Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/1FTEGjoHkoZFK1cPwrlQFxww5-0.roa
File: 1FTEGjoHkoZFK1cPwrlQFxww5-0.roa (raw, json)
Hash identifier: 2whZghkmvl5SMBxi0+AlcQhkI7zABB7sj32I/N4xdeA=
Subject key identifier: D4:54:C4:1A:3A:07:92:86:45:2B:57:0F:C2:B9:50:17:1C:30:E7:ED
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 018CC50062439BD119214798FE48061FC726
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/1FTEGjoHkoZFK1cPwrlQFxww5-0.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198601
IP address blocks: 185.234.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:62:43:9b:d1:19:21:47:98:fe:48:06:1f:c7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d454c41a3a079286452b570fc2b950171c30e7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:22:a2:30:09:1c:13:50:2f:df:7a:6b:38:
05:7c:36:5a:3d:35:19:8f:1e:ce:b8:46:a7:1b:84:
07:bf:32:8d:a5:68:7c:36:36:49:b1:1b:85:87:d8:
39:c5:73:38:a9:23:c9:bb:f4:c7:09:00:29:9b:fe:
cb:48:ba:a4:e5:44:7b:b9:c8:90:5b:0c:3a:3e:77:
ce:79:49:b1:28:cc:a9:78:18:17:2e:70:8a:71:79:
31:6a:04:0c:ad:64:19:9e:f0:89:29:f3:1c:bf:50:
25:d1:9f:1e:3c:b8:b5:46:72:ed:53:16:cd:07:3f:
d5:a3:55:69:c0:1e:70:8f:18:25:ca:1a:3a:10:d9:
98:40:80:19:ed:80:b3:3f:16:6d:67:ab:bd:4c:77:
6b:ce:4c:20:38:a9:a7:64:64:34:0c:0e:ba:41:fa:
17:51:30:43:17:c8:1e:1e:72:61:c3:61:80:c7:f5:
e3:7c:9b:29:1a:52:6a:33:bc:20:76:aa:1b:4a:b9:
9e:1b:9d:4e:26:e6:29:e6:e6:94:11:db:d4:db:9d:
09:b0:6c:d9:22:1f:fc:a5:5d:1d:54:9c:2c:ce:27:
a1:4e:26:da:3c:32:cd:ca:29:86:33:f5:9b:53:a0:
4b:9d:15:2f:3b:0f:e1:62:6b:8b:3a:e5:be:d1:ef:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:C4:1A:3A:07:92:86:45:2B:57:0F:C2:B9:50:17:1C:30:E7:ED
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/1FTEGjoHkoZFK1cPwrlQFxww5-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9c:70:90:73:35:92:45:ce:8b:31:f6:8b:e3:09:93:fb:b4:
4f:71:50:7a:c8:8b:9f:ee:61:c6:16:89:3a:25:f3:6a:21:19:
bf:7f:4c:13:1d:69:29:5b:89:6d:58:07:25:dd:6b:23:be:56:
80:61:8e:25:6f:3d:79:41:5b:b6:ba:a7:34:cf:25:ac:52:51:
59:8c:b5:5b:df:7b:c8:84:6c:6c:8d:79:ea:49:2a:b3:00:2c:
4c:b5:92:a9:77:eb:ee:7c:29:15:78:b3:82:ab:74:60:c2:0a:
7d:a9:a6:f2:70:72:82:e4:7c:f2:2f:c3:7d:56:67:4e:33:61:
3b:02:0a:a4:ff:31:87:e0:fa:23:90:26:e9:cc:2f:33:37:1e:
56:6e:6a:2a:c0:d8:a4:03:ee:0e:f5:63:00:88:9f:ca:d7:83:
11:9e:8e:46:a4:5b:68:ff:d9:c5:3c:3e:49:1e:96:86:75:6b:
ed:5b:a0:6c:fd:be:f2:78:cf:6b:d3:9d:c0:d8:ee:ca:54:c7:
1c:a2:13:47:a1:2c:f7:d0:03:46:b2:94:a6:04:01:1d:f7:25:
01:07:75:ba:ef:b2:58:c9:27:b6:91:e4:1d:91:0d:6b:62:72:
9c:0a:16:3f:e5:78:88:f5:d6:5b:f7:2a:74:d1:8a:71:af:97:
c5:42:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:33 2025 by rpki-client