Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/owNiq1Wdx9BZZcLD5MJt7gqpR5U.roa
File: owNiq1Wdx9BZZcLD5MJt7gqpR5U.roa (raw, json)
Hash identifier: 4DiMTERlhwRX7QkiBzhSZznLK5Ve77fzZSU7pArzl4Q=
Subject key identifier: A3:03:62:AB:55:9D:C7:D0:59:65:C2:C3:E4:C2:6D:EE:0A:A9:47:95
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0194DF70E99585CA05B36E49AEEE2E1039E1
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/owNiq1Wdx9BZZcLD5MJt7gqpR5U.roa
Signing time: Fri 07 Feb 2025 08:05:06 +0000
ROA not before: Fri 07 Feb 2025 08:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 185.217.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:70:e9:95:85:ca:05:b3:6e:49:ae:ee:2e:10:39:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Feb 7 08:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a30362ab559dc7d05965c2c3e4c26dee0aa94795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:a5:b7:3f:9a:d2:24:58:6d:6d:07:bd:01:
b4:ba:5c:bc:b3:68:d3:a1:af:3c:ef:f7:2d:04:3b:
e0:cb:63:98:dd:6f:75:42:0d:4f:fa:af:1e:9f:db:
6a:3e:7a:3d:16:89:de:99:0e:95:60:a3:11:57:57:
28:e9:f9:ff:fa:78:91:ca:89:12:51:0e:46:a2:ba:
67:0a:20:57:28:a4:ce:5c:5a:d9:0b:3f:ad:7d:d7:
25:f3:3b:80:18:65:51:8a:bb:b0:8b:1d:e0:ec:46:
fa:6b:d2:72:35:fd:0a:97:4c:65:52:0f:b8:01:92:
10:50:1e:54:36:c8:d8:9c:d0:5a:4b:00:88:73:7a:
a5:d8:5e:71:26:43:ed:c6:cc:d6:3e:99:fd:9d:6a:
fe:b9:b7:e6:6b:e0:d0:a7:22:ba:e6:c4:8e:9d:cd:
43:86:a5:ce:77:c0:fd:d8:cc:9a:67:12:fd:56:fd:
df:58:2e:a3:89:51:e5:1d:3d:e1:0a:0c:5b:08:b2:
f2:7f:85:7f:c6:ee:f3:c9:55:2c:cc:45:91:0d:f8:
70:d3:c3:9b:03:4d:6b:e2:0a:a1:a7:26:dc:86:db:
b6:fb:5a:12:6a:14:14:04:8e:73:52:9f:a4:35:17:
59:6d:cf:c3:7e:7e:e9:eb:31:b5:44:7f:85:43:c4:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:03:62:AB:55:9D:C7:D0:59:65:C2:C3:E4:C2:6D:EE:0A:A9:47:95
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/owNiq1Wdx9BZZcLD5MJt7gqpR5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cc:b3:60:8d:6c:da:6f:a3:bb:34:c7:38:0b:6a:3d:3f:68:
a8:6f:f3:38:a9:57:af:08:08:b7:8f:b7:94:73:46:89:3f:95:
bd:f9:68:11:d7:62:65:31:70:e7:b3:56:52:44:82:03:b9:5c:
01:c9:bf:1e:fd:3a:fb:bf:79:b4:bb:1f:fe:73:85:9d:84:eb:
b7:83:c6:c5:ea:ca:64:fd:1d:db:16:48:31:ec:36:f7:cc:02:
44:37:46:e2:7d:d5:2a:36:02:c6:78:83:06:2a:61:99:a1:d5:
75:96:4a:ef:7f:55:8c:12:ba:38:80:69:94:19:35:66:69:2a:
ca:b2:da:a9:f7:08:a1:e1:56:7a:e5:d8:43:7a:2f:41:34:bd:
ce:d5:b3:02:8d:99:23:d0:fe:23:7a:3d:1d:a2:b0:09:46:b0:
cd:bf:38:37:9d:10:cc:db:dc:ac:39:8e:63:e8:6f:8e:ad:bc:
ce:f8:9e:d4:56:fa:9c:2f:3e:bd:a4:eb:68:40:9b:aa:f0:df:
e9:22:d3:a7:cc:ca:d2:7c:fc:c4:aa:f6:aa:01:51:45:2a:a1:
8c:a4:1e:11:6a:2a:55:71:d7:07:64:b1:1d:f9:30:1c:3e:4b:
e2:5f:75:32:cb:55:31:e9:e7:f8:bf:f8:79:87:a1:38:90:cf:
fe:7e:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:51 2025 by rpki-client