Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DH1xk18A8NpBc7_TD_BpgH4d4EY.roa
File: DH1xk18A8NpBc7_TD_BpgH4d4EY.roa (raw, json)
Hash identifier: TAjvGcl2Opox/0C2BQ2V/VW+FoDs+fMIS55HW5uRl1U=
Subject key identifier: 0C:7D:71:93:5F:00:F0:DA:41:73:BF:D3:0F:F0:69:80:7E:1D:E0:46
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFB38BFFD65D1A0743F723B47C524
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DH1xk18A8NpBc7_TD_BpgH4d4EY.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42295
IP address blocks: 185.240.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fb:38:bf:fd:65:d1:a0:74:3f:72:3b:47:c5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c7d71935f00f0da4173bfd30ff069807e1de046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:5e:44:54:e1:bd:37:60:7a:6b:0e:6d:e8:
32:75:53:fe:0d:86:59:fc:12:f2:f5:82:64:18:35:
89:4d:fa:e2:72:e5:8a:44:b2:79:01:dd:e4:68:a7:
f6:d7:5d:6d:c4:5a:3c:7a:3c:fd:5c:11:e9:10:62:
4c:e0:5a:16:5d:fa:45:48:dd:d7:d0:82:ca:86:e9:
10:1a:90:93:91:e5:bc:7a:f6:47:75:e0:f3:a6:9d:
1e:41:16:44:2e:c0:7f:3a:6e:16:b8:ee:0d:ba:b2:
b0:d7:01:44:da:e2:6b:97:95:d5:62:7d:be:85:58:
68:10:29:6b:de:d5:59:71:be:8e:4a:57:4a:c4:08:
60:7c:61:12:97:2c:74:e0:39:96:e3:d8:b9:8f:57:
c9:1e:23:75:b5:06:03:73:e2:f5:75:a4:4a:1f:36:
48:ba:02:aa:6c:b9:f9:93:9a:97:4e:58:7a:9b:39:
6c:97:64:ff:67:f4:ea:ee:04:30:ec:0c:37:51:5b:
d2:45:ab:72:c7:7a:7c:b4:26:66:e1:9e:64:34:35:
e7:60:d0:d0:95:89:65:94:dd:1a:5e:0a:84:3c:6f:
30:57:0f:91:25:b2:a4:16:85:e7:fb:bb:84:94:ff:
de:32:19:e0:ed:bf:6a:4c:f8:28:14:72:bb:57:90:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7D:71:93:5F:00:F0:DA:41:73:BF:D3:0F:F0:69:80:7E:1D:E0:46
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/DH1xk18A8NpBc7_TD_BpgH4d4EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:33:27:1d:2a:9e:f9:a2:10:a5:67:89:2a:58:84:49:8d:26:
f4:4e:e1:3c:19:a7:8d:a3:67:f2:3c:37:6b:54:4f:d4:91:f5:
cc:32:8c:8d:ed:1c:1d:79:ce:7d:49:07:cc:30:d0:99:b7:e7:
43:f3:d5:e5:d5:b4:5e:71:42:d2:0d:f2:3f:51:0a:44:cb:c5:
95:a6:95:73:fb:38:15:5e:13:12:69:3a:0d:ed:e8:b3:cd:da:
42:14:9b:6b:c0:b0:39:9d:82:1b:66:66:2d:97:ec:33:6e:ce:
af:c7:93:e1:f5:e2:53:e2:60:d3:d3:c0:a3:4f:c9:a9:d7:88:
48:c0:78:4e:a1:65:23:66:59:e8:d1:68:4d:3b:70:d1:db:aa:
6f:65:c8:0c:ae:73:0b:07:40:4f:84:e1:94:dc:d3:2f:43:31:
17:74:7f:53:4c:75:4d:9f:b4:1a:f3:c0:9d:7b:6a:70:f8:55:
75:ef:86:aa:0b:de:f8:24:ca:27:35:71:3e:e4:92:cb:2c:2d:
cb:31:7f:ed:32:f2:67:ff:2b:4c:37:7c:a2:28:6f:94:a7:1b:
38:d1:c8:85:a4:7d:45:75:45:2c:cf:3d:5c:c3:af:c2:72:f8:
d8:fb:09:9d:f3:a1:4b:71:0b:c9:15:42:53:2d:a1:ca:ce:6b:
3c:d0:f6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:37 2025 by rpki-client