d2:12:8b:5e:2d:2b:22:
b7:a3:70:66:fd:ba:b3:d4:00:c0:a3:ee:db:80:03:
9a:eb:31:99:dc:98:58:49:be:37:7e:4a:af:a0:e2:
46:e0:ab:31:81:97:df:fe:54:68:10:7e:2d:89:95:
4d:29:e5:05:89:2f:94:47:45:21:c7:72:d0:1c:ab:
be:86:3b:f3:22:8f:6d:81:d1:8c:3b:de:19:49:88:
d6:d3:64:11:3f:ea:20:2c:ba:2f:c8:9f:06:ea:ba:
be:9e:ac:8e:32:5f:b7:53:0e:9d:2a:57:fc:26:50:
6d:13:29:e0:a7:ee:aa:f0:e4:c8:d1:16:96:97:eb:
f3:88:97:42:96:6a:f7:ae:e5:09:26:a0:34:36:98:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:87:F3:E0:32:64:F8:41:63:2C:67:65:C3:59:35:ED:C2:AE:A6:1F
X509v3 Authority Key Identifier:
keyid:09:00:EC:B0:CA:64:A7:8C:33:A6:9B:04:46:EB:5A:8B:4B:13:33:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQDssMpkp4wzppsERutai0sTM6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/04fz4DJk-EFjLGdlw1k17cKuph8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/CQDssMpkp4wzppsERutai0sTM6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e1:34:e2:78:c6:ff:cc:f1:a8:7b:45:56:a6:e5:9a:1c:c5:
29:97:c2:e5:e0:07:e0:ae:96:26:32:11:02:2a:60:55:39:a9:
23:11:40:15:eb:40:ab:f7:0d:d3:31:23:36:71:db:49:82:f2:
96:e2:b5:0d:6a:9f:ff:8c:7e:54:59:89:37:02:bb:2e:b8:28:
71:ab:fc:19:8c:7c:b2:fc:e6:02:94:ba:00:78:f1:a1:17:59:
78:d5:4e:7a:ff:0e:7e:ba:fa:1a:f5:eb:80:ee:45:47:57:fb:
0e:34:a7:0f:2f:ae:bd:ac:10:bb:d1:9a:5f:c5:0f:15:2f:09:
12:67:7f:ce:39:51:1a:d9:18:76:d5:6d:e7:23:da:36:39:7c:
bd:04:3f:93:70:eb:fe:2a:62:5f:6b:9b:34:69:31:b8:ae:8f:
f9:a5:4e:57:8a:2b:be:8c:05:41:56:a6:11:09:43:5d:cf:f9:
1a:62:e1:68:a9:1b:4c:bc:92:cf:c7:e9:31:c4:2d:f7:59:03:
79:d9:d8:1f:c2:5e:93:8d:71:43:0b:00:7a:52:01:97:10:10:
68:b0:6f:80:ef:11:52:34:6c:46:62:f7:59:b8:9a:10:46:f4:
ce:f9:94:fb:31:49:4b:26:f9:27:fb:1c:3e:25:bb:70:07:dc:
37:8c:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:18:08 2025 by rpki-client