Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ffMOJCH57XDhxVWAdpjSreGD9Zw.roa
File: ffMOJCH57XDhxVWAdpjSreGD9Zw.roa (raw, json)
Hash identifier: i7v0Sk524R2gXX79V4UoUVkQYLOe25NBGigDFM7SZYY=
Subject key identifier: 7D:F3:0E:24:21:F9:ED:70:E1:C5:55:80:76:98:D2:AD:E1:83:F5:9C
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F020C28E895A97FF26CC715A2F0D4
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ffMOJCH57XDhxVWAdpjSreGD9Zw.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61370
IP address blocks: 85.187.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:02:0c:28:e8:95:a9:7f:f2:6c:c7:15:a2:f0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df30e2421f9ed70e1c555807698d2ade183f59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:8d:59:f8:30:74:25:94:3a:21:81:ca:b9:
2b:0e:1b:3d:f7:c4:bf:f1:ab:4e:a0:02:e7:52:c2:
5d:f3:be:34:31:3e:84:aa:a1:82:df:92:99:e1:0b:
bc:bd:da:a0:cc:b5:5b:83:14:31:05:c0:a5:87:88:
dd:f9:54:03:34:df:c9:c6:d6:5d:2c:eb:63:dd:cd:
57:84:67:2e:3f:6c:43:51:76:cb:ce:da:90:0f:2d:
1b:c8:7d:9f:a1:b0:98:27:67:a8:b4:16:55:b6:0b:
5a:1a:af:7d:92:6f:05:3d:8f:02:85:78:9e:96:ba:
03:7f:d5:20:b6:16:87:6c:79:ba:34:c5:cb:ec:3e:
76:a4:83:2c:a7:25:58:47:71:fe:1d:1d:0a:1a:6c:
12:ac:c4:43:aa:64:b3:5e:1b:a9:fb:20:ae:3d:c2:
c2:06:58:0f:de:f4:42:64:c8:33:84:68:8f:29:21:
cf:00:85:76:ff:b5:97:1a:c7:2e:b2:e0:c6:8a:8a:
b9:7c:59:39:d1:d9:a7:09:db:98:f1:c2:d3:86:fc:
a4:05:43:f0:f1:8b:ec:85:27:74:9a:45:e7:94:d9:
b0:82:d5:67:65:cd:5d:82:a0:ee:95:3f:e3:96:bd:
8d:e7:1f:cf:31:2b:86:0c:de:95:7a:de:09:9f:ed:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F3:0E:24:21:F9:ED:70:E1:C5:55:80:76:98:D2:AD:E1:83:F5:9C
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ffMOJCH57XDhxVWAdpjSreGD9Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.191.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e8:fb:4c:1e:e1:8d:3f:79:ca:8e:b9:3a:59:7d:04:d3:32:
5a:49:48:cc:63:94:5e:27:ff:ba:40:a5:eb:3a:c9:d4:c7:46:
de:82:2a:3e:89:e8:b6:77:c7:09:4c:2e:8b:d7:0c:cb:81:c3:
8d:2e:2b:17:96:08:1c:09:b6:7b:b2:d6:2e:56:f7:9b:35:b9:
60:71:e0:57:ad:dc:d2:ff:1f:1f:52:b9:87:43:ac:13:bb:7b:
68:09:90:dc:f9:75:33:f5:dc:ca:0d:f8:70:24:7f:35:50:65:
00:83:6a:9c:62:3d:3e:33:dd:9a:a8:be:92:8b:3a:81:52:cf:
f2:dc:b1:d9:64:c0:30:82:1d:fe:a0:4f:43:c3:9e:da:97:40:
96:c5:f2:8d:7f:62:33:d5:7a:19:c5:11:f4:14:9e:a1:f0:5b:
be:88:66:cc:4b:02:26:11:72:eb:3e:52:1c:21:06:7d:81:f0:
f0:de:77:9e:b6:8f:ac:e5:c3:24:bd:7e:e8:9f:a1:73:42:e7:
17:78:c0:64:1c:ce:e5:97:af:11:4f:48:6a:e2:fc:dd:ab:e6:
26:b9:8e:cb:0f:26:6a:e6:ad:64:f4:e8:da:12:db:10:4f:e5:
52:cc:e1:80:98:0f:7b:66:82:ff:3a:a1:42:9c:51:5d:19:d5:
60:70:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:23 2025 by rpki-client