Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cIS4-3hf7d6naIGiWF2OiRwtfVM.roa
File: cIS4-3hf7d6naIGiWF2OiRwtfVM.roa (raw, json)
Hash identifier: LjLU9gkVVsnH8SjTQdazESe7grFxT2DZL/7t+QZrmfk=
Subject key identifier: 70:84:B8:FB:78:5F:ED:DE:A7:68:81:A2:58:5D:8E:89:1C:2D:7D:53
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194B332EC0C0C0D3289C6E3398090668404
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cIS4-3hf7d6naIGiWF2OiRwtfVM.roa
Signing time: Wed 29 Jan 2025 17:54:06 +0000
ROA not before: Wed 29 Jan 2025 17:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11798
IP address blocks: 150.241.121.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:32:ec:0c:0c:0d:32:89:c6:e3:39:80:90:66:84:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 29 17:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7084b8fb785feddea76881a2585d8e891c2d7d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:d1:ba:25:5c:30:c9:27:93:37:a5:71:30:
fe:46:41:8a:c0:f0:a4:1e:05:9f:f2:c6:41:df:ef:
8e:f3:f4:42:36:c1:c3:b2:bf:e7:82:48:db:e7:5c:
aa:e1:7f:8b:c1:ce:f7:dc:7a:25:42:10:07:7a:f1:
a2:64:c2:63:f4:fe:9d:2a:06:14:23:24:ca:93:21:
45:86:6d:c7:8c:70:72:b4:6b:18:18:3e:3f:53:71:
70:d1:e0:96:68:a4:63:8a:af:2e:46:ad:3d:7f:69:
be:f1:8e:87:f3:85:f9:60:a3:43:a5:b8:67:0b:b6:
4a:26:a2:02:12:d8:da:d6:02:f7:b9:72:86:d5:24:
fe:71:6e:47:b8:13:5d:f4:72:f4:53:1e:50:57:76:
bd:74:6f:5a:08:87:79:99:f1:71:c3:96:52:15:03:
d2:8c:ff:b0:01:e4:8b:8d:22:a4:e4:96:5f:2f:7c:
27:e1:20:ba:0f:a8:f4:2b:3e:7e:de:db:39:38:a5:
f7:d4:54:a7:b2:4c:e4:49:12:c4:7d:40:e7:58:80:
54:78:74:2c:1b:ab:6c:b5:5b:4e:18:9d:77:27:42:
b4:b9:cc:14:d2:ac:48:fe:30:3c:43:0a:79:91:b7:
7d:96:19:2c:38:44:db:6c:d4:2f:37:5d:cb:95:61:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:B8:FB:78:5F:ED:DE:A7:68:81:A2:58:5D:8E:89:1C:2D:7D:53
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cIS4-3hf7d6naIGiWF2OiRwtfVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.121.0/24
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:24:69:27:e0:5e:b3:9c:49:0f:1e:e4:40:42:49:c7:1a:2a:
3e:16:16:e0:72:11:1a:5c:ee:2e:b4:4b:2b:df:28:03:ec:f2:
02:e8:b4:73:26:e8:ad:76:cb:56:a7:40:1d:11:54:db:ad:e3:
b9:31:8d:a1:b5:a8:17:b7:ec:b5:0c:93:1f:d2:5b:94:60:68:
28:b1:69:da:fb:4a:54:67:f7:a5:84:50:45:5f:5b:5e:df:99:
71:83:bd:74:85:b2:a0:88:27:d2:e7:02:1c:94:9d:bb:d1:65:
c3:1f:fc:91:01:28:b1:43:bb:fe:59:67:2e:57:0e:fd:94:50:
c9:43:f6:db:24:6d:6c:af:7f:e8:f2:6b:17:65:26:fc:fc:23:
6d:6d:46:cc:2d:a7:eb:58:46:e1:d3:17:7c:86:9f:35:a1:96:
b2:25:20:50:77:f6:32:9d:db:e9:84:ac:28:bb:79:69:a5:be:
8c:9e:08:d2:1c:57:9e:54:00:28:d2:02:33:9c:ca:23:c3:d8:
3c:ae:5f:13:ba:1c:f9:fa:06:5a:d4:1e:08:47:a7:02:37:ee:
bb:4e:96:19:0d:e3:af:af:d7:64:5d:4e:25:d9:cb:12:11:bc:
6b:48:38:18:93:44:72:d3:2c:92:97:58:67:bf:75:67:c7:fa:
80:47:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:34 2025 by rpki-client