Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yIVPTtJzPRZHUzcVg3DhwAGqhxw.roa
File: yIVPTtJzPRZHUzcVg3DhwAGqhxw.roa (raw, json)
Hash identifier: HB1CLUnUVpNFuxJMdW0ZbAJLiraZGN98UQYYyQbyyPo=
Subject key identifier: C8:85:4F:4E:D2:73:3D:16:47:53:37:15:83:70:E1:C0:01:AA:87:1C
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F098AF2ACB12B5EC684EA5862E628
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yIVPTtJzPRZHUzcVg3DhwAGqhxw.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206045
IP address blocks: 85.187.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:09:8a:f2:ac:b1:2b:5e:c6:84:ea:58:62:e6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8854f4ed2733d16475337158370e1c001aa871c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:a6:a7:ae:4e:69:5c:e6:23:ae:19:75:6e:
dc:5d:15:07:b4:2e:25:8d:c7:9d:85:c5:03:e3:eb:
12:eb:17:ed:45:05:ce:75:23:00:d2:da:89:fc:9e:
f3:26:12:86:05:76:ae:03:13:ae:14:23:84:4f:b3:
8d:f0:66:e3:30:3c:64:aa:ac:fd:d0:9d:9b:9c:bf:
79:a2:00:ee:6e:46:1c:ee:29:ad:e0:2d:45:00:00:
ac:46:d8:2a:a9:20:30:c1:87:0b:61:9b:44:98:51:
69:93:14:65:5a:7b:48:e7:57:5d:3d:44:d1:2c:77:
80:69:89:f9:49:8c:f3:9b:6f:f7:43:15:8c:50:3e:
83:8d:f6:d9:0c:0f:e0:10:93:c4:60:ca:05:c1:bd:
8e:fd:81:df:ed:7e:cd:21:85:ed:fa:4c:a8:40:28:
49:c4:62:57:63:22:72:d8:0c:46:64:fe:9f:7e:01:
aa:a2:9d:68:52:69:16:77:a4:d4:96:07:de:84:8f:
58:86:ca:07:ad:58:b6:50:e6:6a:ad:5a:73:60:57:
70:ea:5c:4b:56:a7:9b:95:86:b3:6f:46:f9:fb:a0:
7a:fd:40:a9:06:79:55:b3:66:6b:80:8c:9b:83:22:
11:19:75:c8:9e:78:88:2f:91:9e:df:d1:85:3c:31:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:85:4F:4E:D2:73:3D:16:47:53:37:15:83:70:E1:C0:01:AA:87:1C
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yIVPTtJzPRZHUzcVg3DhwAGqhxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.9.0/24
Signature Algorithm: sha256WithRSAEncryption
82:37:2b:93:a6:53:51:a3:05:d8:81:06:42:23:78:b7:1b:eb:
e5:f8:b0:e9:b5:b0:fa:a1:62:b3:b2:f3:95:59:2b:75:48:16:
3a:bb:fa:5c:6d:13:29:33:b2:41:58:06:0f:94:ce:ec:c1:c0:
9f:aa:99:0d:7e:77:32:a7:d8:54:9e:66:9d:70:71:eb:ed:f9:
46:11:8c:0f:82:6d:d0:34:fc:af:59:3e:b5:cf:a9:9a:7e:de:
98:fb:25:3f:02:aa:27:11:04:30:e9:d3:e3:8f:8b:17:91:a7:
3e:60:c9:60:fc:bb:f0:ad:be:d9:83:e5:1e:b2:24:0a:5a:4b:
9a:ad:90:af:15:b8:f2:41:13:8f:93:af:31:af:24:28:a7:58:
5d:f7:13:cf:41:bf:e0:bf:3e:97:b7:de:03:14:48:f8:62:ec:
c6:2d:6e:f5:7e:9d:b2:e1:54:c0:37:9e:35:c1:17:67:e9:63:
89:bc:2a:05:5e:50:a6:43:fc:40:bf:55:5c:76:6c:c0:de:3e:
2a:b4:c7:d0:21:3b:58:b5:53:e0:f3:c8:55:9a:e4:a8:bd:31:
09:71:df:26:a7:d0:be:d6:fb:71:d0:72:9c:1c:48:ac:f2:ad:
62:17:4d:58:24:3b:5f:f1:97:0a:49:08:f9:c3:6d:e5:e0:a7:
7d:25:4f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:20 2025 by rpki-client