Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/SfyjZoNF3Ft3WTn_nDM3mUSU62k.roa
File: SfyjZoNF3Ft3WTn_nDM3mUSU62k.roa (raw, json)
Hash identifier: AXhLGSiSEXpQZwnA4bt0BE5pnvFbovk6MEM3hbu9GiI=
Subject key identifier: 49:FC:A3:66:83:45:DC:5B:77:59:39:FF:9C:33:37:99:44:94:EB:69
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 01956A65041F4F775D13AC2D57B453E42092
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/SfyjZoNF3Ft3WTn_nDM3mUSU62k.roa
Signing time: Thu 06 Mar 2025 07:39:19 +0000
ROA not before: Thu 06 Mar 2025 07:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205225
IP address blocks: 185.117.62.0/24 maxlen: 24
185.117.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:65:04:1f:4f:77:5d:13:ac:2d:57:b4:53:e4:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Mar 6 07:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49fca3668345dc5b775939ff9c3337994494eb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:fc:ca:96:75:56:60:9f:1b:52:90:5c:92:
da:3b:87:21:de:04:c3:41:95:70:36:d7:d6:ed:48:
3e:a3:57:ad:42:71:c7:3a:66:95:13:53:f9:8a:cc:
10:bb:f8:a1:0e:14:70:4e:8f:07:33:42:c6:6c:97:
5e:a5:12:af:1c:1c:79:6e:a7:e0:8a:48:75:df:df:
da:fb:72:2a:0a:55:4e:ec:24:3c:98:c7:b4:da:95:
cb:66:77:7b:49:e5:58:27:6a:63:ff:d4:b6:72:73:
a5:cd:b7:5a:12:5f:ef:ad:0c:7c:4c:d7:84:c4:bc:
f8:7b:4f:19:12:de:69:01:4b:e8:5e:d7:f5:5a:28:
1b:26:5b:e0:63:31:a8:58:81:87:ec:da:b4:2e:f2:
78:a0:d7:75:a3:1d:b6:4a:4b:b6:3a:e3:50:98:fb:
a1:3d:8a:a5:81:ee:0b:53:ea:12:98:d5:7b:72:6d:
d7:37:e3:23:23:56:d7:97:3a:98:a8:de:d2:b3:9a:
7c:92:f6:a8:1b:04:f6:ff:c8:a8:f6:08:58:48:44:
22:89:7d:ed:1f:93:d0:1f:a3:9f:24:c8:60:af:c8:
61:13:39:17:c5:a3:0a:94:f3:38:e2:52:db:22:51:
3c:76:56:d3:19:42:e7:27:aa:c4:1e:fd:6a:dd:69:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FC:A3:66:83:45:DC:5B:77:59:39:FF:9C:33:37:99:44:94:EB:69
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/SfyjZoNF3Ft3WTn_nDM3mUSU62k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.62.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:f9:86:38:c3:3c:1d:13:54:43:59:5c:1a:03:d7:08:9b:17:
e2:fe:bd:4b:1f:94:4f:72:3b:ff:b3:77:a0:17:ff:7e:0e:be:
53:94:3c:55:89:d7:59:9e:6a:16:5b:39:ce:de:b7:a1:7c:59:
80:74:dc:b9:c9:77:bc:a9:2c:87:02:76:ca:93:10:4e:c4:ec:
91:4e:ef:66:f3:ed:69:9b:fc:c2:41:87:5c:e4:73:a8:66:fb:
ae:4a:b3:cc:20:e7:21:25:e9:ef:2c:b7:6b:ef:ce:4a:c8:3b:
c4:f5:77:88:cd:a7:d6:dd:35:af:97:fe:a5:b6:78:b1:f5:1f:
e1:0e:2c:30:3b:b2:17:6d:be:67:a4:15:47:1f:b7:50:1a:c9:
56:26:56:60:6a:d6:5a:4c:8b:94:77:7d:8c:cb:71:00:02:9b:
a1:00:a0:de:9a:56:ac:8c:85:7c:61:46:e6:dc:26:3c:0a:42:
e7:bb:04:dd:4b:79:d3:e9:d6:49:9f:41:a8:54:d0:c9:e2:23:
52:a8:6c:d8:c2:ac:24:c6:7e:fd:55:f2:03:15:96:de:7d:86:
0d:6b:af:5e:73:24:97:3a:db:c3:97:5f:78:f0:f1:e8:0f:2f:
92:1c:01:78:a4:45:df:13:20:a3:ee:80:bd:31:5f:21:f5:3d:
e9:22:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:10 2025 by rpki-client