Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/H3J9vQn6K2WpcdcY5HgOFWtNqro.roa
File: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (raw, json)
Hash identifier: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=
Subject key identifier: 1F:72:7D:BD:09:FA:2B:65:A9:71:D7:18:E4:78:0E:15:6B:4D:AA:BA
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 0194258E5EBA051CC833A490ABD29C0CABCD
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/H3J9vQn6K2WpcdcY5HgOFWtNqro.roa
Signing time: Thu 02 Jan 2025 05:47:54 +0000
ROA not before: Thu 02 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33182
IP address blocks: 185.7.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5e:ba:05:1c:c8:33:a4:90:ab:d2:9c:0c:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 2 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f727dbd09fa2b65a971d718e4780e156b4daaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:c0:fc:c7:65:fe:dd:1f:1b:6f:d5:ae:78:
19:db:41:0b:6f:b1:9b:b2:9b:2b:79:5d:47:db:a5:
4b:7a:e5:1f:eb:ff:be:83:7d:1e:67:f6:87:41:ce:
2d:ab:8e:15:ef:1c:c3:24:8a:73:78:cb:88:ff:4c:
13:6c:36:94:5c:55:c9:84:85:09:ab:d9:37:49:8b:
3f:dc:02:ff:68:f0:d6:6b:1b:dc:c7:bf:7f:0a:1e:
4a:9a:46:98:de:00:1b:cf:14:23:5f:41:8a:b8:50:
da:6a:26:be:5a:86:b8:e5:70:b3:9f:95:c6:59:2c:
15:f4:ff:51:5c:10:cb:a3:8b:09:60:a1:4e:3a:33:
a8:77:f2:49:43:b3:8c:95:06:c5:1a:86:21:eb:46:
9b:c3:de:5e:e9:1d:c2:5f:3d:4f:1e:84:1f:45:3c:
09:69:80:da:bc:ad:1a:35:88:7a:16:49:6f:80:9f:
fc:6e:f3:bd:57:c5:97:3e:64:59:8f:d2:15:da:65:
1a:21:13:b2:02:56:38:75:95:47:01:47:dc:f1:4f:
13:a6:54:75:d6:f4:d0:3a:71:10:df:3b:95:0c:ce:
a1:aa:23:02:b3:51:ba:2f:40:a2:b6:02:93:40:f7:
61:2c:6c:55:bb:5b:da:44:b7:d8:01:b9:b7:48:0a:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:7D:BD:09:FA:2B:65:A9:71:D7:18:E4:78:0E:15:6B:4D:AA:BA
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/H3J9vQn6K2WpcdcY5HgOFWtNqro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.80.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:2a:4d:e8:29:db:d2:a4:34:0a:b0:6b:6c:dc:51:e4:0b:b4:
e4:1d:a9:76:6e:b7:a8:d4:1e:ec:e6:5c:43:2f:fa:5c:95:36:
0b:a5:50:3e:a1:a2:36:1f:6a:6a:a2:ad:56:c2:91:cd:e8:f5:
17:be:99:10:3e:34:4c:94:91:37:6a:8b:5a:71:80:f2:45:64:
a2:a9:15:97:8a:b9:e1:36:f2:38:d5:bd:5f:48:e3:d7:6c:e2:
4f:82:da:e0:b3:19:b6:34:d4:c7:fd:c6:f4:3d:32:1e:6f:3b:
9c:61:2f:ee:63:6a:3c:d6:c9:a2:57:2a:a3:3e:11:f4:66:49:
78:18:72:77:fa:df:86:3d:4a:1d:73:6b:d4:0c:d1:c3:be:52:
f7:b9:2f:73:74:67:01:04:3d:df:c5:a5:bf:9c:c6:e0:15:49:
e9:58:fa:37:32:ab:8c:9d:4e:8c:e4:fa:71:d4:f1:46:a4:37:
68:7f:78:da:42:92:37:98:ca:8e:16:05:2d:64:9f:e5:06:75:
68:a8:13:43:fb:e7:66:9a:77:96:f4:19:f8:91:01:af:06:d4:
09:4d:ae:9c:6f:b9:3b:cc:e4:4f:4e:c7:c5:7c:b0:6c:3b:12:
0d:c8:83:e1:b8:60:f8:c7:ea:d7:cf:9a:22:8d:87:6e:f8:d4:
cc:38:e2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:55:31 2025 by rpki-client