Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ivBw7pb2lERE4O4pT70f-IjK-H8.roa
File: ivBw7pb2lERE4O4pT70f-IjK-H8.roa (raw, json)
Hash identifier: 9+du4uvg6+sqYU99LVsbimMbdhpdO5ppSVPQO3/HDIY=
Subject key identifier: 8A:F0:70:EE:96:F6:94:44:44:E0:EE:29:4F:BD:1F:F8:88:CA:F8:7F
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 019427486F270E7409C168558D3E75F2A366
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ivBw7pb2lERE4O4pT70f-IjK-H8.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42898
IP address blocks: 185.73.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6f:27:0e:74:09:c1:68:55:8d:3e:75:f2:a3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8af070ee96f6944444e0ee294fbd1ff888caf87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:ba:7a:a7:70:64:f5:92:7b:1f:0e:94:4e:
77:02:a3:2b:d1:5b:f4:a9:11:5e:74:bc:00:32:24:
c3:2a:2b:b6:5c:7a:d9:7b:7e:3b:a1:8c:f7:82:e3:
bc:bd:e8:62:e1:01:84:71:da:ea:ce:d9:f5:ab:a0:
65:03:89:ab:ff:87:cb:67:86:d4:d8:78:71:4a:cb:
73:36:58:ec:18:26:4c:c3:63:73:16:93:aa:1c:07:
52:e0:65:87:10:7b:52:75:65:74:8a:f0:6b:31:20:
99:8e:5b:61:1c:28:4c:7a:ae:b9:14:48:b6:94:0b:
56:30:bc:a3:c0:14:aa:d2:7b:6d:68:ae:c7:8a:40:
41:bf:77:c8:87:41:f6:3e:e7:14:3e:3a:1b:b5:12:
76:4f:0a:29:0c:e5:62:43:3b:2a:ca:31:c6:f1:4a:
49:20:ec:ff:3b:9f:1f:9d:32:d8:1c:df:a2:31:bc:
f8:41:e1:69:99:83:a3:82:2d:a3:6f:e9:a7:bb:ed:
8b:e6:8e:78:c9:a6:26:ab:31:93:54:0b:87:44:79:
91:57:44:6d:67:11:29:67:bb:75:2d:81:7a:d6:b9:
36:8e:73:1b:8f:5a:4a:c4:7e:5d:ff:97:df:57:22:
32:b3:91:44:18:bd:bc:8c:cc:0e:23:81:e4:1c:ee:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F0:70:EE:96:F6:94:44:44:E0:EE:29:4F:BD:1F:F8:88:CA:F8:7F
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ivBw7pb2lERE4O4pT70f-IjK-H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.243.0/24
Signature Algorithm: sha256WithRSAEncryption
34:54:01:4b:19:79:76:88:4e:e1:97:60:1d:0f:1a:ce:a0:e2:
a6:6e:82:4d:fb:b0:47:8c:71:12:61:bf:7a:fd:70:42:ec:0a:
62:ed:05:e6:1c:c6:94:5b:39:a6:52:f1:69:b7:c4:13:6f:08:
4d:82:67:8c:4b:cb:6f:25:52:86:4d:12:a7:a5:97:b8:2f:ca:
4b:47:25:65:a3:47:eb:05:59:71:d7:04:e7:50:6b:57:0b:30:
c6:ba:19:f2:07:58:5e:87:0c:c1:9d:ea:6a:bd:ad:63:5c:4d:
99:e5:23:6b:34:88:32:95:3d:6a:d4:b3:3e:ab:e9:8e:4c:29:
dd:03:ef:ee:96:99:cb:2d:0a:94:23:4d:82:ae:b7:22:9f:5b:
2b:2d:2f:cf:ea:f9:77:b3:47:4f:08:d4:08:46:fa:e3:17:19:
1f:f6:65:ba:a6:e6:ec:a8:f1:66:89:1f:76:73:b5:26:40:be:
d8:3f:57:a3:9f:e8:e5:df:1b:93:10:4e:61:33:3e:cb:b5:72:
6c:d5:2e:17:27:fc:90:3d:ae:b4:3d:33:74:59:3e:c8:49:bc:
c5:91:eb:30:01:af:bf:5f:2d:7e:fa:59:53:ff:b8:83:64:68:
f5:40:d0:55:ef:4b:23:4d:4b:63:76:6c:c2:26:6b:39:78:c7:
e7:98:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:51 2025 by rpki-client